Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa
File:                     e736234e-dc90-3e59-9245-a6a07d759011.roa (raw, json)
Hash identifier:          ccVGVRwHyANq3k3yE4hALceNDfPh9P2f9yu343PQO0A=
Subject key identifier:   39:F4:B6:2A:DD:C6:98:37:FD:64:E2:55:F4:89:86:5A:90:EF:C2:D4
Certificate issuer:       /CN=78a35d59-5267-4ec6-965e-2346bd05cddd
Certificate serial:       010D0C9F4328584782F10368F456965AE1ACCC00
Authority key identifier: 91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     10750
IP address blocks:        64.111.35.0/24 maxlen: 24
                          64.111.42.0/23 maxlen: 23
                          64.111.44.0/24 maxlen: 24
                          64.111.58.0/23 maxlen: 23
                          64.111.61.0/24 maxlen: 24
                          65.255.134.0/24 maxlen: 24
                          67.221.200.0/22 maxlen: 22
                          67.221.204.0/23 maxlen: 23
                          67.221.206.0/24 maxlen: 24
                          69.27.192.0/24 maxlen: 24
                          69.27.197.0/24 maxlen: 24
                          130.51.36.0/22 maxlen: 22
                          199.127.48.0/21 maxlen: 21
                          209.152.155.0/24 maxlen: 24
                          216.145.145.0/24 maxlen: 24
                          216.145.148.0/23 maxlen: 23
                          216.145.150.0/24 maxlen: 24
                          216.145.155.0/24 maxlen: 24
                          216.146.253.0/24 maxlen: 24
                          2605:2940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:03:68:f4:56:96:5a:e1:ac:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a35d59-5267-4ec6-965e-2346bd05cddd
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=eb0dfeab-c31f-4e6c-bda5-009c991089cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:0b:cc:1d:58:eb:f2:3e:53:81:88:53:7f:
                    21:06:67:3c:5b:04:f7:41:63:eb:25:b5:14:72:21:
                    94:7b:99:8e:e9:c0:59:c5:eb:4d:09:ca:43:7e:c6:
                    ae:23:ad:2c:60:a3:c8:b7:3f:ea:f3:c8:c0:9d:93:
                    7a:e7:14:32:cb:0e:5d:61:0d:f4:ca:8f:37:b3:f5:
                    33:ee:e2:f3:fd:fe:68:b6:ca:e1:27:4c:ef:76:b6:
                    7a:0d:fe:6e:f5:35:07:88:60:84:4d:d8:92:0a:3e:
                    60:9f:3b:a8:ab:98:6f:ab:dc:6b:9e:3b:d8:8b:ef:
                    c5:4f:97:65:53:49:b1:24:d7:eb:68:98:85:2d:30:
                    fe:bd:0a:78:d0:21:52:8f:d3:67:e1:8e:d7:f2:84:
                    dd:5e:cc:57:41:4c:fe:9f:b3:5c:2e:cc:17:a9:3b:
                    f4:a7:9e:6f:46:f3:cb:e6:ee:ae:1d:35:2a:69:cc:
                    f0:76:eb:30:cb:70:f0:f8:bc:09:5d:c2:3f:db:97:
                    0b:95:18:09:6f:98:64:75:1f:6e:38:69:f6:8b:a0:
                    2e:90:f2:e2:af:18:8d:48:90:d2:de:c6:d4:a3:b4:
                    15:87:51:c3:16:09:5e:9f:8e:ca:c3:cd:6b:60:52:
                    ff:22:3c:b4:3c:67:da:91:5b:e6:49:2f:8e:5a:19:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F4:B6:2A:DD:C6:98:37:FD:64:E2:55:F4:89:86:5A:90:EF:C2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/e736234e-dc90-3e59-9245-a6a07d759011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl

            X509v3 Authority Key Identifier:
                keyid:91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.35.0/24
                  64.111.42.0-64.111.44.255
                  64.111.58.0/23
                  64.111.61.0/24
                  65.255.134.0/24
                  67.221.200.0-67.221.206.255
                  69.27.192.0/24
                  69.27.197.0/24
                  130.51.36.0/22
                  199.127.48.0/21
                  209.152.155.0/24
                  216.145.145.0/24
                  216.145.148.0-216.145.150.255
                  216.145.155.0/24
                  216.146.253.0/24
                IPv6:
                  2605:2940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:5f:d0:5e:81:f8:75:b7:6d:e6:ed:21:3d:c1:af:26:29:
         dd:cc:9b:7a:28:49:cd:80:62:c9:5c:1c:84:68:dd:40:f1:80:
         c9:7b:80:8e:02:17:38:48:aa:08:ab:e8:af:21:c5:04:58:cf:
         8b:fd:dc:12:9b:f6:8d:8c:88:f1:ae:45:c6:4d:af:bb:6c:af:
         af:5c:7e:ac:89:f5:a6:48:ae:44:75:46:01:19:70:c2:8c:be:
         7e:c9:22:9c:16:c0:c3:39:5b:38:1f:53:0f:e7:3a:2c:d7:b4:
         c8:30:b0:d2:75:23:ef:6a:67:b3:43:2b:ea:d9:44:bb:fb:b5:
         d0:33:e9:31:07:ce:f7:01:23:18:cf:76:66:10:83:5b:4c:cc:
         91:bb:e9:ff:9f:11:a3:d8:72:b6:7d:a0:37:35:4e:51:8f:56:
         74:1c:94:80:7a:79:f1:86:62:aa:14:5b:9c:d0:c7:2c:64:58:
         8f:62:04:ad:3f:73:a5:4d:c2:b5:f5:7c:68:8a:35:5a:44:e7:
         59:87:26:12:7a:d6:eb:4f:12:8f:e2:ed:d3:33:86:52:1f:3f:
         94:94:17:b2:eb:90:d6:87:74:40:62:d1:d4:a7:82:c9:bf:05:
         5f:a5:73:ed:b2:a9:92:31:70:0f:78:52:c0:38:ae:10:35:82:
         75:d4:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org