Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
File:                     d1b03864-302d-3895-a9cf-9c42e250ce86.roa (raw, json)
Hash identifier:          f/gjBldm6jBWi8zImqtbeTYWpWrEbcRqLOYdC1IbVw0=
Subject key identifier:   95:FF:F6:1E:D5:8C:0E:E8:51:01:DE:2C:EE:93:34:0A:36:12:5A:F4
Certificate issuer:       /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
Certificate serial:       010D0C9F43285847362B5968B1C9DD5FB586B180
Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     14860
IP address blocks:        64.88.192.0/19 maxlen: 24
                          173.209.64.0/20 maxlen: 24
                          192.154.132.0/22 maxlen: 24
                          198.203.0.0/22 maxlen: 24
                          208.89.24.0/22 maxlen: 24
                          208.123.96.0/20 maxlen: 24
                          2604:5680::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:59:68:b1:c9:dd:5f:b5:86:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=37714576-1141-451a-b42b-7f39be8d9e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:91:8e:8d:c5:7b:a6:6f:85:96:bf:ca:32:
                    76:cb:87:05:c2:5b:36:40:56:2d:08:75:52:1f:15:
                    a6:73:c2:c5:d5:1a:03:26:5c:9f:d3:12:4a:ca:5d:
                    15:89:a8:31:7f:75:45:87:69:2e:0b:de:9b:ef:0a:
                    3f:eb:c1:8c:cf:6b:3e:19:c9:c5:5c:37:c7:59:a7:
                    bd:c4:50:a6:f7:12:fe:0f:f5:01:c5:17:72:30:11:
                    1b:db:13:51:bb:99:3a:48:bf:7b:40:bb:56:e0:90:
                    ba:60:c6:7f:c7:ce:6a:11:d4:3f:dc:9a:f7:7a:39:
                    54:a5:ea:79:e5:33:fd:87:f4:3b:8a:b6:51:26:12:
                    55:6f:db:11:18:4f:f8:61:9d:bd:c8:ae:58:dc:da:
                    a2:0c:76:56:01:ae:07:ff:7a:13:d0:39:a5:8a:f4:
                    42:84:9a:f7:35:8e:99:f3:4e:33:49:f2:50:e5:ae:
                    f1:f3:f4:74:89:16:20:7c:19:36:b0:99:71:da:62:
                    20:5b:80:c2:70:5a:f0:2a:5e:29:e1:f7:b4:a1:06:
                    79:e6:54:60:03:97:02:b8:3c:0c:a7:55:1b:23:58:
                    05:f6:51:41:4c:6a:ef:df:21:93:f9:12:77:c9:d7:
                    91:ba:67:c3:4c:8e:75:1f:71:e1:b8:aa:ea:71:c2:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:F6:1E:D5:8C:0E:E8:51:01:DE:2C:EE:93:34:0A:36:12:5A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl

            X509v3 Authority Key Identifier:
                keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.192.0/19
                  173.209.64.0/20
                  192.154.132.0/22
                  198.203.0.0/22
                  208.89.24.0/22
                  208.123.96.0/20
                IPv6:
                  2604:5680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:3e:fc:38:71:13:df:01:58:84:59:df:d3:56:56:9a:cf:
         a5:26:7e:58:0a:cb:e0:c1:17:74:0f:f5:2c:8a:b2:e1:35:8e:
         80:02:45:38:aa:e3:8f:85:fb:ec:02:45:b4:27:89:cb:42:02:
         84:6e:8a:7d:a8:1a:dc:ee:ac:f5:f6:c0:68:b2:2d:d1:e4:b8:
         05:1a:8e:72:8b:98:3b:2c:07:cb:d5:1c:fa:a6:46:09:5c:4f:
         24:3b:25:aa:28:5d:21:6d:8f:64:9d:f6:27:b4:57:73:6a:d5:
         d5:78:8d:25:b6:63:95:cb:fb:c6:53:77:25:a9:7b:18:b1:ae:
         bf:c1:32:0c:7d:cf:b0:5e:19:39:dc:3c:99:f8:f6:7e:fb:39:
         10:19:6e:1e:cb:35:f0:69:0a:e4:df:a5:91:9e:db:83:8e:d7:
         6e:25:42:43:81:7e:ce:c0:2e:41:62:b0:3c:b7:a2:0e:00:e9:
         2b:dc:50:b1:bc:a4:c2:63:fc:f7:08:7f:e8:09:b1:03:be:fe:
         68:6b:bc:8d:a9:91:9c:c1:64:8f:82:cd:d8:8e:bd:9c:6f:fa:
         aa:16:5f:a8:a5:4d:13:6c:f1:7e:b2:d7:16:4c:51:a6:f0:88:
         6e:a4:4d:26:f5:0d:85:a5:2d:f5:ab:33:1b:89:51:f8:52:e3:
         4b:3f:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org