Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa
File:                     1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa (raw, json)
Hash identifier:          85EWlFB8Tij2EYEf9DWFv9fnQMD4YsjjPUSTvE1ekMw=
Subject key identifier:   76:6D:45:32:1C:D2:AC:E0:58:2C:53:53:38:56:26:D0:D0:2A:38:0A
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F43285847C4AA13DE7275800C22F92180
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     16717
IP address blocks:        141.193.160.0/20 maxlen: 24
                          199.116.192.0/21 maxlen: 24
                          205.178.164.0/22 maxlen: 24
                          207.254.160.0/20 maxlen: 24
                          216.49.224.0/19 maxlen: 24
                          216.183.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:13:de:72:75:80:0c:22:f9:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=64d60a6e-8d3e-4930-bbc1-82026a048fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:9d:c1:eb:38:bb:a9:81:5d:75:43:68:15:
                    2b:67:48:c1:69:98:e3:6f:a8:19:88:e6:ba:b5:22:
                    e5:e9:8f:95:d7:2a:e7:0a:d8:f2:ef:dc:3b:de:08:
                    8e:b7:4a:d7:08:a2:1a:a1:b8:51:64:48:ac:16:72:
                    12:d3:2c:51:77:a9:d7:39:d6:63:04:fe:a7:76:1b:
                    4f:ba:92:2a:83:e2:1b:c6:07:6d:6e:53:5f:3a:55:
                    67:1c:77:8a:fd:70:77:bb:ec:90:d5:20:de:0f:d2:
                    9f:64:b6:b0:c3:45:13:23:3c:3f:32:5b:f0:41:58:
                    65:f7:b2:b5:46:67:03:a5:b6:e6:2a:f2:9e:b7:dc:
                    16:b6:a7:01:79:4a:88:56:54:ff:4d:0e:0d:06:af:
                    30:fe:e5:00:16:55:4b:16:57:71:18:ef:82:fc:bb:
                    3d:33:38:d9:d0:47:44:6c:55:87:bf:ae:cd:e0:98:
                    e8:27:72:07:cb:9f:6e:3f:24:66:cc:aa:cd:4c:eb:
                    0a:8d:c7:09:17:8a:4e:48:7b:df:2c:ef:1e:73:e1:
                    21:c8:7e:89:19:71:fc:af:6d:6d:41:b2:e9:a7:dc:
                    0a:ed:25:81:e5:63:2e:8e:11:4b:79:29:9a:69:7e:
                    97:00:6c:9e:30:13:f7:30:44:52:c5:ab:3f:5e:6b:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6D:45:32:1C:D2:AC:E0:58:2C:53:53:38:56:26:D0:D0:2A:38:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.160.0/20
                  199.116.192.0/21
                  205.178.164.0/22
                  207.254.160.0/20
                  216.49.224.0/19
                  216.183.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:09:a7:59:b6:ba:77:c8:a2:b6:b6:63:94:2e:06:7e:50:f7:
         f6:27:bf:76:cb:de:26:33:fb:bf:84:9d:b2:65:1b:ef:f9:74:
         06:bf:61:e4:52:c2:16:c9:e6:e9:1f:69:f9:0e:c8:b7:fe:78:
         c4:82:34:69:9a:f8:48:43:12:4d:f9:fd:9b:38:6e:9e:91:02:
         ac:f5:ff:8e:57:a0:1d:e1:02:c4:20:85:b8:8d:b4:12:b2:26:
         ba:bc:bf:13:cb:bf:60:13:1e:7e:a8:e4:a6:79:74:a5:9c:20:
         2b:43:a3:ec:dd:30:9b:eb:d7:f2:35:28:c7:17:65:78:3f:ac:
         c4:49:64:b3:1b:2b:85:05:53:fc:52:dc:e3:54:b2:1f:60:2a:
         2a:b9:56:3b:e2:4f:d8:e7:91:ba:a6:3f:96:24:8c:36:cc:9a:
         88:db:fc:f5:84:9a:df:d2:aa:ad:0c:9e:d1:af:3f:9f:47:07:
         87:0a:e0:01:cb:a8:da:3f:7b:1f:ba:f1:b3:e3:22:48:34:bc:
         92:22:5f:be:9b:57:82:25:f4:42:c0:43:15:6c:59:74:a5:f6:
         81:64:42:83:6f:d9:bf:03:60:81:c4:d6:fd:ad:16:f5:34:20:
         67:c4:78:21:22:14:d9:94:17:b0:f8:70:00:a1:4a:35:8d:0e:
         ae:83:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org