Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa
File:                     0436a35f-9148-3f28-8e51-98ce1b0011b0.roa (raw, json)
Hash identifier:          u9jAgAAsN93O8CES/f5yXWE+EOmWBBgiM+G5NnXY7Oc=
Subject key identifier:   2C:E2:20:4D:9F:6E:15:94:37:42:4F:C2:CE:50:CF:77:A6:23:B5:1C
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F432858476C9DB362572ED26E4B4DC2A0
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     13335
IP address blocks:        67.231.0.0/20 maxlen: 24
                          208.94.156.0/22 maxlen: 24
                          216.82.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b3:62:57:2e:d2:6e:4b:4d:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=98bad75e-b813-4790-a682-5032cfe3b8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f1:cb:58:1a:e0:79:d0:f3:91:e5:21:05:d1:
                    2a:f1:1c:b5:0f:5d:33:7b:89:84:15:13:31:e6:87:
                    f9:96:3d:61:42:e1:1f:fb:1d:62:df:84:85:15:6b:
                    69:e7:23:53:46:d9:36:c0:01:e7:f9:01:a9:93:56:
                    d3:1e:5c:6d:33:f1:bd:cb:e7:ea:09:62:6b:80:a9:
                    cd:28:d8:c7:68:05:d3:5c:d9:23:a4:6f:19:d3:b6:
                    8c:97:b8:0d:0a:6e:9c:8a:e4:d0:86:db:6e:f1:2f:
                    8f:1a:89:b0:43:14:af:62:f6:06:77:87:4f:95:8b:
                    07:80:00:42:96:12:a4:61:ae:6d:c8:ca:78:67:47:
                    ea:0c:b7:79:c8:92:86:e8:ef:1d:b5:93:11:58:3c:
                    58:30:95:95:68:d5:ae:0f:2d:fd:ff:cb:69:d6:72:
                    9e:fe:7f:f2:c1:5e:3a:6b:c5:0f:04:ff:c5:05:32:
                    4b:1c:0d:4a:5d:e7:a3:26:f4:a1:2d:24:8d:fa:47:
                    55:de:7b:65:56:53:9f:2e:53:6c:42:73:30:48:ce:
                    23:f0:e2:a0:e3:fa:05:19:7f:89:a2:8d:f7:62:a1:
                    74:93:75:99:f0:d8:54:20:dc:b6:bd:0b:2d:73:29:
                    d3:b0:ba:8b:c3:f8:3b:79:db:ed:16:29:cd:99:63:
                    0f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E2:20:4D:9F:6E:15:94:37:42:4F:C2:CE:50:CF:77:A6:23:B5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.0.0/20
                  208.94.156.0/22
                  216.82.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:a2:e6:a7:84:71:c1:fa:df:ef:d9:a6:2f:e5:3f:64:03:
         70:08:fe:c1:10:3c:88:00:68:58:ea:2c:a9:fd:a8:5d:cb:91:
         66:98:aa:21:b2:0a:38:46:46:3c:1c:38:1f:43:d9:75:bb:0e:
         6c:34:94:f0:93:06:15:2f:9a:b9:0b:54:3b:d7:48:0c:53:a0:
         41:ee:b4:85:8b:04:ba:29:9f:a4:e2:8e:50:32:ae:52:71:e0:
         a5:59:c1:e2:dc:f0:37:a7:06:62:f3:87:a7:ae:ad:07:5f:75:
         53:04:f5:b9:92:0b:e9:ac:99:e6:a2:2c:98:99:e1:a4:2c:60:
         6e:d2:64:39:dd:43:45:a5:e6:6a:a2:1f:90:45:02:eb:8b:ba:
         9e:8e:e7:36:be:7c:2c:31:0e:55:cc:d7:b5:22:75:19:e8:63:
         b9:6e:11:c9:ea:53:76:41:a8:9d:a3:16:cc:00:59:a0:27:5d:
         54:30:1b:10:ab:eb:85:3a:0d:75:d4:90:a8:1c:0e:f3:85:f0:
         94:23:58:a4:63:55:ad:43:29:4b:34:bd:61:2e:f1:e0:b7:d3:
         73:de:58:ca:72:ae:97:54:3a:f6:49:0f:5b:18:5e:fe:c6:75:
         16:30:64:7d:1c:0a:67:10:71:a1:b4:2b:ce:74:de:35:db:8c:
         6c:12:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:29 2024 by rpki-client on console-fra.rpki-client.org