Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
File:                     8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa (raw, json)
Hash identifier:          jVPAuhxzQZORwMg0MX9OLou7UYfgbjBiJJGYwMNpxww=
Subject key identifier:   8E:20:0F:71:3C:B5:51:90:97:2E:B9:66:7E:DF:18:BC:F1:40:F3:61
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F432858473D25F85A977CDAD4CC36D780
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        67.226.220.0/24 maxlen: 24
                          67.226.222.0/24 maxlen: 24
                          204.110.221.0/24 maxlen: 24
                          204.110.222.0/24 maxlen: 24
                          204.110.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f8:5a:97:7c:da:d4:cc:36:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=ecfc3ae8-e436-46b9-990e-6a402a561b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:24:ce:d4:3d:41:19:85:a5:b4:7b:e6:5d:
                    ce:5e:84:47:b6:8b:de:81:09:28:4e:40:4e:29:dd:
                    8c:e2:7d:49:b7:aa:90:30:13:86:38:9d:f3:81:b9:
                    b2:e5:c0:36:ac:37:33:25:2e:57:5b:c1:87:d0:31:
                    04:03:8a:3d:70:c4:ce:d9:31:71:da:9d:71:9b:68:
                    ce:09:26:a5:14:7c:92:99:1c:ba:57:57:44:59:3a:
                    19:4d:e1:5a:de:70:4b:8c:13:57:e6:b0:02:0c:d1:
                    1d:6a:bb:8f:37:9c:b1:ec:18:e0:d5:cb:40:60:69:
                    f4:e6:37:59:d7:01:7f:e2:8d:67:24:25:04:20:33:
                    cf:4e:94:89:1a:ba:79:1a:e1:aa:73:cd:76:9c:7d:
                    91:6a:99:ae:03:54:74:02:45:c7:c3:26:e4:92:c5:
                    37:33:e2:7e:49:bb:99:25:cb:e0:64:05:a1:2c:de:
                    dd:c6:42:da:a8:55:e7:63:59:90:18:f1:81:97:f2:
                    87:73:ae:c8:aa:03:f8:5f:19:ea:dd:f8:a3:ad:6b:
                    f3:a5:7d:9c:77:e2:b5:6d:21:55:a7:47:3e:4a:95:
                    4a:62:5c:58:95:39:71:7c:5c:18:58:f3:09:09:b3:
                    7d:e6:98:34:49:c3:02:ef:b4:6d:55:19:af:82:b0:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:20:0F:71:3C:B5:51:90:97:2E:B9:66:7E:DF:18:BC:F1:40:F3:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.220.0/24
                  67.226.222.0/24
                  204.110.221.0-204.110.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:76:ba:60:f8:ef:82:39:4f:ea:1a:8a:83:c0:3f:0b:c8:59:
         27:ad:91:43:49:8d:9f:bc:a7:21:11:c4:33:18:88:a6:b2:fc:
         bd:f0:a2:31:8e:97:f7:94:2c:4a:69:de:2f:2d:df:88:7a:25:
         12:db:80:ea:bb:53:6b:b9:c8:e8:fd:b5:87:27:85:2d:e5:ae:
         d2:ac:57:c1:8e:02:11:8a:3d:08:cb:f0:36:e4:6a:99:27:8c:
         dc:cd:1e:f7:8b:b4:c7:50:55:e1:c6:47:b0:dc:4f:67:d3:e8:
         bc:a9:f0:23:f9:d4:31:29:bf:b0:b6:bb:8c:2c:13:bf:2e:e6:
         df:ad:ae:db:14:13:4a:7a:64:bc:9d:0f:e1:8b:f0:43:ed:3e:
         42:03:0d:c8:44:5d:89:f1:cf:fc:ed:ad:6b:d7:ee:53:b7:97:
         c5:a2:e7:3d:12:09:4b:0a:2a:e6:e3:07:e7:ce:63:94:48:2e:
         6d:bf:d6:12:d8:50:ce:07:20:e1:0b:2d:4c:c4:8d:ca:cc:f0:
         dc:de:58:c6:ad:99:15:6a:29:25:1f:eb:77:7b:f8:0e:86:5c:
         a3:8b:fe:04:08:94:8a:d5:db:31:75:f2:8e:9c:87:77:c0:15:
         27:8c:5a:20:b1:c4:99:1a:52:29:50:48:38:9e:df:1e:c4:33:
         79:1b:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org