Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa
File:                     e8618f4f-7894-3379-ba43-706d25d57bf7.roa (raw, json)
Hash identifier:          NwRN29EbSnx+ZoGox67jUAUFnzdhXg3ZKZxhl1Dl1Ew=
Subject key identifier:   AB:AA:3F:5A:6E:9C:79:56:BF:3E:54:BE:96:C4:93:4D:6B:10:61:CD
Certificate issuer:       /CN=9696ca72-0d62-4fc3-b383-c596c4f11958
Certificate serial:       010D0C9F4328584726D0830CEAC0246C216F66B0
Authority key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     3562
IP address blocks:        134.252.0.0/16 maxlen: 32
                          146.246.0.0/16 maxlen: 32
                          192.73.208.0/24 maxlen: 32
                          192.160.228.0/24 maxlen: 32
                          198.206.219.0/24 maxlen: 32
                          198.206.221.0/24 maxlen: 32
                          204.238.65.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:83:0c:ea:c0:24:6c:21:6f:66:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9696ca72-0d62-4fc3-b383-c596c4f11958
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=f546b1b1-4edd-4871-9ec8-1ac765774284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:54:3b:a6:c3:12:11:42:2e:69:fc:e2:b1:
                    f6:82:fe:03:f6:c4:3d:fb:d3:a1:42:f4:bb:9f:d4:
                    ce:f3:d6:c8:c4:68:6d:a9:21:eb:f4:d4:62:94:bd:
                    64:e4:0c:d0:33:be:0d:6b:27:f3:85:88:4d:8e:98:
                    96:2d:a5:c4:33:cc:b0:2d:46:3a:1d:c6:b9:35:85:
                    1e:e0:2c:8f:6a:7a:03:25:6c:a5:29:86:4f:54:08:
                    a7:3c:e4:43:cf:a9:42:a5:9a:e9:5f:da:ed:30:28:
                    a4:da:c9:c1:db:11:e0:26:10:cd:cb:68:5e:db:9c:
                    d1:89:e6:26:50:ef:0f:07:82:0f:24:db:41:34:46:
                    88:8d:7d:6f:e6:58:a7:a9:6f:88:09:00:11:c7:80:
                    d1:6d:60:50:17:7e:d8:06:6f:fc:15:24:28:c4:9e:
                    34:f8:8e:1e:8f:46:98:66:84:f8:60:d4:be:90:d2:
                    72:a8:54:55:40:19:a6:6a:5b:ca:08:14:df:da:58:
                    b7:95:c8:ae:f3:24:72:30:b1:cb:c3:ad:f0:0a:a1:
                    01:da:9f:72:79:d6:27:41:9c:21:25:16:33:5d:c0:
                    4d:3b:85:89:0d:95:0c:ba:be:d0:12:ca:2f:29:cc:
                    ff:ea:78:54:b2:50:02:83:11:49:3c:30:e3:6b:02:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:3F:5A:6E:9C:79:56:BF:3E:54:BE:96:C4:93:4D:6B:10:61:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/e8618f4f-7894-3379-ba43-706d25d57bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl

            X509v3 Authority Key Identifier:
                keyid:2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.252.0.0/16
                  146.246.0.0/16
                  192.73.208.0/24
                  192.160.228.0/24
                  198.206.219.0/24
                  198.206.221.0/24
                  204.238.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:f3:db:f8:8f:c5:80:60:7e:8a:62:5f:fb:a5:20:5f:0b:
         ef:c6:1d:4c:e6:6c:fd:0e:c9:0a:c7:00:f7:c5:3d:fd:dc:f7:
         5c:70:94:9d:ef:66:f2:0f:6e:ad:f1:bc:0b:88:fc:94:53:ba:
         4b:6b:7a:93:d7:f6:1f:bb:9f:db:f5:8a:3d:50:75:ea:cf:c4:
         41:2b:86:20:2a:34:eb:f5:c4:85:12:6e:86:aa:d1:af:b0:1a:
         40:07:a4:3d:86:a2:75:44:a9:43:c5:c2:a0:37:57:37:56:1e:
         64:42:ae:04:a3:30:cd:5d:35:22:aa:e2:93:b4:80:33:b1:3f:
         ef:1c:d0:a1:ff:74:d6:a2:05:b6:07:4c:ae:f7:ec:d2:1b:07:
         3b:ce:eb:1b:38:55:9d:bf:2c:9b:2f:1a:22:c4:91:11:d7:69:
         91:35:fd:6e:ba:40:0a:53:e8:28:eb:b2:d9:09:3f:9d:e6:6b:
         c6:ec:8b:9d:20:9e:a9:0d:7f:d6:c6:69:4b:ff:6c:72:68:c6:
         8a:6f:5f:3a:e6:b7:e1:4a:59:64:b7:fa:13:a9:0b:16:b4:f6:
         ce:4f:f9:19:87:7c:bb:35:87:19:f3:d1:03:53:bd:f5:5f:05:
         95:22:55:e4:85:b7:2d:33:e7:c2:19:ca:47:fc:c5:65:0e:fc:
         d4:14:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:31 2024 by rpki-client on console-fra.rpki-client.org