Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
File:                     fe196e76-1d06-3092-a96a-07322f606f5e.roa (raw, json)
Hash identifier:          J6uKvDxhQ9EPVuIIufYLRuvErYRHCjY4oc49R4y+O+c=
Subject key identifier:   E4:90:4B:C0:C1:04:30:6A:2D:20:60:B0:30:07:54:E7:C5:CB:50:97
Certificate issuer:       /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial:       010D0C9F432858475EA61FD72BFC03C9C55D58D9
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     54643
IP address blocks:        23.111.64.0/21 maxlen: 22
                          23.111.72.0/22 maxlen: 23
                          66.85.28.0/22 maxlen: 23
                          67.231.16.0/20 maxlen: 23
                          104.36.148.0/22 maxlen: 23
                          104.193.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:1f:d7:2b:fc:03:c9:c5:5d:58:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=b33cd497-577d-4c55-b49f-de1f6687971f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b1:8b:e7:58:a5:91:14:ac:33:e8:6b:f2:c3:
                    f5:c8:8d:b8:ef:7a:a8:d4:87:f2:4e:9a:f4:ae:f5:
                    6d:37:f5:bd:3d:a2:54:ac:c8:19:2b:b4:00:f6:64:
                    34:3b:22:62:a8:ec:d0:b8:da:2d:2c:1a:2a:79:0a:
                    6d:c6:21:5b:48:39:15:c2:85:84:63:aa:b1:7c:d0:
                    a2:e0:a3:23:12:4b:76:e3:92:9d:cd:12:36:5a:f0:
                    3f:26:63:2a:c8:57:8b:0b:b3:5c:df:bb:a2:78:23:
                    5d:95:cf:eb:81:cb:79:ce:1d:5b:ec:a8:87:b2:88:
                    9e:75:b0:50:41:ec:8d:1f:14:9b:89:ce:f0:f0:a2:
                    28:8f:f7:2c:2b:ad:ae:f0:4d:97:c5:9c:d7:2f:19:
                    b9:95:de:03:9b:c9:b9:1e:67:d1:5d:e5:98:eb:eb:
                    50:26:7e:8a:db:a7:ce:2a:19:b7:09:89:1d:e2:b6:
                    ee:97:70:fb:65:87:65:75:bd:59:e6:6b:a9:47:b4:
                    e6:7c:ef:78:34:51:df:3f:03:a2:e6:af:d2:8f:c5:
                    80:f7:57:ba:f9:7e:23:0c:75:3e:b6:e1:c0:32:ca:
                    8f:e8:60:d2:ce:4d:0e:11:5a:13:9f:91:62:24:63:
                    65:df:42:56:6a:4f:47:90:4a:cd:10:53:a2:14:f4:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:90:4B:C0:C1:04:30:6A:2D:20:60:B0:30:07:54:E7:C5:CB:50:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl

            X509v3 Authority Key Identifier:
                keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.111.64.0-23.111.75.255
                  66.85.28.0/22
                  67.231.16.0/20
                  104.36.148.0/22
                  104.193.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:fc:79:74:9a:e2:c2:bb:78:a9:0c:ad:5e:07:a3:63:ab:3c:
         27:aa:24:86:24:1f:2f:ef:b3:0c:f9:d8:8b:ba:79:d7:cf:0e:
         85:3e:36:1d:5a:aa:e1:d4:aa:7a:bd:90:04:e8:90:9e:a4:c6:
         58:8f:6d:d1:10:42:b0:5b:e9:12:b4:e4:30:a2:7b:ba:4d:df:
         d2:64:dc:cf:c9:39:3d:ed:dd:7f:85:39:42:55:8b:0d:b5:39:
         b9:3d:c1:9e:9e:e4:7e:40:20:cd:26:15:ae:26:df:3a:a2:35:
         53:e2:83:b7:44:35:b9:88:e3:0d:f0:e0:77:87:e8:d0:a5:88:
         aa:53:be:51:b7:8a:a9:32:a1:86:e1:2c:4d:a4:e9:9a:eb:5d:
         45:6b:fe:9e:57:0b:86:59:b1:7b:e9:cc:75:66:ee:31:77:6c:
         0f:0a:30:d0:5c:5c:4d:6f:95:d4:a4:2c:3c:11:b0:24:2a:01:
         6e:f6:ce:9c:b3:77:34:1b:60:80:cb:87:56:1a:29:88:60:68:
         f9:fe:67:20:6c:ae:fb:e4:5c:a3:c5:68:92:65:b3:06:9c:f7:
         87:67:0b:23:5a:6a:cb:ca:fe:52:b2:62:3f:13:36:14:4e:39:
         f9:93:fe:24:1d:4d:6c:a1:b8:95:e8:5b:f1:b9:db:fd:ee:56:
         33:21:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org