Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/3ae97068-494d-37c8-bf3e-385e3af58d88.roa
File:                     3ae97068-494d-37c8-bf3e-385e3af58d88.roa (raw, json)
Hash identifier:          gQMtT0mxaNfDzfLf+B8u5mTi2I/Vs+sHfILtdJOESKQ=
Subject key identifier:   0D:6A:02:D1:12:D5:22:00:05:D0:E8:93:68:9D:4E:88:9E:7C:77:77
Certificate issuer:       /CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
Certificate serial:       010D0C9F4328584785BBAEFA3A64EED4A1940340
Authority key identifier: 02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/3ae97068-494d-37c8-bf3e-385e3af58d88.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     2914
IP address blocks:        64.72.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:ae:fa:3a:64:ee:d4:a1:94:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=1f416a0a-1f3e-4b65-923f-aeacdf013779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:1a:5c:d2:a6:96:0d:30:94:bf:1e:a7:c2:
                    f1:59:f4:b2:fe:1d:d2:ca:b4:1e:81:a2:6c:59:0b:
                    9d:51:6a:b4:64:62:a5:bb:89:02:47:66:34:45:d9:
                    19:e6:34:88:8f:4a:46:86:f5:53:9d:17:d3:a4:46:
                    94:0e:37:90:c9:1c:fc:81:d2:37:5e:27:4d:05:4c:
                    7b:1b:ca:25:85:8f:12:07:1e:ca:ff:ca:c8:54:c1:
                    ec:2b:24:43:c9:8b:f3:83:67:62:2c:fb:6b:ab:51:
                    61:06:19:54:27:1c:92:60:f2:c7:33:01:83:f3:93:
                    ec:59:4d:8f:5e:22:36:0e:c5:f5:06:4c:7b:a8:86:
                    52:ae:d6:e1:9b:55:e3:a0:20:93:d1:43:7d:0c:a0:
                    95:18:fa:87:06:76:71:09:a5:5b:12:b9:52:b6:b5:
                    71:f2:aa:f8:4b:17:74:46:51:be:56:b4:cd:e4:32:
                    8c:7c:8c:3a:20:9d:35:54:49:cd:a7:40:84:2b:3b:
                    7d:98:9f:fc:29:6e:65:d9:65:57:18:ab:b2:e8:04:
                    c8:8b:24:53:63:e6:39:7d:d1:0d:65:d1:33:9f:db:
                    64:e8:94:ae:51:4d:96:27:7e:3a:17:99:45:5f:8a:
                    a7:0f:9a:3c:9e:cc:70:5a:ad:c2:89:15:7d:c4:15:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6A:02:D1:12:D5:22:00:05:D0:E8:93:68:9D:4E:88:9E:7C:77:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/3ae97068-494d-37c8-bf3e-385e3af58d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.crl

            X509v3 Authority Key Identifier:
                keyid:02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:6e:ce:d5:98:28:d8:0f:1a:c9:06:80:5c:cb:f3:f6:2f:
         86:53:44:07:bd:e9:76:1b:51:cd:b4:c6:b4:0c:f5:c6:79:74:
         68:b6:9c:fa:69:3f:6c:1f:b0:86:05:b0:01:53:06:54:07:7e:
         c7:5d:d3:23:d5:2c:45:66:84:09:69:54:32:b0:24:f9:21:49:
         ff:82:3a:2b:bf:fa:23:3c:26:68:da:46:85:42:1d:94:79:ac:
         4c:ab:01:53:dc:bf:60:5c:04:61:5b:a5:89:a4:9d:33:24:a3:
         77:16:a0:f4:b5:8c:41:ab:66:f6:fd:52:ce:ef:22:0e:61:15:
         a6:ba:05:d0:92:2c:4e:6d:b0:16:45:34:cb:6c:91:61:f4:5b:
         5a:1e:d8:df:ce:04:44:2b:eb:fc:47:5f:a6:8e:79:be:e7:c2:
         c9:60:e5:9f:33:9c:64:e9:ca:f5:fa:c9:c1:bd:74:03:df:87:
         b9:b4:b3:3a:af:57:60:e4:6b:85:eb:46:99:1d:a3:89:c7:68:
         b2:b5:63:32:9c:06:93:df:3b:a9:f6:2e:f2:6a:bf:69:07:03:
         73:c4:44:a2:02:89:9d:4c:c1:a9:73:56:b2:d8:11:c1:e6:0e:
         75:07:b2:c0:95:b7:06:e6:d0:5b:ee:c9:dc:1e:2e:64:10:51:
         19:0e:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org