Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/72100194-b99c-3141-8253-08b1bd43b1ae.roa
File:                     72100194-b99c-3141-8253-08b1bd43b1ae.roa (raw, json)
Hash identifier:          iinEAW0lzBQmQ82VhT9Tf8g4B2QnLCYLuQzqJRmMvuw=
Subject key identifier:   AA:75:3F:90:D2:F6:BF:9E:9A:2C:78:F1:38:85:4B:02:08:04:D5:D4
Certificate issuer:       /CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
Certificate serial:       010D0C9F432858475910B2D42AAEC004402BA1C0
Authority key identifier: B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/72100194-b99c-3141-8253-08b1bd43b1ae.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     2914
IP address blocks:        64.49.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b2:d4:2a:ae:c0:04:40:2b:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=28f833e5-dfb5-41e8-ab5f-2024e7af6962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:70:ee:7d:d5:df:de:b4:91:e8:0f:51:c1:
                    40:cd:c5:af:92:fc:bb:71:25:33:39:16:7c:ed:5b:
                    fd:78:a0:e4:c8:e6:c8:c7:9c:65:49:61:2f:55:10:
                    d4:3c:09:fe:d7:4b:6c:47:86:64:3c:55:56:08:bc:
                    3b:4d:8e:36:db:c5:2d:85:13:3d:33:75:ba:c0:82:
                    b7:ab:d1:3c:1d:d6:69:93:72:0a:85:76:a7:b0:76:
                    ae:24:fc:df:a4:b9:65:09:b9:07:3c:c4:44:36:84:
                    d8:72:85:8e:cb:05:a2:3c:45:dc:93:91:a3:22:04:
                    aa:8d:ed:5b:ea:e5:51:12:12:a3:02:14:6f:0f:31:
                    97:11:05:e5:17:0f:ab:cb:8b:d7:ab:bf:62:3d:dd:
                    cf:ff:d5:8c:2f:71:e2:9d:fd:e7:43:92:d6:79:79:
                    82:31:13:82:d9:f9:9a:1e:c2:c4:43:c5:7f:72:f5:
                    f6:31:58:eb:78:62:42:59:2b:e3:97:f1:92:09:af:
                    1f:dc:96:4a:44:09:75:1c:1f:22:2a:85:0e:f6:41:
                    a6:57:b5:22:18:d4:e7:0b:48:69:c2:5d:72:ea:2b:
                    d8:84:5c:fd:15:82:69:39:6a:66:35:46:2d:9e:92:
                    db:47:8f:ef:df:7c:ca:da:73:24:69:97:8e:65:31:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:75:3F:90:D2:F6:BF:9E:9A:2C:78:F1:38:85:4B:02:08:04:D5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/72100194-b99c-3141-8253-08b1bd43b1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.crl

            X509v3 Authority Key Identifier:
                keyid:B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:89:35:eb:1b:18:5f:06:6e:66:f0:75:7d:7b:07:f8:29:
         e8:b1:5e:d1:25:f0:44:3a:c4:4f:85:8c:02:91:40:f6:6a:3e:
         4c:d8:6b:4e:7b:31:8d:8a:bf:ff:f0:fe:02:f0:37:d3:34:74:
         7c:48:4b:7c:68:c3:ac:cc:cd:10:ff:c9:b3:e5:7e:fb:45:c0:
         95:2c:14:8d:02:35:0a:0f:26:61:d9:ff:17:41:1d:2e:6a:06:
         e8:2b:ab:ce:17:b3:46:f9:ea:79:c5:69:7b:00:3e:bf:04:e6:
         eb:33:a2:38:80:1f:f7:9e:79:1a:ee:4d:b3:b7:19:36:b4:68:
         67:57:ff:85:da:1c:43:5a:d8:4d:34:cf:f4:00:ad:4e:f9:3a:
         9f:1c:10:9a:10:3d:66:43:42:8b:64:33:d5:07:44:43:10:e7:
         8a:95:fc:7c:22:6f:4a:77:bd:88:57:aa:4f:41:7c:ea:23:eb:
         d4:ae:49:89:87:3a:d5:9f:1b:2d:56:0b:be:df:68:12:60:55:
         62:4d:1c:f3:96:06:c5:7d:56:20:7e:aa:3d:f2:53:2d:29:94:
         b3:9c:a9:29:a7:60:0a:1b:79:41:37:34:b7:11:f9:b0:1c:9e:
         2a:6a:d5:ba:bc:36:f8:a3:a6:db:01:dc:38:d0:a4:c1:57:2e:
         4f:eb:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:32 2024 by rpki-client on console-ams.rpki-client.org