Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa
File:                     37bfb549-e50c-3d21-94d6-f38459157fbc.roa (raw, json)
Hash identifier:          Q5p8UtGObghQ09feH2eeww2+P4hxZDMSngNMXRNwV34=
Subject key identifier:   1A:FF:3C:0B:9E:36:0A:9F:C0:E9:43:55:54:A0:26:12:67:94:5B:D7
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F43285847A041488123A1EE4BB710E300
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     23274
IP address blocks:        64.6.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:48:81:23:a1:ee:4b:b7:10:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=451b0924-fbc1-4c0a-9ce8-c5fbb3b19c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9b:23:9f:53:4c:69:03:af:50:55:43:5a:77:
                    ea:6d:3f:60:74:2d:01:98:c6:90:66:1c:a4:f0:14:
                    3e:f6:c0:28:fa:8b:5b:f7:96:07:ad:12:4d:f9:12:
                    49:e0:58:cb:5b:2f:8a:c9:7e:5a:5d:9f:3a:55:b6:
                    a5:0c:cb:41:cc:72:70:10:41:e6:08:41:c9:10:9f:
                    6d:98:c3:92:35:02:08:c9:56:35:05:5e:2d:c0:48:
                    fb:a4:3d:18:8a:15:ba:18:3a:3b:61:09:28:79:e3:
                    71:40:14:71:55:c2:5e:99:42:6c:88:15:40:3a:9d:
                    6c:4b:84:12:40:72:b4:4d:2c:82:93:14:76:2d:5d:
                    41:33:24:44:1c:4d:7b:30:ad:82:12:9a:ae:b4:1c:
                    8e:6a:7b:fa:02:00:1d:5f:bf:59:38:a3:a1:92:a4:
                    a7:36:b5:51:1c:1f:3d:7e:cb:fd:0e:e4:a4:c6:8b:
                    05:a4:cc:83:41:d8:2a:50:27:70:ed:61:52:1d:83:
                    3d:22:62:f6:81:c1:b0:54:7e:50:52:4e:3f:fb:96:
                    f3:4e:59:df:30:e8:88:b5:8a:d7:f3:2a:26:e8:c7:
                    61:bc:f0:ab:82:7f:75:c9:17:d7:35:88:31:4f:f9:
                    ca:26:6d:17:7b:18:c9:57:de:f3:35:26:23:73:ae:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FF:3C:0B:9E:36:0A:9F:C0:E9:43:55:54:A0:26:12:67:94:5B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:5a:fe:4c:8f:60:38:03:18:b1:b0:a2:10:dd:1a:c9:1a:
         a0:3e:92:bb:4c:aa:bf:10:81:14:60:02:23:38:55:69:42:0e:
         04:37:e8:b8:d1:87:af:80:ae:bc:12:83:d1:7f:84:1a:af:cf:
         d8:77:8d:dc:f3:a8:8a:af:d8:36:46:9e:cc:0e:c0:eb:0e:1f:
         2e:49:2d:fb:ce:ad:6f:cd:98:e9:6d:21:36:cd:b2:bd:e6:73:
         04:07:89:98:2b:11:30:49:dc:36:8e:e0:33:b4:b5:44:07:9f:
         e5:6b:de:27:b1:78:a9:ec:25:4a:75:1f:16:c4:7f:d3:e6:39:
         ab:b9:a6:89:48:a3:60:28:d1:d3:ec:bf:98:67:8a:7f:56:96:
         11:99:ea:9a:f7:da:9d:29:bf:37:25:d0:fc:37:8b:87:41:f2:
         e9:b3:e8:72:5c:4e:6a:7b:ad:88:0c:d2:35:91:78:2e:f4:e3:
         67:88:8a:40:bb:9e:ee:cd:b4:1a:80:f3:07:b9:d7:ea:f9:9f:
         00:47:6c:8d:41:23:10:3a:bf:55:57:6e:5f:9f:23:90:bb:4d:
         60:da:f4:97:00:de:28:8a:41:2d:a3:31:2d:71:cf:ab:a0:63:
         2d:de:56:34:86:c4:ea:8c:cb:da:55:f9:3f:b7:09:6d:d6:78:
         f7:ff:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:08 2024 by rpki-client on console-ams.rpki-client.org