Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa
File:                     0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa (raw, json)
Hash identifier:          WWuvj6N5Rnto+YdKwShLxETB6upoEFY4gnTesMI/WPo=
Subject key identifier:   F7:6A:FE:78:56:D1:A3:F6:E3:3F:2B:A5:8A:74:93:E1:D9:58:D1:9D
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F432858471775BEC51E5C7C0A5B625D00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     63062
IP address blocks:        67.44.0.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:be:c5:1e:5c:7c:0a:5b:62:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=07f07897-3d69-4a65-b891-b6e4eb5af46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:35:3a:a8:c8:e8:b1:cc:ba:bd:5a:b2:4e:
                    ff:46:cc:95:67:92:76:13:4d:30:77:86:ac:f8:3e:
                    0a:6f:82:45:c8:41:ea:b0:b9:8e:d5:47:c2:3e:b8:
                    03:59:ea:64:57:0b:9f:a9:6a:29:7a:b6:08:a0:d5:
                    1d:37:02:a8:44:9f:94:07:77:9c:af:6e:32:18:6f:
                    f5:45:ec:9d:dc:65:c8:5e:b6:e1:18:1b:02:72:df:
                    8d:1d:b5:f6:85:d7:dc:cd:da:74:37:17:91:09:da:
                    1a:83:e1:01:1d:70:12:b8:04:25:1d:71:a3:5b:98:
                    cd:8a:a2:94:2a:a8:64:72:8a:96:14:2e:94:d4:d9:
                    55:59:58:e1:0f:db:87:0d:e4:df:a9:b0:32:e9:7a:
                    e3:e7:b5:e8:75:e2:f9:a4:4a:b4:5e:49:ae:18:f7:
                    64:a6:5b:d3:85:8f:1e:e4:99:08:64:80:27:ed:1b:
                    16:15:42:34:d7:24:f0:74:b1:5f:e9:aa:97:ab:e4:
                    55:b9:dc:cc:1e:5b:7d:04:40:10:18:9b:dc:1d:08:
                    44:6b:48:92:93:8d:58:51:15:c9:99:d8:a5:94:a3:
                    c5:4d:c3:77:92:31:dc:9f:eb:0f:03:02:59:20:c8:
                    e6:57:44:4d:63:b1:55:30:15:fd:01:f0:6e:2a:5d:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6A:FE:78:56:D1:A3:F6:E3:3F:2B:A5:8A:74:93:E1:D9:58:D1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:41:d5:50:55:6d:42:60:93:cd:96:df:74:6c:9a:71:ad:b8:
         47:93:c5:7e:fd:ad:46:77:8b:0c:ab:b5:fb:b1:06:4b:5f:02:
         73:6b:75:dd:f1:91:78:1d:51:d3:c2:9c:4f:de:eb:63:3f:8c:
         dc:35:01:fb:dd:15:b4:13:76:d7:69:06:1f:d3:84:4c:2d:53:
         c0:55:20:71:a1:79:e3:82:12:9c:20:61:a8:f2:f4:33:3d:c7:
         7b:59:22:fd:39:9e:a6:63:13:67:1e:34:bd:72:35:0d:1a:bd:
         34:11:61:ce:bb:2c:6e:75:df:7c:dc:ce:59:4b:34:87:c9:de:
         71:51:b5:5d:3a:4d:2c:62:8f:7c:49:3e:ac:59:5d:2d:3b:b5:
         74:af:4c:52:9f:37:90:82:2a:94:32:0c:b7:e8:f7:0c:d0:a9:
         c8:eb:39:38:85:e3:3b:4a:6d:b4:a1:52:6f:2b:ac:9a:b4:eb:
         f7:4c:05:53:ab:df:4f:44:7c:f7:60:18:c0:6a:d1:73:5d:98:
         56:38:0c:1c:9d:58:d4:58:e5:5d:52:f0:74:b6:6c:04:b2:21:
         67:6f:f3:9e:f5:39:5e:ba:c4:66:38:92:4c:a4:cf:af:42:77:
         66:fe:6c:03:86:a2:52:56:2d:20:db:77:99:29:ba:6e:67:14:
         8c:46:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org