Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa
File:                     2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa (raw, json)
Hash identifier:          YCXHUNflT3CiWp9XN7cjwUOHUtJIp+wBrV20XGOVgGI=
Subject key identifier:   23:EA:38:54:17:DC:DE:1C:86:98:43:4D:72:FA:26:6D:5C:39:38:E3
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285847E35F7D2D3BBC1DDDD1960000
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     9009
IP address blocks:        64.79.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:7d:2d:3b:bc:1d:dd:d1:96:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=bf48f5ac-45e0-40ac-8527-31054b3678e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:38:0f:e3:8e:4c:a3:3d:ac:db:35:6e:20:
                    9f:0c:88:8e:9d:cc:de:7b:9c:81:83:25:ca:d8:f4:
                    e4:0d:d5:e1:6b:d9:5e:cb:da:19:f4:d4:79:10:fc:
                    ba:93:6b:9b:6d:d4:8b:c0:d7:08:c5:9f:1b:cb:83:
                    0f:36:6e:b8:cc:b0:44:ca:6c:c8:1d:f9:97:2b:d6:
                    96:62:90:49:df:27:e4:d8:4c:ed:d5:da:98:bc:23:
                    d3:1f:3f:12:de:ed:22:33:c0:22:0c:74:79:8e:42:
                    bd:ad:5a:06:4e:9d:f2:bd:7e:a8:e5:d8:e7:a0:f0:
                    e2:95:2b:12:43:43:c2:f6:64:ef:c2:c1:cd:2c:25:
                    40:a3:f5:5d:4f:7a:f0:d7:7f:8b:c4:ca:69:c8:93:
                    46:bd:a0:6a:2c:ca:d6:ab:e4:70:22:8b:15:fe:c5:
                    3c:27:0b:5b:4b:ab:6e:7f:a7:b9:ee:99:bd:96:db:
                    76:ad:f0:d9:72:ae:3e:11:a1:de:78:0c:fd:d4:79:
                    72:fa:e3:d1:ea:0b:2b:df:25:0f:18:4a:37:a0:21:
                    e6:d7:b8:4c:99:71:f6:f0:1a:f4:a9:7d:35:60:f5:
                    ec:96:2d:fa:96:6d:3a:52:b9:93:b5:a5:cb:fe:04:
                    68:0d:7f:f8:d6:5c:4c:cd:6c:41:d1:7f:9c:9a:0c:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EA:38:54:17:DC:DE:1C:86:98:43:4D:72:FA:26:6D:5C:39:38:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:99:03:20:9f:07:98:5c:b4:13:7b:ec:a7:c6:d4:86:18:
         2e:41:eb:33:db:02:85:fa:18:1c:c2:2f:4b:97:68:06:a2:83:
         da:56:65:dc:7e:cb:e0:8a:5c:fd:48:ea:84:72:64:92:c3:f2:
         70:2a:6b:a1:56:7c:17:f4:38:7c:82:d1:6e:84:a6:84:6e:6b:
         6b:cc:c0:cc:aa:6b:86:5b:86:05:cc:55:d9:ed:77:d1:a3:7d:
         4a:bb:03:a8:d9:e7:2d:31:87:9e:9b:4d:41:fb:ed:9a:35:58:
         16:78:59:97:e0:9a:be:ba:17:77:96:69:28:c0:c7:c9:e0:0d:
         4f:c3:b9:7e:15:4d:41:6f:29:1e:36:81:9e:56:19:3f:9c:c4:
         ea:55:85:8e:ff:f2:b1:47:2e:ac:49:65:4e:55:ef:55:39:bd:
         2e:f0:bf:0f:6b:b9:bd:15:b6:c4:b8:a2:36:24:f0:7d:24:ef:
         a3:1d:e2:57:48:32:3a:38:ba:c4:26:e3:a8:24:e8:e7:5a:bf:
         b2:4d:1a:63:d9:a6:69:09:19:8f:1c:87:7b:68:9a:fc:57:20:
         33:0f:06:cb:3d:51:7f:5d:09:a6:4c:c6:8b:59:84:34:76:cf:
         05:2c:a2:70:3f:11:6e:90:4d:70:52:94:92:20:ca:3f:36:b6:
         84:63:b6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:42 2024 by rpki-client on console-fra.rpki-client.org