Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa
File:                     80fdb0a9-6208-3f9e-a314-da6a439aac56.roa (raw, json)
Hash identifier:          cw4RgpirJ0JGgxNRtpzDcATDq2ADZV7wdrcfglU6QTA=
Subject key identifier:   AF:AC:6E:48:1C:2C:ED:36:7B:54:A4:DC:6B:6B:DE:6D:9B:C6:70:6A
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F432858471D0B1B4815B227B808532B80
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     393457
IP address blocks:        64.59.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:1b:48:15:b2:27:b8:08:53:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=d4ddf229-13ae-4ae7-a580-e2b21e1f1e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:73:d2:cc:92:92:92:ff:e4:33:af:55:3f:9f:
                    55:bc:c4:99:39:88:9c:de:09:ed:34:15:6b:8f:1e:
                    dc:fd:75:a2:39:fa:8d:77:a3:cc:de:f6:89:63:25:
                    bc:63:e9:6e:3c:29:62:44:8a:b4:f9:be:0a:e1:6e:
                    b2:0e:48:bb:91:8b:2f:1d:04:83:b0:ad:19:9e:18:
                    0c:db:64:b1:36:0f:7e:ed:ec:7f:79:0b:82:87:16:
                    3f:6c:fa:62:b3:6d:11:3b:e8:36:f1:56:92:45:98:
                    5d:fd:62:42:db:6c:5a:66:ab:21:30:7f:0b:4d:1b:
                    2d:31:fc:71:ce:e8:b7:c8:17:7e:ab:db:ab:77:47:
                    bb:93:81:e7:45:47:5d:01:d8:b1:9b:f9:d2:db:58:
                    23:aa:4a:50:88:61:15:85:c1:be:b9:6f:6e:69:52:
                    a1:5a:6b:84:cd:33:88:a5:9f:61:da:0b:d7:8b:cc:
                    43:c5:a7:c2:4f:00:68:9f:5a:3b:b0:ab:d7:45:5f:
                    19:87:17:0d:f5:51:7d:14:d8:02:0d:ca:88:dd:67:
                    25:47:e1:3c:7b:45:69:52:44:4a:9c:5f:e5:02:68:
                    89:f4:2a:03:11:bf:75:bd:ac:5a:1a:a7:7f:d8:7b:
                    2f:94:dc:bb:10:40:f2:4f:cd:d9:c3:71:01:3f:0e:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AC:6E:48:1C:2C:ED:36:7B:54:A4:DC:6B:6B:DE:6D:9B:C6:70:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.59.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:53:67:1b:a7:27:c8:41:b4:5f:0b:aa:00:f1:f4:b0:33:
         9b:d8:ba:3e:f1:bc:cd:cf:c8:68:35:b1:ef:f2:8d:57:da:2e:
         7f:9d:e1:2f:26:d8:eb:10:39:69:9d:f8:f5:3d:19:54:26:aa:
         67:97:01:64:91:c5:72:6b:a3:0c:1d:66:84:f4:5d:5f:cf:ce:
         77:82:4f:7c:cc:a6:eb:d2:64:9b:1a:15:d3:fe:7b:3a:f1:d3:
         30:f0:aa:65:f6:03:d4:93:f3:cc:bb:cf:13:d6:af:6d:f1:c5:
         21:dd:52:e8:af:26:ba:0f:5e:21:85:d5:46:29:a7:f9:d6:84:
         44:ff:87:1b:f8:fc:a7:97:27:6d:93:4d:48:59:8d:a2:d1:8b:
         42:5f:7b:b7:a4:87:dd:dd:35:bc:c8:48:d2:0e:de:ea:ba:6a:
         5a:4f:b9:fd:b2:ba:78:ed:a7:5a:f6:cc:af:d6:8d:2b:d9:4b:
         66:99:b2:3e:fd:44:f0:8c:b5:ba:16:0e:a1:e6:a6:09:1f:dd:
         da:a9:7e:3c:99:63:fd:b0:ad:86:d2:44:1d:af:88:a0:0b:7f:
         de:27:54:88:88:36:a6:64:25:57:b6:11:93:49:a0:79:1f:b3:
         35:57:81:66:6b:72:7d:1c:f8:f0:e3:67:34:8b:a7:31:59:2b:
         8a:13:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:10 2024 by rpki-client on console-ams.rpki-client.org