Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/a11c3d35-93bc-3ae5-84df-411739062d18.roa
File:                     a11c3d35-93bc-3ae5-84df-411739062d18.roa (raw, json)
Hash identifier:          38antbA+eqZs1byFi7bl9l6zbvRRDdFbaqJI9dLA2hg=
Subject key identifier:   8E:1B:B1:05:B3:D7:42:B1:83:85:79:3C:11:D9:50:55:E3:BB:1C:22
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F432858471D0B1BAB4B7671FA52D13600
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/a11c3d35-93bc-3ae5-84df-411739062d18.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     393457
IP address blocks:        64.191.46.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:1b:ab:4b:76:71:fa:52:d1:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=0b8c4b9c-5e46-4c4d-bcb4-c193b3747bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:ba:a9:84:ba:da:79:3a:95:db:52:13:78:
                    50:25:7f:44:2e:e3:ee:9c:bb:56:ec:38:42:b3:b1:
                    fb:67:4e:bb:4f:5b:ba:50:66:61:4d:f3:47:95:07:
                    13:23:e9:7a:d4:e6:b3:85:7f:dd:34:a1:14:53:20:
                    cc:d4:48:9c:4f:aa:15:53:c3:7b:62:0a:56:3d:23:
                    fb:c6:e3:67:90:ba:ea:41:e0:84:82:7f:ce:67:97:
                    bd:43:db:c6:2f:b6:81:7b:1a:4a:52:cb:87:88:fd:
                    5a:9b:bb:d3:a6:95:97:2d:6d:99:27:44:b3:5c:0b:
                    20:4e:25:8b:70:39:6d:2c:7b:57:60:39:99:ab:63:
                    71:3c:60:8f:80:e7:2d:41:bf:2f:83:0a:fb:a7:db:
                    10:c3:9c:15:23:56:f3:27:0e:72:65:09:a3:c5:88:
                    b3:1d:0d:a1:f7:bb:a1:69:16:9c:9c:c6:d8:fc:c6:
                    60:13:98:d0:6a:e9:d4:8a:0f:e0:3a:03:b0:ca:be:
                    4c:3d:e8:6c:0f:5a:92:4b:05:f0:68:c3:57:10:f2:
                    85:0e:f4:b4:b3:a4:a3:e4:cd:c5:42:fc:06:7f:a1:
                    80:91:e4:ee:be:a6:e0:95:eb:db:bc:f5:6d:f5:9d:
                    fa:c9:4b:c6:34:a7:2a:76:ac:0c:01:80:4a:43:b1:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:B1:05:B3:D7:42:B1:83:85:79:3C:11:D9:50:55:E3:BB:1C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/a11c3d35-93bc-3ae5-84df-411739062d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:79:95:1f:e4:39:8a:27:70:34:ac:19:84:ce:92:f0:93:
         b4:05:3f:78:86:89:e0:00:82:d0:e9:c0:aa:58:ec:2f:20:f2:
         71:ff:02:38:a9:df:8e:e4:88:4b:09:44:df:70:c5:26:56:ad:
         f9:51:7b:eb:d3:c6:4e:26:89:73:cf:60:72:ea:5a:06:bc:00:
         e9:e5:74:29:18:75:65:77:07:42:be:9f:7e:ad:56:21:44:0d:
         fb:ae:1f:45:58:45:e0:54:b3:6f:b8:92:05:33:d4:cc:fc:8c:
         99:0e:f1:a5:f8:62:ba:35:68:96:70:5c:78:b7:45:89:eb:af:
         b7:3e:34:3c:20:73:5a:b3:aa:be:bc:3b:42:c5:fc:f2:60:37:
         93:32:78:69:1d:d7:0f:fb:19:c2:40:2d:08:3f:d6:22:82:dc:
         1e:01:c7:0d:9d:41:eb:e9:1c:96:64:10:ee:25:dd:a8:d0:6a:
         c9:ff:a7:64:a2:e8:3e:79:03:33:d6:4e:2e:98:50:a5:da:fd:
         b6:06:cb:fe:4a:37:d6:8d:95:5c:13:99:05:94:4d:93:22:b5:
         f1:58:6d:62:84:41:f7:cc:2e:88:4e:9f:ec:87:e0:59:3b:2a:
         8a:9d:47:c9:ce:7f:10:f1:ce:d5:49:20:71:c6:ae:48:cd:b8:
         c6:6d:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:17 2024 by rpki-client on console-fra.rpki-client.org