Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa
File:                     e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa (raw, json)
Hash identifier:          +AslEpztNw3f9F1csIIAbYmqTSiIspKqLjjKXT3RuHk=
Subject key identifier:   67:70:CE:2B:27:67:32:0D:8C:BB:5A:38:5D:EA:77:64:A7:93:01:DD
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F43285847EE8A2579A6A5B6F24B7081C0
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     10753
IP address blocks:        64.29.70.0/24 maxlen: 24
                          66.180.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:25:79:a6:a5:b6:f2:4b:70:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=553ccf1e-cd1f-4169-8bad-56c988aa06e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:6e:c4:58:db:b6:18:6f:7c:db:f0:1e:f0:
                    a8:a9:e5:53:b3:3d:19:a8:24:66:5b:be:1c:85:ea:
                    8c:7f:a3:ac:7f:19:5d:f7:e4:10:d6:fd:9f:c5:41:
                    2b:e2:a7:03:3b:db:92:ba:32:ea:1d:1f:19:5b:3c:
                    8c:8c:3f:2c:65:a3:e5:79:cf:b0:32:ef:c0:4b:26:
                    77:6e:cd:10:2e:d1:7c:63:5c:93:5b:8d:a1:85:c0:
                    e5:8c:e2:33:91:62:83:b7:2e:d1:33:ad:ac:b6:ca:
                    02:22:61:c5:9a:c3:fa:6d:ec:0d:2a:55:c8:ee:c4:
                    6d:1c:07:61:77:f0:ec:b9:8b:15:76:80:2d:a8:a4:
                    ea:7f:2c:8d:62:8f:0d:91:76:b3:c8:dd:c3:c2:2c:
                    e6:2f:1d:b9:48:28:14:62:a8:9d:4f:45:98:05:a2:
                    4f:bf:c2:70:fb:c6:e4:d4:2e:8c:41:2e:7c:53:88:
                    f6:0f:de:9d:18:5d:8d:f4:d7:6d:6b:f1:80:c5:ef:
                    2c:bf:b3:6d:fa:db:ff:42:98:76:de:1a:e5:58:c3:
                    47:f9:ba:8e:9d:06:78:1b:d6:3e:2f:d5:1e:12:9b:
                    3b:a1:b0:26:84:7c:68:e0:98:3d:d7:50:51:e3:5d:
                    eb:b4:bb:86:e0:1a:47:33:17:ce:7e:b8:78:09:72:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:70:CE:2B:27:67:32:0D:8C:BB:5A:38:5D:EA:77:64:A7:93:01:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.70.0/24
                  66.180.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f7:f9:05:e8:13:13:52:81:01:a3:5d:32:a9:19:0d:49:5c:
         d8:9b:aa:d8:f9:6a:23:15:ec:3b:ae:54:76:20:25:0e:73:7d:
         35:af:a7:81:5a:9f:79:12:91:a2:2d:35:df:af:64:79:35:23:
         a3:f9:d9:81:12:11:ec:78:2e:0a:e6:ed:32:bb:57:ea:a6:79:
         1a:0a:2d:ce:1d:aa:1e:e8:df:8c:00:39:0f:74:73:3e:6c:c8:
         82:4a:85:ad:96:3c:9a:79:82:87:42:aa:c1:8f:7f:63:ba:6d:
         ee:c4:d1:e4:b4:a4:61:63:6c:8f:16:f0:95:f7:e1:f0:44:d5:
         14:6d:bf:cf:a1:f2:ea:58:cd:73:ce:e4:eb:72:09:04:45:3a:
         60:da:de:e3:6b:d3:72:d9:d0:21:ac:5a:31:a4:b3:d6:df:92:
         8a:a3:43:c4:a9:3f:45:f0:b6:b5:6f:f9:12:c6:75:41:34:24:
         0b:d5:17:73:9d:68:b2:9c:fa:e6:bd:2e:0c:b3:f0:e0:3f:53:
         5c:48:99:40:61:28:9a:36:9a:91:5a:ea:48:6e:30:2c:a8:6d:
         b6:68:2f:2a:12:c7:95:9e:9e:f9:18:66:1e:b9:40:39:86:ca:
         99:78:76:6d:9b:c5:a7:0d:de:63:48:0c:c0:b3:2b:9c:a6:ad:
         33:e1:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:13 2024 by rpki-client on console-fra.rpki-client.org