Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa
File:                     b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa (raw, json)
Hash identifier:          Pz2QbX2Z18N9Q9vg0WzQEn/W3aGvvd690KTgwraxrZE=
Subject key identifier:   0E:1C:96:6C:EC:7F:07:5B:0F:B4:7A:A5:E0:12:E2:3A:80:38:06:47
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285847FC7F96742F5CB9EBBA7BC9C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     209
IP address blocks:        209.3.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:96:74:2f:5c:b9:eb:ba:7b:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=98f760aa-508b-4524-96d9-1d729583865a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:29:75:62:50:65:4b:76:3f:d9:ee:39:3d:
                    b4:56:79:8f:8b:99:1e:70:e2:f0:d6:cd:1c:76:3c:
                    88:ba:34:4a:5e:16:1a:f0:3f:59:e1:ea:dd:33:e7:
                    88:1b:ce:62:5c:f1:82:ea:57:c6:c0:9f:e3:ff:d4:
                    b7:29:8f:d9:95:7c:ec:80:19:ce:3b:27:d3:3d:f4:
                    55:3f:dd:61:30:07:7b:27:22:0a:aa:ac:44:6d:3c:
                    92:77:1a:d9:75:04:01:c2:6a:1f:b6:3a:31:2e:ee:
                    31:99:0e:c1:46:74:f3:9a:65:30:d8:fd:83:42:81:
                    d1:9e:ef:01:ff:75:c1:19:c1:19:8b:0a:e1:2a:43:
                    df:2e:a6:17:af:21:7a:89:75:e0:7c:14:e7:52:01:
                    05:87:27:8c:6a:11:8a:ec:e1:a9:2a:56:4b:04:8a:
                    b2:90:1b:5f:e4:74:c2:3e:26:48:53:a4:23:64:65:
                    1b:9b:d1:73:90:16:9c:22:ea:37:e8:ed:4b:3a:6f:
                    99:f3:f7:35:17:72:0b:51:0f:03:50:92:0f:32:bd:
                    e2:f1:ec:aa:b1:d1:a5:5f:9a:0a:dd:92:b5:a2:ff:
                    87:c1:50:f3:9e:61:43:0c:2b:ab:e0:83:35:bc:65:
                    5e:41:49:6f:74:3a:54:18:03:5c:0c:b4:c6:b8:76:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:96:6C:EC:7F:07:5B:0F:B4:7A:A5:E0:12:E2:3A:80:38:06:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b97b95ce-cd8e-3afe-9013-9c40f91ab565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.3.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:ac:ca:83:5f:54:4c:d1:20:f4:28:a5:5d:07:84:c7:5c:
         54:7e:1b:7c:4c:64:b8:14:24:d0:d6:5d:9b:4b:b1:4e:e8:d0:
         44:c1:7a:e7:0e:9c:e2:9b:c1:02:74:48:27:a3:31:cb:fe:0b:
         e6:4c:1a:38:5b:77:6a:e1:cc:3f:61:91:d1:54:ce:b6:61:d5:
         5d:38:e0:59:85:13:0f:12:9a:d4:eb:2f:8f:28:08:d2:c5:04:
         87:bb:45:d8:67:12:ae:39:c2:3e:e1:e1:88:54:7c:c2:3f:55:
         98:79:a7:20:59:c7:b8:2c:61:5c:a7:33:f0:dd:60:75:c7:c2:
         f6:df:62:de:33:1e:63:60:cc:89:1f:10:4c:c4:8e:59:0b:da:
         10:4b:7b:06:04:b2:c2:bb:78:21:c2:2e:d3:3f:40:15:d5:b4:
         86:c7:52:3a:56:bf:89:f5:1c:de:03:a3:65:f8:4e:c4:3e:4c:
         2c:15:1e:c1:19:ff:72:3c:c4:5c:59:1a:e5:80:1b:51:e3:0a:
         9e:9e:33:84:bd:63:37:86:67:52:3e:9b:b7:fa:df:ee:4b:f0:
         60:04:65:29:74:51:1e:ab:00:81:06:b9:49:ca:09:5e:19:3b:
         80:c4:6b:ea:c3:82:66:47:64:56:46:cb:2f:75:8e:53:8e:ab:
         91:cb:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:02:37 2024 by rpki-client on console-ams.rpki-client.org