Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa
File:                     a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa (raw, json)
Hash identifier:          PpfxhjPuoj2IfWEToejt2naTTIbshm0uBmGDcvFB77Y=
Subject key identifier:   B7:9C:4E:A7:9F:A4:DC:09:9A:09:A6:9E:A1:97:3E:8C:24:90:15:86
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858475910BE5EA29A21CE3F9CEB80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     20473
IP address blocks:        64.156.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:be:5e:a2:9a:21:ce:3f:9c:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=4da75002-7a1a-444c-ac1c-b7fba6285b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:1a:01:7b:4e:80:40:eb:4d:c6:57:c7:08:
                    06:6e:fb:15:39:67:7f:ad:ed:25:96:e9:2d:7b:b3:
                    cc:9b:be:2f:dd:a5:a9:45:89:59:5a:c3:4f:8d:98:
                    79:a5:f3:ea:5d:7e:49:48:47:59:52:29:11:a9:f4:
                    83:a0:50:36:4a:b1:d2:8d:1f:4a:a9:8e:b9:1c:13:
                    72:b8:49:6d:b2:e0:5a:62:13:43:81:85:a7:3b:f2:
                    b2:0c:3b:93:20:c9:7d:13:3f:30:b8:9b:12:b6:02:
                    22:9d:2a:d9:41:a0:0c:a3:6a:fe:65:af:9d:0b:88:
                    47:0a:69:cd:d1:3b:7b:d4:85:b6:65:63:d6:bf:1c:
                    46:5b:ac:03:97:d2:87:7f:9a:97:b6:b8:35:02:ea:
                    4c:85:3c:1f:4a:62:2c:32:75:40:a9:31:3c:9d:73:
                    38:32:20:14:1c:d3:ac:7c:46:e6:30:5b:a6:bd:d3:
                    ad:b5:0f:f9:86:fe:93:ed:7a:c8:21:b8:c5:b7:d7:
                    d4:d1:19:26:6f:d0:07:08:07:97:de:4a:dd:87:73:
                    95:f0:cc:99:6c:79:3f:7e:c7:6d:c9:d6:95:67:ce:
                    b3:62:49:e4:a0:ba:cd:00:07:db:33:42:69:c5:82:
                    bb:58:bc:32:33:d4:51:a4:f1:9f:1a:00:29:58:26:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9C:4E:A7:9F:A4:DC:09:9A:09:A6:9E:A1:97:3E:8C:24:90:15:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.156.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:77:cb:1f:67:98:07:62:ce:0f:70:fe:2e:22:8b:2f:71:
         4a:e9:e8:fb:95:5a:7e:1b:b3:c3:a3:f2:dd:56:1a:ec:e5:f5:
         79:4d:05:ff:74:b7:e0:1d:68:70:4f:cf:a5:c8:12:f6:c2:af:
         bb:99:4e:1b:fd:31:c6:41:e7:44:0d:54:a7:79:a4:8c:e2:57:
         3c:6c:d3:28:a4:67:fc:81:c5:69:95:57:bd:ad:1b:72:ed:6a:
         dd:80:1c:51:02:5a:fa:91:94:50:47:75:7f:ac:9e:ab:fa:8a:
         db:72:54:8c:cc:10:19:e5:c1:90:7e:88:af:66:3c:15:53:38:
         1d:9e:4e:a2:e3:c5:ad:fc:d6:ca:a5:a4:2e:79:e5:b0:f5:15:
         a8:48:80:ca:40:5c:c9:8e:6d:75:8b:ce:67:71:b5:6c:bf:5e:
         f1:61:93:70:e8:72:cb:65:f5:b0:12:43:b0:0b:a9:d6:3d:09:
         e9:eb:6e:71:50:8b:c5:c7:e7:f6:7a:29:2b:10:fa:5a:35:20:
         5e:fa:7d:6c:fb:8f:d0:81:34:e4:d2:46:0a:7a:d6:4f:2c:89:
         d1:d1:1e:e4:93:a0:ce:cb:45:38:cb:27:40:83:19:bb:b0:2a:
         12:60:49:18:da:c4:e4:2b:ef:ce:1b:5f:a0:b9:28:6f:1a:c0:
         c7:a5:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org