Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1485d07-93e7-37e9-a3e3-b3a17f99c928.roa
File:                     b1485d07-93e7-37e9-a3e3-b3a17f99c928.roa (raw, json)
Hash identifier:          khlOLPqS8k/BzV65dhJFlKgmsoCwgC0RhvYqamRLZB8=
Subject key identifier:   39:B6:BD:60:D2:2D:CF:C7:94:F9:F7:02:1D:A9:5B:1D:7D:30:83:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF74BE5677265519D656A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1485d07-93e7-37e9-a3e3-b3a17f99c928.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22258
IP address blocks:        64.139.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:4b:e5:67:72:65:51:9d:65:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=effd0156-a231-4228-8907-b57787a9c505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:d1:b5:b7:91:a0:56:5e:f9:7b:dd:31:71:
                    f5:62:94:dd:e0:73:ef:48:18:89:ff:e7:7d:3f:80:
                    bd:cc:b2:ee:9a:39:f8:b8:5c:e9:c2:6e:a6:5f:5d:
                    df:f4:a3:34:80:48:66:3b:99:98:23:e9:aa:44:1a:
                    f6:64:dc:86:54:cf:c0:d2:28:46:69:99:02:ac:3b:
                    13:49:a8:8c:17:eb:23:02:0c:e3:c8:20:ad:18:0e:
                    6d:5d:54:56:f1:18:89:cf:32:5d:4d:ad:76:02:28:
                    f3:81:1e:9d:24:07:a1:70:d1:2d:f2:9e:5c:a0:18:
                    7a:d9:1b:45:a8:20:cf:54:32:d6:a7:1f:f5:b3:83:
                    39:56:48:98:94:07:d0:7f:be:4b:99:ba:0e:1c:dd:
                    e6:a0:5f:6f:86:81:0b:22:28:7f:f2:26:c5:e9:52:
                    f0:8c:84:be:a5:bb:63:d2:16:bf:c8:da:fb:6d:bd:
                    16:1c:8c:aa:a0:5d:55:41:4b:d4:4f:7d:7a:02:0e:
                    10:ca:b5:fe:1b:1d:79:34:d9:9c:e3:05:72:c2:f0:
                    51:a4:aa:b6:2e:a1:fe:b8:f8:93:d0:88:25:6b:55:
                    31:ac:70:14:fa:6c:c8:38:a8:cd:ae:7d:88:15:ef:
                    3d:55:20:6f:88:52:37:82:cd:09:2e:fc:aa:fd:b2:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B6:BD:60:D2:2D:CF:C7:94:F9:F7:02:1D:A9:5B:1D:7D:30:83:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1485d07-93e7-37e9-a3e3-b3a17f99c928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:63:ec:e2:a7:8a:9b:f8:86:85:81:70:1d:e6:45:ac:a1:c4:
         e1:be:78:ee:69:ea:09:b4:7e:78:f3:28:fe:35:85:8d:da:c3:
         ed:70:f8:af:0e:22:a5:de:ac:e1:14:98:98:be:5d:a9:12:5d:
         b3:a5:5f:26:96:de:04:10:d5:ed:15:d5:69:96:dc:66:c3:f3:
         88:12:dd:99:12:d3:45:f8:15:46:fe:a5:f3:4e:0d:17:c5:48:
         30:9f:db:4f:72:17:14:5a:2e:83:1f:ce:e7:f5:5f:1c:fb:e3:
         58:59:50:fe:a3:71:98:1b:db:77:41:30:a7:3a:9f:3d:69:5a:
         12:a1:fd:61:45:36:fb:80:7c:b2:9a:47:bd:90:c6:b7:49:4a:
         d6:48:02:04:a5:04:d6:41:6f:20:d9:b1:de:b5:4a:10:9d:c2:
         12:b0:88:6c:d2:c4:fc:b9:91:d4:7d:4b:07:2c:66:65:dc:19:
         2e:a5:c1:2c:4e:a9:a1:75:6b:b4:79:1b:cd:81:a2:08:51:bc:
         41:c7:4d:04:ab:5f:31:fc:33:8f:eb:c0:15:3d:d3:e2:56:a8:
         8e:e6:52:a4:9a:af:f1:3b:27:68:27:c6:cd:d2:1b:89:ed:a8:
         95:f9:f6:42:b2:69:0f:85:33:38:69:69:71:3e:87:73:f2:59:
         3e:8a:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:14:42 2024 by rpki-client on console-ams.rpki-client.org