Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/9b96d1de-1892-3da9-928c-ff54c54288b5.roa
File:                     9b96d1de-1892-3da9-928c-ff54c54288b5.roa (raw, json)
Hash identifier:          dhlYdziE9OHsv19k0bqtYZFFTU3KmSuD3hUe/0I+UCE=
Subject key identifier:   2D:6E:A9:83:D9:3C:88:DE:8D:7C:4F:F8:9D:4F:1B:C8:93:76:15:E4
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F43285847EE8A27DD2811DACFF6A88F80
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/9b96d1de-1892-3da9-928c-ff54c54288b5.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     393262
IP address blocks:        64.39.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:27:dd:28:11:da:cf:f6:a8:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=326418e0-6f01-4fcc-9a58-8f014eb3aaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:08:a4:24:cb:a1:cd:5a:68:fc:44:ad:25:66:
                    34:d1:3b:70:a3:91:dc:2c:a1:00:d1:22:56:ed:d1:
                    b3:3c:13:c1:27:0c:bb:64:0f:5d:8c:78:73:cf:19:
                    51:5b:ac:51:c5:f7:d8:0b:d0:18:99:2c:1c:1e:e8:
                    ac:b1:b5:d0:ec:8e:e1:53:b7:81:71:f4:00:a7:a7:
                    ed:71:7b:6c:4b:8d:a1:3d:f4:41:c9:3b:3b:d2:3d:
                    23:cc:15:65:58:2b:61:f7:f4:77:3c:21:ea:58:c3:
                    fe:a5:e4:c9:c6:39:b5:3c:f8:b3:03:77:6d:db:9c:
                    2f:29:28:d2:b7:6f:57:91:37:7b:f5:72:d8:2e:3e:
                    00:e2:2c:3e:6e:a2:c4:26:f9:00:a0:23:7c:ae:6e:
                    04:37:09:36:a3:e3:12:20:bf:59:aa:38:52:8e:c5:
                    bd:0c:51:79:eb:42:18:80:45:b1:1f:e6:d4:fa:2b:
                    b6:4e:93:c3:c2:35:ad:5e:36:03:8d:98:9f:37:5f:
                    a4:71:80:13:cb:d7:e4:a5:da:c1:89:ab:47:e7:a7:
                    8d:0a:67:c0:0f:71:aa:1f:59:d8:76:ca:92:1a:c6:
                    ba:c9:d9:b1:7f:c8:73:35:ff:fa:75:06:dd:b3:3c:
                    76:02:2f:db:33:98:45:8d:2a:f6:bc:67:8e:85:71:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:A9:83:D9:3C:88:DE:8D:7C:4F:F8:9D:4F:1B:C8:93:76:15:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/9b96d1de-1892-3da9-928c-ff54c54288b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:41:f8:4d:d1:35:30:20:69:4e:b8:a4:7f:91:92:06:b3:
         09:43:25:5c:3d:0a:d8:5a:e0:2f:5a:bf:f6:24:af:3f:b8:18:
         d0:ae:9a:e8:6e:2b:0d:e8:b1:22:71:d4:f1:9b:c0:8d:3a:16:
         76:4a:46:d6:2e:59:de:11:11:9d:9e:57:69:e6:a8:93:04:73:
         fb:56:3f:9f:3c:eb:d8:d8:8e:26:fa:67:b4:95:c5:5d:37:56:
         71:a3:ed:c3:bc:51:63:ba:17:dc:e2:a6:6a:ac:85:e3:33:9b:
         c6:eb:86:66:90:f8:ff:69:66:9c:74:88:55:52:20:52:d1:0a:
         8d:e1:2e:ff:35:f8:5d:d3:68:80:f3:a9:bc:53:27:6d:f9:15:
         64:a5:57:6b:d8:f6:6b:ee:0d:e2:9f:28:f0:80:58:89:98:6e:
         23:ca:3f:5c:6c:c1:17:e8:38:81:49:0c:7b:ae:02:93:37:d4:
         6f:4d:4a:0d:a9:bd:8e:7c:27:3a:a1:44:17:2b:d3:d1:05:37:
         10:14:82:7f:39:01:02:2c:6c:b5:10:14:2a:c0:d4:ae:a0:b1:
         33:ea:24:77:53:85:20:f5:a2:af:c9:f6:35:d5:80:c6:12:95:
         5b:41:a9:7d:89:da:1a:06:0a:9d:f3:b5:06:a6:e1:a2:b9:db:
         66:c6:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:33 2024 by rpki-client on console-fra.rpki-client.org