Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa
File:                     48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa (raw, json)
Hash identifier:          UeeMA1sP7v3zZziccFV36h3PQgycPp12Vrx3k42ty24=
Subject key identifier:   2F:E2:EB:ED:92:43:0C:C5:B8:E7:51:88:BF:AC:F9:76:91:93:64:D8
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C943F7575FBD21421260
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11537
IP address blocks:        64.57.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c9:43:f7:57:5f:bd:21:42:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=473063ce-8250-451e-810a-c4cdf97b22f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:b5:81:4d:81:e8:e4:a7:c2:33:db:82:dd:
                    19:6c:79:63:38:85:7b:cf:10:f4:47:dc:b7:61:dc:
                    73:cb:f5:d7:d8:8e:54:e8:08:e7:ff:5e:31:0c:c4:
                    d1:b4:ee:1b:b4:06:0a:11:c8:cf:48:40:62:c0:ba:
                    e9:e0:80:53:a3:63:97:99:ea:85:34:b7:8b:9c:86:
                    8f:34:66:70:29:f3:e8:67:f8:ef:d0:1e:e7:17:8b:
                    e8:1c:3c:92:98:d8:37:3e:68:09:ed:8e:cd:bb:ba:
                    e7:00:0e:73:67:40:10:99:92:25:b0:8c:01:62:fd:
                    4f:de:fb:77:28:94:05:20:51:a9:b3:67:86:34:3b:
                    ce:9d:09:06:e4:ec:73:06:f9:55:0f:2a:ef:3b:b8:
                    66:4e:d9:17:7b:d1:90:b8:57:ea:ad:9a:50:3f:fc:
                    54:01:1a:17:e4:9e:d7:1b:95:f4:e5:e3:04:b8:9c:
                    3b:38:77:92:e2:f0:a5:75:a3:03:e6:3b:a3:91:e1:
                    31:fb:75:fb:67:36:10:cd:4e:a3:0d:67:65:87:81:
                    b7:74:6e:d5:51:48:11:eb:65:8b:f3:fe:21:79:d8:
                    58:50:28:57:b2:31:c9:7d:e0:c1:0f:90:fe:33:1d:
                    65:12:77:8f:5f:8b:4b:5b:7b:22:b5:20:81:f4:1f:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E2:EB:ED:92:43:0C:C5:B8:E7:51:88:BF:AC:F9:76:91:93:64:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:46:e8:cc:8b:ca:26:95:b8:06:db:d9:5c:8b:b3:b5:ca:
         cf:13:6f:71:50:ac:bd:d6:38:11:07:3c:fd:e6:42:50:fe:ca:
         f7:da:28:e9:8e:0a:45:9e:27:43:17:0f:b3:41:d2:d1:95:f9:
         86:fb:0a:9c:35:71:60:98:a2:66:3f:de:82:d0:86:6b:4a:38:
         bb:6b:7e:c7:37:35:5f:10:26:fc:f6:38:0a:88:d0:65:90:e4:
         ea:83:8d:1f:0d:d8:3c:d2:3d:02:4e:85:39:0e:6c:e4:ca:df:
         27:60:ef:c3:2f:1f:04:24:1a:10:b0:e1:34:41:98:6b:74:c9:
         6e:73:1e:88:83:bd:ef:2f:24:5c:83:5f:6c:5d:64:35:91:2b:
         85:dd:41:83:9e:5c:a1:27:0a:d9:91:e6:06:2a:d7:fb:bb:54:
         42:6e:81:3e:20:24:cd:f3:eb:9a:95:68:a5:89:3b:e4:1b:0c:
         0e:48:1e:05:5d:6f:92:a9:dd:8d:81:51:74:c9:36:bd:02:49:
         88:65:37:d8:e5:7a:d3:54:74:5d:c7:44:b9:73:ee:08:9f:99:
         f6:17:ac:76:c6:26:f7:cc:7b:59:d1:8b:7d:a1:8f:08:d4:19:
         13:f4:53:22:d2:82:3c:4e:e4:f7:6f:f9:dd:0f:3a:3a:cd:39:
         b6:b8:bc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:45 2024 by rpki-client on console-fra.rpki-client.org