Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5fc0b8b7-b54f-3c41-b422-d7fcc84d7b21.roa
File:                     5fc0b8b7-b54f-3c41-b422-d7fcc84d7b21.roa (raw, json)
Hash identifier:          wadaac8W76sZeE9PejHbK6BVPvihXZR4y6ZVw6DDRBE=
Subject key identifier:   2A:D9:95:0E:65:BB:9B:FE:B7:3E:99:A8:CB:92:9A:FC:10:53:72:00
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584733608E4D5CA7B89F57FAA880
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5fc0b8b7-b54f-3c41-b422-d7fcc84d7b21.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     396955
IP address blocks:        64.57.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:8e:4d:5c:a7:b8:9f:57:fa:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=38daacae-dba7-471e-9d4d-16eeb3e9591b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:16:82:cc:62:f7:7c:f0:c0:1d:69:89:ee:
                    8a:cc:2c:a6:01:16:e3:5c:e2:c6:50:15:aa:c3:fe:
                    30:88:4b:8e:50:bd:f6:1d:4d:89:cc:12:d2:cf:f5:
                    2a:bd:6f:5e:c9:ac:82:c0:51:3b:f1:1a:4a:84:06:
                    98:89:f3:1d:b4:67:16:e4:68:a8:08:df:96:22:6d:
                    ac:90:ab:d4:08:32:30:ae:9c:e9:7f:df:e9:a4:ea:
                    98:05:bb:5d:e0:46:5e:fb:d9:d4:57:5c:97:5a:f6:
                    e3:16:a6:60:74:d3:ec:34:90:6f:ca:9f:81:8c:b8:
                    5f:a4:61:4b:d9:43:a3:17:ce:48:1e:0b:a8:1c:83:
                    91:28:e9:8c:8f:98:24:af:e9:5e:6a:71:f5:68:92:
                    f7:6c:11:cc:4b:ae:28:b5:36:21:88:26:d9:e2:5b:
                    7e:bd:7c:a3:82:dc:7c:d7:36:b0:7a:40:81:ef:3f:
                    18:3f:5c:b1:83:03:d2:15:ea:59:ad:d6:cf:82:14:
                    4b:e1:2c:43:1e:ca:e9:6e:63:7f:36:14:89:56:2c:
                    3c:20:df:fe:8b:24:58:75:ea:b3:50:bf:72:b6:a8:
                    db:66:3d:12:21:03:2b:c4:bc:4e:1b:95:69:14:c6:
                    08:1a:7e:98:a3:61:ad:ad:e0:ce:d1:94:c7:5e:db:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D9:95:0E:65:BB:9B:FE:B7:3E:99:A8:CB:92:9A:FC:10:53:72:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5fc0b8b7-b54f-3c41-b422-d7fcc84d7b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:41:d6:ee:1e:5d:34:3b:2f:cb:1c:14:4a:3e:97:3b:63:c2:
         f7:91:09:d5:33:55:40:d0:ef:a3:26:6c:29:d9:e1:2d:bc:de:
         0c:db:81:f0:7f:e8:0e:e3:e0:d7:69:26:e7:cb:96:43:bf:8b:
         26:3b:b0:f2:36:b6:d1:b0:d7:40:87:6a:45:b1:80:34:ca:af:
         ad:28:cb:8f:7f:f4:6b:2c:76:1b:98:30:18:68:89:c4:ea:94:
         16:18:16:16:1c:d9:01:6d:db:ac:43:23:37:99:2e:4d:27:81:
         25:27:36:18:ce:c6:0e:90:89:a6:f3:77:8d:ab:f5:09:bd:fa:
         0e:49:aa:7c:38:61:97:db:11:05:3e:b9:c5:f2:d4:ca:70:9d:
         a8:d3:8b:d7:75:5c:9a:6c:f8:ca:ce:ae:46:93:8f:d0:59:64:
         63:06:0d:02:b5:b2:4a:a2:a9:51:f0:18:e6:ee:d9:c1:7c:30:
         f4:a1:94:f1:71:40:8d:06:6f:b8:e1:26:88:93:35:b4:19:f9:
         34:23:1f:44:14:23:46:3e:df:3c:17:0a:51:74:3c:3d:26:15:
         25:2f:49:ec:91:8f:16:b5:76:de:dc:fc:e3:47:70:9f:9c:89:
         36:a0:1f:a1:de:1a:1a:24:50:9d:1e:21:a2:6f:51:35:a4:24:
         8e:5b:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:55 2024 by rpki-client on console-ams.rpki-client.org