Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa
File:                     a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa (raw, json)
Hash identifier:          aplf+W4aYOcOb8dY0JaHKrMZ9nKw0S6F23cMfoeDoC0=
Subject key identifier:   1A:EA:67:84:0D:32:56:FA:36:C1:DF:1E:15:39:7E:5D:5B:F5:8F:03
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C90E530A742756E18080
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11537
IP address blocks:        64.57.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c9:0e:53:0a:74:27:56:e1:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=0eeed3d8-dd3f-4ac0-b166-865c4fb0d876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bf:42:88:b2:f1:d3:89:01:18:32:2d:c4:41:
                    e6:9b:78:15:f3:ec:b5:f2:fa:d5:43:ce:51:f8:e7:
                    07:1c:36:aa:4c:19:c2:a2:26:63:1e:c5:38:60:8c:
                    8b:65:4d:10:05:58:8b:79:5a:98:1d:77:6f:fa:da:
                    b6:30:b8:d1:a8:be:62:b7:27:93:9b:c0:8f:d5:06:
                    56:26:73:c3:15:f0:0f:9f:dd:b2:e8:6a:b8:fd:aa:
                    15:87:12:5d:47:31:dd:51:66:8b:dd:88:80:0c:4f:
                    30:90:3d:6e:77:2b:d3:c4:ce:7b:7c:9e:19:4b:aa:
                    93:f4:4e:c2:57:da:0b:d1:81:6c:43:b4:dc:56:66:
                    de:9d:f6:64:46:7b:8c:92:ce:ed:68:47:45:0d:51:
                    84:bd:01:06:74:1d:a0:f8:5c:a8:b5:7d:25:a1:9e:
                    b3:5b:0c:83:ef:9b:66:4c:aa:5c:3b:96:44:f9:d8:
                    ff:6e:cd:f3:8d:03:f5:06:82:4f:b5:7c:6b:2f:0c:
                    6e:55:c4:ad:61:dc:28:1f:7c:06:14:da:29:4f:be:
                    81:6a:23:f2:82:a2:f9:41:93:a8:f4:8b:fa:00:f7:
                    37:0c:14:70:9e:27:6e:34:70:83:cc:ea:1a:2d:ee:
                    1e:3e:35:d2:11:7c:86:34:b3:b9:ab:89:ac:89:ee:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:67:84:0D:32:56:FA:36:C1:DF:1E:15:39:7E:5D:5B:F5:8F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:95:1f:f8:2f:1f:59:20:89:ff:55:33:30:de:a3:32:43:c0:
         cc:80:70:03:23:56:65:24:c6:c4:ae:87:67:dd:9e:65:d0:85:
         89:c6:19:d4:43:82:d9:70:a6:b5:ec:ec:61:f1:bd:2e:cb:07:
         47:72:06:ef:a4:26:4c:a0:a8:9e:49:e5:95:86:7b:55:8a:68:
         4d:3b:bf:3d:bb:68:6a:b2:06:26:59:4e:62:48:01:4c:f9:8b:
         1c:db:37:a9:b1:a7:5d:cc:0c:cf:93:a9:b3:b5:00:6f:ff:c2:
         65:ff:89:7e:b1:43:e4:b7:be:c5:9a:89:cc:cc:b5:79:2a:90:
         91:4b:bd:6f:6b:3d:fb:1f:c9:70:c6:97:49:8e:32:98:90:b4:
         d0:bd:00:7e:25:d0:39:ac:7d:99:e0:ce:67:a0:ed:a0:b3:24:
         fd:7d:3d:c1:04:9f:36:63:2c:d5:08:c1:99:c5:ee:c1:e0:83:
         bb:84:0e:b9:9d:3e:71:05:57:f7:46:47:7f:25:14:bc:2a:da:
         f8:22:47:1d:fb:21:55:7f:c5:37:ed:2a:2d:3e:14:57:e6:43:
         24:e4:f2:47:00:a5:1b:f6:5c:05:08:99:68:f0:d6:b9:bc:82:
         56:0a:91:18:fd:b6:34:e2:88:32:b3:4b:9d:e6:25:95:9e:b8:
         55:43:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:45 2024 by rpki-client on console-fra.rpki-client.org