Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef342160-62a1-390f-a32b-091a77122003.roa
File:                     ef342160-62a1-390f-a32b-091a77122003.roa (raw, json)
Hash identifier:          n1/sUtRAehUK3PXEuukAaMCuJmERmukvDiDVS/lGQ1Y=
Subject key identifier:   12:8F:64:8E:66:33:2A:B2:16:6C:54:E1:D7:B5:C5:95:17:9C:3D:77
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C932A2C1DF925D99A500
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef342160-62a1-390f-a32b-091a77122003.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11537
IP address blocks:        64.57.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c9:32:a2:c1:df:92:5d:99:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=af26374c-0f3a-4532-807b-20d70ab16de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:f8:5c:4f:b9:dd:ec:89:b0:cc:69:03:1c:
                    c2:25:a7:ba:9c:88:94:76:f4:41:de:f3:d1:2d:b4:
                    6e:26:ee:a6:b7:c4:fb:92:9e:d6:82:96:30:46:14:
                    9c:ec:22:ed:00:6b:7a:f2:5a:6a:51:b7:72:6b:d6:
                    fe:9f:7c:68:5f:fa:9e:63:11:33:ae:91:27:85:8f:
                    9d:db:ac:b6:f1:1f:d7:43:17:36:82:cb:ba:48:b3:
                    ab:25:58:cf:0b:d7:29:a9:5d:ba:56:df:b5:ba:22:
                    6f:d2:57:f9:5a:ce:f5:be:b7:3f:84:62:0e:e2:65:
                    4a:e3:fd:19:9c:60:a8:98:cc:48:f1:af:22:93:fe:
                    21:2a:cc:94:d3:22:eb:84:63:35:69:26:e1:f6:54:
                    2a:dc:f6:3c:27:87:ec:94:cb:81:02:bb:01:f0:56:
                    18:cf:95:c4:e3:bc:d3:f0:a5:05:1f:43:15:5a:53:
                    69:e1:97:b4:2c:b6:e6:94:ac:f0:96:d3:2f:62:12:
                    35:8e:20:5b:c0:1a:be:fc:bb:81:8f:63:3e:7a:7d:
                    e4:c0:90:84:db:34:bb:e8:4b:a2:46:b2:a3:74:63:
                    59:0f:44:2e:5e:af:7a:cf:b7:1a:6b:6a:56:ae:84:
                    a4:51:b7:34:50:90:72:4b:ae:cf:06:0e:2b:5c:65:
                    4e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:64:8E:66:33:2A:B2:16:6C:54:E1:D7:B5:C5:95:17:9C:3D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef342160-62a1-390f-a32b-091a77122003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:44:63:3b:06:e2:c6:80:0e:4c:a8:18:17:5d:fd:32:d8:81:
         c5:c9:09:3f:0f:8e:99:a8:0a:3f:09:99:b1:86:ca:e0:8c:10:
         4b:82:bb:e1:6b:f8:1f:7a:fb:7c:0c:1a:b0:11:e0:f5:e1:ff:
         3b:cf:4a:1a:54:db:97:e5:fc:07:d8:ab:2f:59:11:d2:36:26:
         7c:c4:29:9e:2e:99:fc:0f:e1:85:1a:97:a2:57:d7:86:1d:7a:
         34:1a:c9:0b:81:79:65:ae:2c:ec:11:5e:22:0d:61:f9:6e:bb:
         01:44:5b:3d:de:a4:d1:55:a4:2f:35:8a:01:7f:02:8f:0e:10:
         9a:e6:88:51:68:8a:73:2b:d0:6d:d4:a2:75:c7:9c:ca:2f:91:
         0b:7b:88:15:33:bc:ec:41:96:68:c0:74:da:36:db:d5:2e:c3:
         18:4b:c4:4a:dc:b5:e6:69:99:d3:cb:7b:c1:80:d7:5c:e1:78:
         fb:08:9f:e6:c4:01:94:ea:93:2b:5c:9d:81:36:4b:16:07:a8:
         f0:8a:40:2a:ed:8c:5b:3b:00:e5:15:e4:3e:47:cd:ab:ee:ff:
         07:aa:ed:9a:87:aa:b6:b6:f3:a3:86:5e:0d:35:58:7c:83:e6:
         0e:c3:74:97:ed:a2:01:07:cd:04:97:1a:b4:49:52:32:8c:17:
         f2:72:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:56 2024 by rpki-client on console-ams.rpki-client.org