Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa
File:                     16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa (raw, json)
Hash identifier:          35otjrRUIPUAzGErKAdE9VXo0wB8lD0BXwX4AiphNc8=
Subject key identifier:   FD:D2:51:2C:3C:E4:8D:57:1E:B1:20:F9:C5:32:78:FF:8F:19:A8:00
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285847CD1B1EDC2944ABB0E8692980
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa
Signing time:             Thu 07 Nov 2024 14:35:18 +0000
ROA not before:           Thu 07 Nov 2024 14:35:18 +0000
ROA not after:            Wed 05 Feb 2025 14:35:18 +0000
asID:                     14618
IP address blocks:        64.99.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:1b:1e:dc:29:44:ab:b0:e8:69:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov  7 14:35:18 2024 GMT
            Not After : Feb  5 14:35:18 2025 GMT
        Subject: CN=2d6f126b-486c-4c16-a507-46f00e0044af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:af:1f:1d:50:77:7b:42:74:10:48:f9:3c:
                    aa:6e:6b:d2:72:44:bf:a7:ab:2f:46:38:9d:7f:07:
                    ad:83:51:00:e0:59:9f:d4:c5:61:b4:45:cc:48:b0:
                    4c:7b:06:e3:e0:4f:5f:02:8c:47:61:6c:62:26:c7:
                    fe:2b:a4:fd:6e:02:59:72:de:34:c8:d0:91:bb:cb:
                    12:a5:73:9b:3a:db:ca:12:77:a6:e3:30:a3:4f:76:
                    86:76:8f:df:7b:5a:04:c3:17:79:0b:17:04:c1:f6:
                    f4:10:57:41:40:3f:86:d6:4d:56:65:bf:58:d0:7e:
                    f4:e7:3e:32:9b:61:a6:62:05:98:67:85:c6:6d:e7:
                    7e:27:2e:5d:31:da:5a:e6:93:96:c6:b7:77:02:fb:
                    e9:68:d8:43:7a:36:a6:e8:96:f9:69:ae:dd:82:f2:
                    08:17:d3:96:5f:9f:b1:ac:b1:84:1e:dc:22:55:02:
                    6e:24:34:d2:fd:78:31:ca:5d:25:ac:33:8c:44:d1:
                    4e:ed:76:2a:5a:57:58:4f:db:cc:e3:24:86:8a:c5:
                    2b:43:c1:fe:b7:fc:e7:e4:d9:b4:4e:bc:f6:3a:ed:
                    d3:b2:fa:ac:89:0c:b5:89:7e:a0:50:ed:34:35:17:
                    87:5f:eb:c2:a2:de:3d:4b:0f:c1:04:9d:e9:81:24:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D2:51:2C:3C:E4:8D:57:1E:B1:20:F9:C5:32:78:FF:8F:19:A8:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:f9:c5:65:eb:1b:99:ef:1c:f6:f0:48:ea:08:6a:d8:52:
         7b:8b:93:bd:98:48:b2:3e:8e:07:69:71:b3:af:9a:88:64:11:
         c4:2c:96:32:65:30:25:d2:b2:90:db:d0:20:6f:1d:cb:0c:c3:
         ed:c8:5f:2e:8b:bc:2e:64:5b:00:01:5e:56:55:46:60:a3:8b:
         9a:d9:cd:85:b9:19:15:56:8f:eb:fa:7d:81:cb:1e:5a:f5:30:
         d8:92:5c:67:28:e3:67:6a:61:a8:3a:75:62:b7:67:70:2f:56:
         36:f6:80:aa:e5:46:e2:38:8f:a7:d3:0b:d1:99:48:99:68:d0:
         d0:ae:08:51:95:5c:0c:a0:43:87:a7:3a:fd:80:2b:f7:1e:b0:
         b7:b5:83:b8:de:7e:11:c2:d4:df:ca:88:d3:d3:86:2d:5d:ec:
         0b:2b:cc:55:5a:22:1f:e7:c8:b7:ac:88:7c:b9:da:0c:68:73:
         33:51:72:8c:56:a4:e1:13:3b:5d:d6:70:65:a7:2e:5e:04:19:
         35:93:24:57:33:61:3a:52:1c:71:55:02:df:35:7e:2b:6c:74:
         d8:36:a6:6a:04:7f:e6:cc:75:20:ed:db:92:d9:a5:ad:c9:05:
         60:6b:05:47:d9:4f:e5:85:2f:28:a7:96:2d:44:8f:9e:d9:55:
         09:50:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:16 2024 by rpki-client on console-ams.rpki-client.org