Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa
File:                     3dd6c447-11e7-3124-8886-5326a815b42c.roa (raw, json)
Hash identifier:          eW+FWBQoCJrdvUSaeKl1rasEZboLy75mfoFOV5mleIU=
Subject key identifier:   55:59:C5:A8:12:39:B5:62:10:B9:AE:62:08:BF:9A:DB:2F:81:C5:D4
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285847A8A150B4DE1C0529C0D76580
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     32133
IP address blocks:        64.99.104.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:50:b4:de:1c:05:29:c0:d7:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=333261cf-7407-4539-a260-64fdf789ea73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:69:10:3a:e4:37:bd:23:38:64:05:e8:e0:
                    72:f3:20:7f:6b:29:bb:2b:f7:aa:51:3c:67:c8:6e:
                    92:60:cd:f7:58:73:30:a8:6a:73:31:ff:24:e5:5b:
                    20:d3:ac:01:ab:61:ba:f0:8f:92:d9:97:33:04:4c:
                    34:ff:5d:5c:b1:d9:48:62:e1:fa:eb:1f:ec:48:b5:
                    c0:bb:97:d5:a3:2d:f3:06:d9:63:e7:a7:4f:27:52:
                    0d:ac:19:bb:9e:05:b0:5d:74:dc:7c:f2:ed:98:92:
                    7e:82:c6:ae:9c:3e:13:65:1d:7c:75:49:36:19:c6:
                    a8:56:74:d4:e1:b8:e3:89:03:e9:fd:f1:38:12:56:
                    31:86:76:2d:ae:60:69:ce:7e:02:de:59:2b:5b:56:
                    b6:69:d4:f7:d4:18:24:74:34:bf:09:9b:60:11:33:
                    44:9e:6b:79:37:9c:9f:f1:f7:f5:8b:ca:5b:d1:8f:
                    eb:7a:ee:6f:e9:6d:0c:7e:6f:75:d6:3e:8b:dd:75:
                    4e:9d:cd:39:cb:16:6c:86:1a:02:cc:0a:c1:15:69:
                    cf:9f:72:b7:52:05:ec:d1:38:f4:48:04:f6:a1:f6:
                    49:09:8d:8f:60:19:d8:a8:b2:fe:5d:cc:ce:b0:3e:
                    1d:fa:b4:aa:28:2c:60:87:01:6f:2e:2c:2c:29:de:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:C5:A8:12:39:B5:62:10:B9:AE:62:08:BF:9A:DB:2F:81:C5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:69:29:d6:8a:a1:63:52:77:c0:f5:2e:2e:a3:ad:34:70:3d:
         a5:a0:53:7a:66:33:1c:5d:e6:97:61:c5:62:81:56:62:3b:26:
         22:dd:b7:e1:9a:d2:88:0c:3a:11:0b:78:43:80:50:37:db:58:
         37:39:f4:06:ff:5b:52:de:37:a0:07:5b:94:a4:73:dc:09:5c:
         6e:bd:7f:43:e6:89:2c:a7:39:b2:99:36:a1:eb:ba:02:c1:2e:
         07:51:31:33:d0:00:a4:00:93:26:3c:6f:34:2e:a5:e8:03:3d:
         27:ae:b4:8b:d3:7a:1c:bb:3f:62:5b:3b:c1:43:45:e0:dc:9d:
         49:aa:74:54:02:60:47:9b:50:e8:bb:1b:5c:cc:00:8a:1a:0f:
         20:5b:26:ad:1a:a8:70:ad:b6:37:c3:58:4f:18:9d:b3:7a:5d:
         e7:6c:e4:d3:67:4b:6c:30:2f:5c:0a:76:5a:a5:7a:16:a8:06:
         2c:c3:05:86:27:50:da:57:07:70:c1:c0:b8:34:cf:1e:5a:8f:
         c3:27:b6:e8:b5:fd:5b:0f:5e:5c:ba:f5:b5:a7:21:ba:b0:e7:
         74:96:3a:85:3f:18:7c:6d:5f:0d:72:b4:63:93:5a:45:61:25:
         08:49:a6:72:1e:e8:49:52:51:d3:a0:b2:f0:da:18:4e:f6:19:
         ac:12:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:11:00 2024 by rpki-client on console-ams.rpki-client.org