Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d482a32-83b9-3467-9cb5-f97f8c816742.roa
File:                     4d482a32-83b9-3467-9cb5-f97f8c816742.roa (raw, json)
Hash identifier:          xsRwAr95Uv7+etcCgV8AlGDXEFFi1v29sVjhlT9TBSE=
Subject key identifier:   9D:96:35:B0:A0:58:74:15:0C:9F:1F:0C:1A:64:AA:6C:58:B8:F4:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584754E0F03B6326F9FED114B120
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d482a32-83b9-3467-9cb5-f97f8c816742.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     7342
IP address blocks:        64.6.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:f0:3b:63:26:f9:fe:d1:14:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=325bb456-d962-42f7-8103-c6b1aa8e4f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:66:17:bd:e6:ca:c4:09:78:a5:27:35:b7:
                    52:dd:7f:18:b7:d3:a0:04:1f:2e:b5:ce:81:0c:ac:
                    21:68:e9:37:c2:3e:95:6b:db:87:70:ee:86:a1:15:
                    63:fd:c2:0a:80:25:f9:9d:18:dd:ac:aa:08:90:05:
                    5c:21:bb:24:b5:69:41:73:8c:d2:3a:ff:5f:de:0b:
                    12:0e:91:1a:c3:6e:1c:fe:c0:b7:4d:cf:1a:1c:dd:
                    8b:b3:6e:b2:7d:6a:27:c9:37:8c:d4:57:e9:ca:de:
                    d0:6e:7b:fe:79:54:41:bc:4a:46:d7:6d:1c:64:50:
                    24:21:2e:3c:27:c9:4f:c8:f1:33:27:a8:4e:e7:56:
                    bb:fd:56:e2:05:ce:ae:6b:09:a9:2a:6a:8e:a0:5f:
                    1f:64:b7:cf:32:81:bb:07:6a:ba:82:70:7c:a4:7b:
                    59:b9:47:0d:f2:b1:81:59:4a:7f:41:84:6e:b2:35:
                    d6:a2:5e:aa:ef:58:7f:71:82:0a:38:db:26:3f:ef:
                    30:9c:88:5d:0d:d3:d0:20:be:b2:13:da:02:a1:b3:
                    19:57:60:ec:27:ba:9d:d9:de:fe:1c:74:ec:6e:8f:
                    52:cb:74:42:12:e0:15:8b:0b:4d:d8:31:06:7a:c9:
                    30:ae:91:76:07:96:de:a4:27:a5:93:4a:48:c6:16:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:96:35:B0:A0:58:74:15:0C:9F:1F:0C:1A:64:AA:6C:58:B8:F4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d482a32-83b9-3467-9cb5-f97f8c816742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:59:cc:6e:a4:42:21:29:25:ae:74:72:5e:09:3f:ee:e6:9b:
         33:da:05:6b:d8:0a:10:58:4c:99:97:ad:b2:13:61:e0:c1:ab:
         fe:17:a9:91:a4:3e:b1:f9:3e:f2:e5:fe:bc:46:d4:3d:f3:4d:
         f1:6b:9d:fc:78:b0:ef:27:1b:aa:7b:bd:6f:5e:d0:70:44:e5:
         d4:6b:de:42:3f:f5:e7:b8:1b:1f:4b:5e:88:bb:2c:06:16:d6:
         e2:ae:70:85:19:97:48:c4:00:0b:92:88:b4:af:cd:41:8b:0d:
         a5:71:7b:8e:6b:05:3f:6e:93:19:0a:d7:0c:93:2b:66:5e:a4:
         9a:2d:ae:63:89:73:2b:51:88:ab:fd:f6:fc:57:00:82:5b:e2:
         4b:e2:0d:98:fd:bb:2b:17:51:70:1f:d0:64:cd:d6:19:54:7d:
         39:be:19:7c:e0:4b:0e:af:dc:62:d6:8d:2b:0e:e7:81:21:75:
         ca:52:fe:8c:41:01:e2:68:0e:a9:9e:c8:15:55:ad:d4:7c:70:
         03:0e:86:69:3b:e6:11:a9:69:ab:a2:61:bf:26:07:4d:52:5e:
         49:63:d5:74:42:b6:dd:39:b9:02:1a:2b:e2:ed:6a:9d:5c:2c:
         05:11:01:c0:b4:a8:ef:95:6c:4c:fc:1c:87:40:3a:42:4a:c6:
         f8:12:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:03 2024 by rpki-client on console-ams.rpki-client.org