Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a56c78-dc55-3fe5-8a22-aa151aab171e.roa
File:                     96a56c78-dc55-3fe5-8a22-aa151aab171e.roa (raw, json)
Hash identifier:          xUKg5hJcl0pIT3lFaBN7I5YJpYNp5FtnfwzU8X2G4sw=
Subject key identifier:   6F:A3:69:49:24:E2:73:48:F6:60:78:ED:E7:6A:F3:19:8D:5E:9D:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858474F4B80C8F2FA406B9811E7E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a56c78-dc55-3fe5-8a22-aa151aab171e.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     7342
IP address blocks:        64.6.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:80:c8:f2:fa:40:6b:98:11:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=53b64e56-44d6-4df4-862a-3d0cdf841012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:09:8c:32:26:ed:e4:cb:02:e6:91:5c:cc:
                    92:5d:99:f9:a3:63:6e:bb:22:40:93:7e:50:0b:4f:
                    06:7d:58:38:66:88:1f:eb:85:75:78:e5:c5:a4:4a:
                    74:e9:b9:61:a2:b2:58:68:4b:55:a1:24:ba:ca:db:
                    d9:09:51:f7:5f:6f:6c:76:1d:52:f5:ef:34:99:7d:
                    df:af:d2:2f:6b:0b:77:9e:e7:d5:87:d8:6f:0e:6d:
                    8f:47:ab:f0:33:b3:28:74:cb:d4:d3:2f:e8:47:1a:
                    f1:b2:a7:1f:e3:07:58:03:2c:7c:69:ff:fc:d8:df:
                    d8:80:b3:cf:c4:43:39:c7:4c:1d:13:e7:05:56:7c:
                    4e:81:26:29:6b:c7:cd:cc:b6:65:e5:63:0b:d7:da:
                    82:de:19:fe:ec:d8:79:b8:e1:10:d0:e2:ca:c2:b4:
                    96:fc:f6:88:68:a7:cc:b6:de:18:68:15:bb:af:14:
                    1a:48:60:16:27:fe:70:4e:a4:0e:6b:06:fa:8f:e5:
                    41:8f:9a:55:f9:97:0c:05:48:e8:c1:3b:40:5f:1a:
                    ba:08:bb:54:8f:76:ea:47:d5:db:74:35:20:df:27:
                    83:a9:43:be:41:97:2c:5d:d7:5e:66:fe:37:cc:d6:
                    12:01:b7:70:85:ae:57:18:6b:80:75:9d:46:ae:46:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A3:69:49:24:E2:73:48:F6:60:78:ED:E7:6A:F3:19:8D:5E:9D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a56c78-dc55-3fe5-8a22-aa151aab171e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:53:3e:1d:21:62:67:b2:d0:c6:79:fd:25:47:a7:62:64:
         b2:25:4a:7c:34:0d:5d:18:6f:ef:5b:ab:b7:ff:6a:e9:60:3d:
         3d:75:0a:94:ae:9b:27:be:a1:e2:2f:65:ff:0e:36:69:91:5b:
         c3:19:9a:08:9a:e6:48:cc:a2:6b:36:d0:5e:ca:6f:84:34:9f:
         eb:87:e7:83:29:07:47:7a:8b:45:7c:b4:71:93:5e:9e:75:d3:
         b2:65:a7:e3:f0:d3:2a:33:80:36:c9:01:79:13:5b:dd:de:54:
         a3:e7:06:39:c2:2d:b8:2c:d3:41:04:65:c4:5c:2a:8c:e8:c8:
         d6:1f:8c:6d:1f:0b:ee:4a:78:7c:f7:80:6f:9b:cd:61:f9:62:
         b9:eb:05:e4:89:32:7a:cf:4b:c1:35:af:8e:65:93:1f:4c:3d:
         2c:b9:46:c7:38:b8:45:b7:71:ae:73:61:89:eb:63:a4:c9:5b:
         e6:a6:ea:ee:b9:2b:ea:04:dd:65:5f:a1:87:dc:c3:75:11:2a:
         8a:3a:5c:7a:7e:dd:fb:c8:39:9a:c1:c5:f6:05:cb:ea:fa:f7:
         03:39:62:96:e8:17:99:29:9f:3a:eb:2f:97:b0:de:50:dc:55:
         eb:31:b7:a5:bd:13:31:c4:89:70:88:3d:63:08:8b:c0:25:33:
         33:a5:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:10 2024 by rpki-client on console-ams.rpki-client.org