Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa
File:                     7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa (raw, json)
Hash identifier:          j9+sZPFghuTTCm2iF96mRID5901RaTHFaa3MeBIuXus=
Subject key identifier:   91:38:04:E0:E8:7A:48:A4:7A:B2:0D:75:2A:5B:E3:E1:56:88:B6:0C
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F43285847A5D6A611871CD4AF15D9D8C0
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        64.57.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a6:11:87:1c:d4:af:15:d9:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=fe9f51d0-ef15-4662-8903-a8f84e0a13f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:da:d6:fe:d7:8a:78:cf:0d:5f:28:93:8f:
                    9f:d7:3b:67:8e:00:24:85:fc:d5:1e:7d:fe:89:55:
                    cf:ff:3f:4a:f3:89:26:f8:d9:57:da:e9:dd:2b:7c:
                    3c:24:e8:32:3c:cf:0d:57:d7:d8:d4:08:8a:1a:6b:
                    b4:bd:55:fd:8a:43:cc:d7:12:06:3c:78:1e:dd:08:
                    68:a3:e5:01:93:ed:b0:d1:a8:00:3f:cb:02:b5:f9:
                    df:50:62:cc:2e:50:59:ca:73:cc:ac:e3:67:87:47:
                    8d:ee:37:41:79:67:ad:8b:c3:13:50:fb:3f:11:27:
                    52:63:65:9c:d5:0e:e6:cf:03:9d:71:ec:90:a9:7d:
                    5b:b7:2c:f5:d2:73:16:59:c1:d4:6f:15:63:a6:34:
                    77:ca:1d:53:f7:52:ca:cf:3a:08:27:8f:9c:ab:84:
                    b7:05:21:c8:83:3f:7e:27:d5:e4:73:73:3d:c1:d3:
                    22:8e:67:f6:b3:b5:09:cc:b8:7d:35:3a:e6:69:53:
                    42:5e:9d:8e:b0:30:d2:6a:b1:65:d8:b9:bc:59:3d:
                    ef:bf:e4:fd:19:16:70:4b:8e:07:de:92:58:db:ea:
                    5f:f4:75:6e:7e:28:8d:6b:73:6d:9e:aa:94:73:04:
                    b8:f2:72:8a:4f:06:0a:bb:4f:bd:c0:fc:6b:b8:ad:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:38:04:E0:E8:7A:48:A4:7A:B2:0D:75:2A:5B:E3:E1:56:88:B6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a4:bb:71:62:73:26:56:05:77:c8:c9:b6:f0:95:18:c9:f7:
         11:ed:2d:93:93:cf:e0:25:99:d3:5a:9c:a0:7e:2a:6e:25:ba:
         11:3f:56:fd:aa:ae:11:7a:d5:8b:89:ad:fe:02:81:8c:a5:3d:
         33:5e:e0:77:7c:ca:29:04:0f:c0:98:39:40:60:7d:2c:4a:a7:
         9b:8e:ad:cc:35:86:3e:e2:a9:ce:d9:3b:52:16:ab:01:86:2e:
         f6:61:34:74:fe:05:04:39:0d:70:02:ea:d4:de:e6:87:18:81:
         aa:96:c6:6c:78:73:21:50:96:c1:cd:20:04:0e:dd:f7:0e:ab:
         01:38:82:c1:3e:d7:ef:e2:bb:9e:4f:b9:aa:94:1f:54:3c:83:
         05:2c:66:e3:d3:04:a3:51:37:b0:92:52:be:50:0b:43:26:0e:
         2e:d9:5f:12:7b:f2:b6:19:ed:e5:c2:ba:d2:b4:85:80:65:6d:
         de:5c:2f:d1:b7:82:c2:4b:41:97:a5:a7:11:c5:54:47:cd:3e:
         38:e6:e9:3a:ca:16:2e:2d:7f:05:05:92:d9:b0:ba:27:e7:02:
         bb:22:29:6e:d7:ef:02:8d:a3:ed:bd:fe:fb:be:2f:7e:5e:6f:
         60:ba:a1:48:c7:37:b0:b5:f0:5a:7c:0b:1e:3a:58:50:17:6b:
         5f:ec:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:21:39 2024 by rpki-client on console-fra.rpki-client.org