Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa
File:                     ecb03ccd-4052-3fc8-a695-fa9b25294560.roa (raw, json)
Hash identifier:          KbkXMdddG331wAUCU4byWSvn7SvP594tEISoHHb6Gf4=
Subject key identifier:   6B:7D:37:41:5C:C3:EE:08:2B:95:52:C4:47:FC:FA:68:2C:F8:7B:13
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F43285847213B131FFBC3FE2E22C63F40
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     62695
IP address blocks:        208.64.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:13:1f:fb:c3:fe:2e:22:c6:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=e7725eb4-8124-4ae0-b24a-2833fb6207d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:55:f9:d6:a3:d3:19:f6:8f:ef:6a:57:5e:
                    3b:78:39:a0:31:db:32:03:66:f0:49:1d:3c:b6:e1:
                    ce:20:5f:8f:59:69:f9:f7:30:40:68:5c:44:c6:1f:
                    15:42:94:6f:13:fd:80:a6:92:29:13:59:0c:3d:33:
                    12:cb:3c:2a:72:99:33:90:77:d4:30:57:63:42:92:
                    c4:55:e5:37:ce:93:ea:c2:40:f8:6c:e3:81:37:28:
                    0e:fb:d1:7e:c4:7a:45:bc:d5:f4:df:ee:ed:62:d0:
                    5a:8a:79:1a:b4:46:d7:47:4d:09:2b:74:cb:e6:0f:
                    2b:e2:08:79:b0:ec:8d:c5:74:16:e7:c3:84:2d:0a:
                    22:a0:e8:a9:23:e9:8a:f2:ba:0d:2f:d6:7e:cd:0e:
                    ee:7c:d2:f1:8b:97:85:e8:ba:bd:4d:58:88:13:f2:
                    35:81:a5:9d:20:46:c7:eb:61:1e:3f:23:22:03:bd:
                    c6:7e:37:8f:60:08:a5:d1:66:de:29:a9:c4:8f:b9:
                    e0:69:f8:5d:cc:28:2f:fc:a4:b9:22:db:b0:c2:22:
                    3e:dd:07:1b:da:32:d3:47:88:82:cf:47:ec:7a:21:
                    d8:33:ff:08:d8:66:5d:35:7c:a9:a2:42:2d:70:b9:
                    e8:b3:9c:40:6b:de:ef:fa:a4:94:38:b0:26:7a:33:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:37:41:5C:C3:EE:08:2B:95:52:C4:47:FC:FA:68:2C:F8:7B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/ecb03ccd-4052-3fc8-a695-fa9b25294560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:eb:c1:67:7e:af:f6:23:9a:5a:39:6c:e1:e5:5d:0d:9d:fc:
         91:7a:3b:74:e1:d3:4d:c3:86:ca:4e:21:3d:c4:e4:8a:6b:88:
         4b:21:a7:02:6a:67:c0:a0:3f:49:f4:4e:e1:32:7a:54:45:f8:
         28:80:52:c2:da:b6:68:8a:5c:d5:eb:1b:4e:b6:6d:d8:1e:83:
         f9:23:9a:83:fe:a5:b3:33:52:39:38:72:53:3c:4e:ca:f8:38:
         e6:70:3b:55:7c:97:81:40:45:70:b7:37:18:6b:bc:98:77:06:
         83:ca:eb:a9:b3:c9:a1:e2:06:6d:93:29:01:03:7b:24:29:c8:
         51:bb:ba:b1:d5:5e:71:1a:6d:fc:c8:be:06:03:f0:8d:87:5a:
         ba:da:52:70:2f:d0:52:b4:85:0f:35:c9:01:ba:e8:60:eb:28:
         dd:9e:b4:5f:dc:a1:27:9b:65:87:a5:15:55:a3:e4:d9:80:cb:
         2f:84:1b:76:68:cd:9a:46:5b:26:de:f2:a0:27:0f:dc:35:64:
         bf:b4:c4:cb:1f:48:45:5d:73:e3:eb:46:7e:3d:a4:71:24:98:
         73:d2:be:bd:52:64:c5:0c:2b:88:2c:93:24:d6:91:bf:56:4f:
         e9:78:2f:82:fc:78:4b:d5:61:c7:55:ed:31:af:8c:a8:b3:12:
         f2:82:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:05 2024 by rpki-client on console-fra.rpki-client.org