Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fbcbc979-508c-3817-875e-b09290cd0752.roa
File:                     fbcbc979-508c-3817-875e-b09290cd0752.roa (raw, json)
Hash identifier:          LaM471npnkQbE9PCc/dzkzW8AI3IdxIIP3dfK+jPA5M=
Subject key identifier:   5E:CF:BF:2B:38:6D:70:0D:C2:C3:E6:FB:1D:EA:19:F9:E5:8A:04:BD
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285847B7FBF924944C1A82796DE9A0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fbcbc979-508c-3817-875e-b09290cd0752.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     13768
IP address blocks:        64.226.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:f9:24:94:4c:1a:82:79:6d:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=db0eae13-f6cf-4376-98a6-82d3c8e576d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:e3:5a:2d:88:b6:b9:41:f5:bc:2d:bd:19:
                    22:1f:d5:55:8a:a2:97:15:1f:c5:df:e7:7f:ee:a2:
                    14:36:e9:50:71:6b:62:c3:c4:9c:ec:c0:8f:49:21:
                    ec:1b:d5:35:16:7f:a9:77:d6:27:ae:69:cf:db:ee:
                    d9:ef:2c:d6:bd:d9:ae:c4:fe:2c:89:18:f7:36:f0:
                    2f:85:fb:42:50:1a:14:2c:db:e6:63:55:a4:a4:bc:
                    01:17:e7:eb:63:4d:3c:50:9c:3c:88:83:da:5a:8f:
                    eb:b2:d1:f3:ec:10:42:53:bf:ca:af:fb:71:b3:78:
                    d6:74:40:b8:41:75:c5:8e:2d:bc:a6:72:bb:d5:75:
                    43:72:9f:69:71:f8:83:9b:69:08:3e:6f:3b:65:e5:
                    39:60:5f:44:7a:b5:49:de:54:b2:95:f4:c9:90:db:
                    2b:90:66:ad:e6:1d:12:e2:8f:1f:db:17:a8:eb:84:
                    07:38:da:74:5c:9d:d8:91:4b:c9:24:1b:57:ac:c3:
                    ad:99:74:25:a9:ec:e5:73:32:3c:3e:24:d6:9f:8c:
                    0c:95:ef:2b:66:93:d6:92:54:ff:6f:49:7a:bd:e3:
                    14:4d:99:69:77:58:e1:6a:0e:1f:2d:19:e6:5b:76:
                    bb:ba:7b:64:a7:b1:d7:24:b7:5c:f9:95:55:d9:71:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:BF:2B:38:6D:70:0D:C2:C3:E6:FB:1D:EA:19:F9:E5:8A:04:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fbcbc979-508c-3817-875e-b09290cd0752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:48:21:9a:ad:a8:dd:c1:dd:35:e6:ac:29:eb:2f:a4:97:
         cd:e4:6f:17:30:30:1d:7a:4d:8e:13:7b:8e:c7:66:e4:a5:b0:
         39:dc:09:9e:b0:80:19:c4:65:bd:7e:62:c7:ba:13:fb:48:fd:
         16:4a:31:26:49:68:de:7c:49:81:f9:82:b8:23:10:37:37:a8:
         d7:0b:eb:e2:82:ae:96:06:e8:6e:cd:6b:5c:d6:78:0b:da:c2:
         46:cd:29:0c:e4:77:6c:e9:f8:58:1f:23:82:05:28:a2:3a:5d:
         e8:5d:dd:4d:9d:04:fd:25:1d:58:a4:be:5e:6c:39:3b:0e:f6:
         86:5e:e4:9f:4f:cb:d3:83:4c:51:51:e7:16:12:6c:55:10:11:
         e5:9e:24:56:a5:9e:fb:fa:17:0a:30:9e:01:aa:71:05:d2:ba:
         10:25:6a:66:f5:4e:4b:99:f6:14:c6:80:2c:4f:82:a5:46:65:
         0b:e2:ea:08:fd:b5:a8:0c:e2:72:ea:0c:cf:d9:40:44:d1:5f:
         d5:fc:f1:7b:9e:ac:e5:89:14:b6:65:a7:5e:8c:c9:56:d8:80:
         6d:44:5f:9e:67:29:58:6f:14:9f:5e:77:6e:2e:82:9e:56:e3:
         14:f4:1d:cb:21:56:cc:5d:6e:7f:30:cf:53:4b:9a:e3:24:b3:
         0c:2e:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:29 2024 by rpki-client on console-ams.rpki-client.org