Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/e7681ea2-8291-3000-8a57-dc6bfaead88c.roa
File:                     e7681ea2-8291-3000-8a57-dc6bfaead88c.roa (raw, json)
Hash identifier:          yLIcMazkFc5GZteJE+wPMQLlqUg6h0G9OIHSJb4L6w4=
Subject key identifier:   0C:F2:F7:39:2F:97:4F:4D:71:A7:D2:6F:83:A8:42:55:58:F9:F1:28
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285847792BACF224F002B3C9449300
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/e7681ea2-8291-3000-8a57-dc6bfaead88c.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     18594
IP address blocks:        64.57.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ac:f2:24:f0:02:b3:c9:44:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=471ec6b8-09b4-440d-8531-3b214e8baf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:c7:d2:00:12:a3:42:a3:b0:b8:89:99:fd:
                    0c:ab:22:ba:6c:f2:c5:27:8d:51:5c:1c:e0:8b:73:
                    8c:11:c3:92:31:38:36:af:17:ad:33:e7:cd:dc:92:
                    77:be:fb:d3:e5:2d:5a:de:8f:75:cd:5e:38:15:34:
                    df:5d:69:83:26:f9:5f:d6:51:28:62:b1:ab:63:7e:
                    08:c7:13:42:ac:de:66:e2:dc:fc:ef:af:82:af:c1:
                    a5:6f:c5:d3:62:76:90:32:21:99:47:0a:3c:29:2e:
                    55:d7:12:06:3a:09:0a:7a:10:9e:d1:e9:71:73:31:
                    4f:88:e8:34:06:be:07:37:cb:58:78:05:39:06:99:
                    1e:2d:b7:f5:f8:aa:40:6f:b0:a6:0a:c0:8c:ae:de:
                    22:57:e8:ae:cd:11:38:47:80:9d:46:d6:bb:dc:ce:
                    60:4b:02:69:d5:01:78:7d:ab:0d:45:ab:8b:5f:8d:
                    01:7c:26:cb:62:df:93:f1:95:de:5e:bb:e3:67:e9:
                    56:8b:1a:df:52:f8:3e:7f:24:b1:fd:86:e7:05:db:
                    d2:45:c2:5b:5c:b2:56:d0:e6:ec:d5:41:ed:6d:e2:
                    77:0a:9f:43:69:e4:72:bb:f6:9e:d3:65:e5:77:d9:
                    78:15:21:b0:6f:4b:1b:92:dc:b7:05:36:17:3e:b2:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:F7:39:2F:97:4F:4D:71:A7:D2:6F:83:A8:42:55:58:F9:F1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/e7681ea2-8291-3000-8a57-dc6bfaead88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a4:03:f9:34:86:04:c6:e8:77:3e:3e:c0:5f:d2:99:2c:19:
         a8:07:ee:3b:7c:ce:19:0c:3f:51:c5:30:28:e0:9d:37:59:06:
         88:35:db:b6:fb:31:6f:37:9b:22:fe:b2:0e:15:49:81:81:f6:
         b2:9d:00:6d:72:bd:3f:5a:e0:84:03:42:aa:84:c2:0f:70:36:
         c6:ec:a5:d1:71:97:e8:b2:10:28:41:4f:4c:79:e6:e1:ef:c4:
         48:52:00:44:05:ce:da:23:30:49:66:bc:77:77:1a:d9:7b:55:
         49:c6:5d:3e:ac:ba:3d:71:e4:49:cf:54:00:11:31:2f:a3:12:
         bb:10:3e:94:05:26:78:18:b2:3e:95:7a:08:d8:94:3b:90:43:
         a5:0c:d1:56:7e:e1:89:0a:b6:11:ec:3f:61:22:88:47:5e:d1:
         39:9e:1d:52:d0:4d:09:d7:42:64:bc:6d:58:99:de:e9:b2:0c:
         78:6e:a3:92:6c:5b:03:16:fd:f2:3f:47:e2:6a:b9:2d:07:5a:
         5c:ab:0a:6d:8c:64:e3:12:32:b9:49:71:53:7b:de:c0:64:10:
         ee:0c:81:1c:15:ef:d2:46:56:6e:d5:96:26:91:ee:52:0d:a5:
         7a:02:97:72:93:5d:92:11:0c:79:2b:33:64:12:86:e5:19:49:
         15:fd:05:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:46 2024 by rpki-client on console-fra.rpki-client.org