Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa
File:                     e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa (raw, json)
Hash identifier:          0hz3KaY4H02zF5xKl3lcZ2VipClkrdvFX8SpjRy3/QY=
Subject key identifier:   DB:A0:7C:E4:F8:C0:DC:A3:E1:C4:F8:02:48:A5:C1:87:F1:A9:A8:21
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858473D25F9F7AFC6984826DF3A00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     19905
IP address blocks:        64.18.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f9:f7:af:c6:98:48:26:df:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=77001d28-2386-4d86-a813-dee12cfeff2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:1b:0d:1e:2b:4c:34:2c:c4:43:50:30:8a:
                    c1:f7:f2:fe:6b:9b:41:65:6f:75:67:69:9b:85:79:
                    ad:a1:04:45:a5:22:27:da:77:60:69:50:87:11:45:
                    22:cf:cd:94:c7:91:03:cb:97:33:cf:d1:29:02:c7:
                    46:ad:a7:32:9a:c9:a9:9f:0c:8e:60:9b:65:eb:ee:
                    5d:71:17:65:5a:e3:2a:46:2e:e7:3b:65:a9:d1:04:
                    84:1d:96:10:72:12:07:e2:8d:23:16:67:ed:c1:6e:
                    a2:29:78:4b:73:21:55:30:e5:f1:c5:92:8c:99:2b:
                    56:c6:dd:fa:c3:28:1f:81:6d:1b:13:d4:39:c2:3f:
                    0d:60:91:52:37:9b:e3:70:49:25:52:20:72:d4:13:
                    3e:85:c6:40:46:d7:41:90:73:c9:2a:65:5f:bf:f1:
                    7f:22:04:3a:26:d1:57:1a:30:12:55:d2:db:af:12:
                    de:ce:68:85:f4:eb:79:51:cc:68:55:ae:d3:7e:35:
                    85:07:c3:e3:44:d9:68:83:23:4c:b5:2c:50:98:a6:
                    27:19:eb:47:31:41:45:74:03:9a:1e:e5:53:ec:4e:
                    96:7f:b7:85:8c:c2:6c:0c:fb:ed:3d:af:2c:e6:66:
                    ce:c6:51:f7:ae:c2:4f:c9:0f:7b:ab:41:eb:9b:e9:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:7C:E4:F8:C0:DC:A3:E1:C4:F8:02:48:A5:C1:87:F1:A9:A8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:c5:cf:14:db:c4:1a:62:b5:e1:79:0d:05:2f:7c:cc:df:
         54:c0:74:69:bc:1e:7a:a2:90:92:31:b6:a8:ca:f1:c1:93:69:
         c8:26:f5:45:b8:92:e0:ab:29:6d:fd:2f:9a:82:34:11:6a:e7:
         a0:21:c9:39:7b:d4:18:b0:ba:29:87:e4:2f:0d:fb:0f:d0:27:
         e6:7f:3e:a2:46:9c:2a:3a:75:82:ae:b9:9f:e8:5a:46:c0:50:
         52:17:2a:e2:ac:9e:90:64:c6:22:ea:54:23:b3:b4:ba:35:eb:
         40:82:98:a7:fb:c2:3f:e1:60:4c:93:94:ad:41:fd:65:e0:16:
         90:40:60:6f:6d:3a:34:86:f6:ed:2a:c0:3e:f5:09:b5:74:64:
         61:b9:7e:bc:f1:1f:04:7a:5d:c9:02:77:c0:06:e6:dc:0c:8d:
         ac:cf:9e:17:09:d9:66:b6:ea:79:0a:35:5e:05:fd:bc:cf:7b:
         09:81:43:49:d2:cb:fa:47:84:80:40:3a:89:97:bd:61:67:e1:
         02:54:56:49:1a:a2:11:35:3b:db:cc:eb:43:61:82:0f:b7:11:
         93:cd:37:a4:ff:91:1a:14:fd:a0:e9:c7:c0:96:f6:0a:09:84:
         06:b8:6c:f3:93:bf:d5:d0:d1:4a:70:49:17:43:1b:64:9f:b9:
         55:2a:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:50 2024 by rpki-client on console-fra.rpki-client.org