Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/76837e0c-bb44-3497-8b1a-5d53a3ad99bc.roa
File:                     76837e0c-bb44-3497-8b1a-5d53a3ad99bc.roa (raw, json)
Hash identifier:          Ha2sQNJ9Qe65DfXnLLzV+SwAKBeUIP71+oqL0xbhQkk=
Subject key identifier:   D8:34:57:1C:8D:17:50:D7:D2:B6:1C:07:B3:9C:55:D7:94:59:F0:DB
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285847D834AD6E01413AE712814580
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/76837e0c-bb44-3497-8b1a-5d53a3ad99bc.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     29802
IP address blocks:        64.113.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:ad:6e:01:41:3a:e7:12:81:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=db6ade7b-02a6-40a3-9637-72504a0cd010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:31:18:db:0a:e8:26:ce:41:48:dc:81:25:
                    d6:d1:5b:cb:e3:da:67:70:c2:da:6a:1e:80:41:9b:
                    ab:bb:d9:f7:17:d9:8e:bf:9b:3b:82:06:90:2b:79:
                    99:2f:25:79:fc:c6:e6:67:f2:e4:cb:7c:22:76:49:
                    5e:a2:b2:a5:8d:bd:fe:00:c1:e0:4e:e7:a5:96:fd:
                    8a:d4:33:36:f4:b3:85:85:4f:66:27:99:2b:74:c3:
                    16:9b:ee:bf:b6:d6:52:f3:29:4e:da:9d:83:5e:af:
                    4e:8b:03:32:bf:87:37:74:a8:5c:5c:02:8b:7b:e7:
                    67:b9:8b:a1:61:4b:41:db:ac:87:40:06:6c:26:82:
                    7b:53:1d:cc:87:78:a1:4d:4e:ba:08:d5:04:30:bc:
                    72:eb:28:7a:8f:d3:52:c4:23:ec:e4:63:a5:1f:c7:
                    4b:6b:c2:10:59:2b:77:c1:84:2f:07:94:e8:25:a4:
                    be:0b:f4:83:fe:e4:14:77:0e:78:8d:36:69:26:79:
                    71:df:ec:08:76:3c:b6:29:e7:02:a6:1b:fa:ee:ab:
                    34:e8:db:dc:65:db:3d:2a:02:f2:79:fa:47:6e:2b:
                    96:2c:36:08:bd:27:7b:93:44:46:2b:26:54:59:59:
                    ec:34:37:ed:9b:63:07:7a:81:63:d2:47:8b:69:d4:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:34:57:1C:8D:17:50:D7:D2:B6:1C:07:B3:9C:55:D7:94:59:F0:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/76837e0c-bb44-3497-8b1a-5d53a3ad99bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:f6:b4:09:5f:e6:b2:a8:6b:41:22:85:6f:3e:0b:18:01:
         c8:d7:20:72:39:9d:51:ca:4e:d9:8d:69:c9:36:0f:49:55:b7:
         65:73:83:db:6a:21:88:97:6b:72:1c:b4:64:41:b0:c2:11:0c:
         94:62:08:37:e1:4b:29:66:b1:57:67:1e:30:a6:bb:c9:04:ea:
         13:f7:a0:cd:63:2b:ed:4e:22:a3:d2:98:fd:9d:c4:d5:fd:40:
         d8:c0:be:0d:df:ef:3a:24:14:6e:9c:40:34:33:92:7e:13:c2:
         d7:65:5a:73:49:f5:7b:ef:6a:1c:78:5a:4a:f8:41:3a:01:a0:
         8c:af:b2:18:e2:ce:1c:99:67:43:b5:5f:6c:86:3b:49:04:ec:
         e6:ca:ef:d0:76:46:08:ad:d4:34:2f:b1:f6:cb:6a:d7:19:6b:
         12:bc:d4:e8:de:9e:d6:b7:1d:1e:61:0a:1c:da:50:ea:53:a3:
         b4:17:0c:9a:78:24:61:95:4a:a2:16:84:5f:ca:f2:f1:1b:ef:
         50:b6:f5:6e:54:7b:43:f4:ee:c8:ec:0b:b0:77:e7:26:42:04:
         2d:92:d2:ef:cd:d2:1e:93:cc:d7:3b:d5:06:e1:53:7f:5b:cc:
         eb:ed:3c:a6:f2:0b:32:14:3e:72:55:7f:6b:9d:bb:4c:13:c2:
         86:22:e2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:12 2024 by rpki-client on console-ams.rpki-client.org