Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/bfb6ff2c-40dd-3cfe-a513-19fc6b20db7d.roa
File:                     bfb6ff2c-40dd-3cfe-a513-19fc6b20db7d.roa (raw, json)
Hash identifier:          jOkX3qPADFPUcwR9QqeDzkfjavUKR3WVGkd6rLVHcYk=
Subject key identifier:   17:8A:2D:87:6E:72:BF:DD:F4:EC:E3:97:0E:77:80:30:95:EA:73:9C
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285847E8F4CB48423D835501623F34
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/bfb6ff2c-40dd-3cfe-a513-19fc6b20db7d.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     59426
IP address blocks:        64.113.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cb:48:42:3d:83:55:01:62:3f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=04c52df1-95c0-4b52-aa2b-405efc1e099e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:00:e9:ce:4e:a9:5d:4a:ac:79:df:b1:0a:
                    92:97:20:69:40:08:53:df:b6:b8:f9:19:c2:48:bd:
                    c5:db:c0:47:60:29:87:21:69:48:5e:1a:a1:27:be:
                    91:9a:6b:fe:21:02:2d:1e:0a:74:a9:36:5e:eb:78:
                    f9:eb:d1:22:85:19:62:2b:2c:2b:a5:63:ce:46:ed:
                    89:9c:85:78:ce:d6:b8:8e:5e:ce:e5:17:1e:78:12:
                    8b:17:d4:69:f5:03:9f:82:13:7c:5f:7a:b2:f6:59:
                    37:e6:1d:61:6c:7d:35:fd:03:cc:93:80:47:c9:3d:
                    c6:a7:94:6e:cb:45:b1:17:7a:73:d7:47:d4:59:70:
                    af:72:ca:fe:9f:5a:33:d1:45:05:3f:5a:cf:0c:52:
                    b0:d5:3f:52:98:35:fe:ce:2e:ee:3e:ca:e6:c8:0c:
                    76:ec:eb:65:63:a1:a7:fd:b4:5f:64:ab:84:6d:34:
                    8a:96:f7:a7:fe:8e:37:00:5c:83:74:3e:05:8d:b9:
                    98:14:ac:a0:5f:bc:90:01:2c:04:d1:eb:95:35:d5:
                    5a:ea:4c:ff:42:81:81:9d:77:b2:6d:6f:2f:b2:9e:
                    33:09:84:92:b6:94:ab:bb:0a:82:18:36:d6:6f:51:
                    bb:96:37:9c:fd:23:85:16:33:4a:90:b9:ac:55:85:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8A:2D:87:6E:72:BF:DD:F4:EC:E3:97:0E:77:80:30:95:EA:73:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/bfb6ff2c-40dd-3cfe-a513-19fc6b20db7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:20:b3:c3:4b:70:23:2f:fb:3d:55:b4:9d:6f:33:44:d2:84:
         56:26:2a:58:95:eb:a2:8b:23:13:44:78:b1:7d:76:e4:4e:d0:
         77:25:fd:14:27:93:b2:17:ec:b6:5a:0e:c9:2f:18:60:ce:82:
         89:f9:b1:3c:ab:a8:10:f8:ae:91:f2:a4:20:78:15:39:de:7f:
         6c:ff:fc:52:7f:74:1a:15:3a:69:50:4c:a5:09:e9:45:70:2f:
         6d:9f:45:3a:fb:17:59:9d:6c:2e:88:dc:af:45:60:87:22:43:
         09:f5:3c:5a:d7:a8:cc:b2:67:a7:ba:9e:6b:2e:13:76:62:f4:
         ad:4d:6c:5b:89:07:24:ef:ad:20:ed:91:60:ac:60:40:b5:99:
         98:8a:0d:69:21:de:57:5e:ac:3b:dc:88:6e:e6:e0:b2:f2:30:
         38:51:5c:1c:8a:43:dd:29:0a:1b:23:1d:d1:73:60:84:4b:c5:
         2f:d8:08:a0:80:c7:cb:b0:cb:80:84:58:28:43:e5:e0:ca:f1:
         4c:d3:5e:43:9f:b8:06:53:23:c5:09:db:90:ef:73:55:e7:22:
         10:40:83:2f:c7:11:57:e8:24:85:37:bf:83:a6:b4:d8:4e:fa:
         6c:64:2e:70:48:6a:b9:17:40:28:f7:d5:98:cb:f0:bc:1d:16:
         29:89:99:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:56 2024 by rpki-client on console-fra.rpki-client.org