Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa
File:                     17063732-949a-3fe9-b294-49965e4df87a.roa (raw, json)
Hash identifier:          FpXpNHpL39vVBAYDu0dWCVwiCdhVKb366rz+P1OZRm0=
Subject key identifier:   B2:C6:16:36:86:A4:28:38:06:42:61:57:96:F8:EF:4E:51:97:81:49
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584789EBF1E7F55AA7E564557E80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        64.63.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f1:e7:f5:5a:a7:e5:64:55:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=57f27570-fcee-47ce-8f97-95d55361a2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:11:7a:3d:c9:cb:48:b4:b9:ad:2f:c5:37:
                    30:f0:71:52:a5:47:93:21:b2:d8:8f:cd:78:c9:07:
                    99:7c:83:56:12:3b:57:9d:6f:42:66:43:bf:34:59:
                    41:d5:37:59:a6:c6:59:48:d2:ef:82:72:00:a5:98:
                    7b:81:cc:a5:6b:a3:64:be:95:35:1b:3e:a1:f6:04:
                    1d:87:81:4a:57:1c:12:44:97:74:0b:23:b5:ad:09:
                    f6:c6:d5:9f:f8:f5:78:0d:63:a5:5d:4a:88:ea:95:
                    da:77:f9:86:36:7c:bb:ea:44:f3:f5:eb:26:0a:8b:
                    5b:22:f7:f3:b2:0c:13:fd:5f:8c:bf:0f:83:19:4c:
                    d1:6b:8c:bd:51:9c:b3:19:08:dc:55:3d:4c:2c:93:
                    49:2c:3d:7f:cf:4b:f1:aa:ea:a2:90:6f:04:00:c1:
                    65:e0:2c:76:3e:31:b0:fe:7a:6d:2d:a3:03:c7:d4:
                    82:06:1e:5d:bc:ce:bd:38:08:df:23:61:34:61:51:
                    b5:b6:f1:77:95:a6:4f:3f:eb:a0:25:db:7d:3a:65:
                    3a:d2:ee:2f:c7:9d:8a:1d:5f:65:48:c5:c2:23:9b:
                    04:cf:23:74:84:4e:80:c5:cb:4e:51:ad:38:7f:0f:
                    f3:37:de:87:f9:97:46:bb:ce:e0:83:b7:0d:78:ac:
                    68:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:16:36:86:A4:28:38:06:42:61:57:96:F8:EF:4E:51:97:81:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:70:7b:e5:8d:11:0e:d2:85:76:d7:6c:09:3d:eb:56:8d:
         d4:7c:1b:30:be:e9:aa:ff:e1:ac:04:a8:ff:ae:1d:d9:f1:83:
         d1:b0:37:90:cf:00:fb:5f:53:4e:0a:fa:78:ae:27:e0:00:33:
         d2:f8:1c:fe:60:2c:b2:21:22:53:76:e7:2c:91:9f:8a:27:71:
         2a:ba:82:ef:90:59:04:55:2c:68:1e:31:aa:6d:7e:32:64:e6:
         d4:32:e9:af:6c:3d:7f:9d:89:10:67:cc:8d:e7:ca:d5:45:c9:
         f7:17:f5:65:2e:0d:97:b1:f5:c7:93:36:23:31:2f:6e:31:9e:
         11:2c:84:cd:7d:61:22:31:e6:5a:03:c2:6a:ce:4f:f0:4f:ce:
         a5:f4:8f:db:83:0e:0b:71:69:20:ce:39:07:f4:f1:6c:9a:a0:
         1b:2a:ba:2f:80:ff:57:b1:96:ef:cd:36:bf:17:72:f2:8b:f9:
         ba:dc:8c:81:b6:c7:6b:63:7a:84:d4:c8:8e:c4:38:00:ab:e2:
         aa:d5:23:ef:09:f3:ea:4e:86:e8:ac:64:a5:41:83:9a:69:1d:
         6b:78:1e:34:b9:eb:62:61:84:d4:3b:aa:ca:6a:d4:1a:72:59:
         63:d3:1b:cf:ce:a4:1d:d4:bd:e2:a3:95:1c:20:64:ee:31:97:
         5d:be:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org