Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/352215aa-f91f-3436-aa17-1678b2863246.roa
File:                     352215aa-f91f-3436-aa17-1678b2863246.roa (raw, json)
Hash identifier:          cy2NyZxO/7y4BVdElU3rlyAkKkRhoUsabRKKh451G44=
Subject key identifier:   97:77:1C:8F:7C:F2:20:06:CA:9F:AA:7B:2F:A1:35:A3:D9:66:86:33
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584787212B21C55AEBE6D88DD880
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/352215aa-f91f-3436-aa17-1678b2863246.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:2b:21:c5:5a:eb:e6:d8:8d:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=642196f8-fb7d-4a66-b8e6-c995d3c2f86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:fe:3c:e7:67:3b:fe:60:3e:bf:e4:dd:a7:
                    57:5f:3e:de:5d:ee:42:c9:3e:36:18:95:7c:b9:86:
                    5b:7a:0f:eb:f6:b0:da:ea:d0:14:6e:2d:34:9d:fc:
                    2d:a4:f8:de:e7:72:93:3d:e6:b6:1d:e0:54:3f:28:
                    0d:2f:eb:9c:30:c2:77:51:bf:33:51:db:b4:cd:42:
                    73:d0:e5:00:90:46:f4:b9:a2:2c:07:44:4d:2d:e8:
                    a8:f5:82:db:15:b9:15:bb:95:4a:39:6f:47:fa:3a:
                    15:c1:89:52:17:ce:87:4e:5b:d0:c0:77:90:0d:16:
                    aa:3f:cd:57:71:72:63:49:37:af:2e:d8:02:84:28:
                    99:d7:2e:db:56:83:39:9a:73:22:ac:c6:1b:a4:b2:
                    3f:f4:4a:5e:d9:0a:89:f2:bd:b5:90:a4:eb:65:f3:
                    bf:f0:7b:45:30:ae:ab:20:14:69:34:d5:df:80:2f:
                    a3:e6:cd:70:fe:fd:a7:5d:f5:27:fb:bc:85:db:a2:
                    9c:77:fc:f5:3f:e0:2d:ba:c5:a2:aa:51:15:c6:2d:
                    9a:94:b8:5a:d9:03:c2:b6:f2:0e:f2:57:aa:39:86:
                    78:d4:99:f3:97:f9:30:5d:5e:21:e3:8b:50:e9:d5:
                    01:b9:97:d5:b8:39:87:35:ed:3b:2c:8a:61:ce:9a:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:1C:8F:7C:F2:20:06:CA:9F:AA:7B:2F:A1:35:A3:D9:66:86:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/352215aa-f91f-3436-aa17-1678b2863246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:fb:15:89:7c:c7:03:e2:d6:9c:75:c2:c6:d0:06:5d:fd:
         54:e2:d4:ac:eb:dd:9a:68:da:2c:bd:dc:93:b3:c7:f4:fc:35:
         0a:4d:e7:26:de:7a:e2:dc:89:9a:ea:d6:83:f4:23:ec:d9:2b:
         5f:2c:24:d9:67:07:47:99:8c:1d:72:65:f3:3d:e6:df:f1:43:
         c8:00:b6:1f:40:a5:b3:6b:22:b5:1f:d9:bd:54:f8:e8:b8:b9:
         73:c8:e3:60:90:18:2d:f6:a5:e7:70:c6:c8:88:2a:95:e6:92:
         2f:df:bc:04:e3:b8:62:96:ed:aa:1f:e7:ad:e8:22:1a:8a:83:
         26:6c:a9:2b:3b:14:ae:f7:59:7a:eb:9e:7d:98:b6:ea:bd:0b:
         4b:ad:d7:88:b1:ae:0f:0c:b3:96:cc:92:92:a6:4f:21:3e:e5:
         e9:f0:5b:69:31:bb:3a:99:45:c7:8b:3e:c1:0c:dd:f4:9b:2a:
         bd:f3:46:a4:09:70:7d:52:c8:48:9b:f0:9e:a4:79:1e:35:d6:
         d4:40:45:31:9c:25:94:c3:83:e8:37:2f:30:9c:41:74:b0:4b:
         49:b5:b8:21:f0:69:7f:9c:5d:5f:62:d2:1d:64:65:d2:57:9f:
         ca:ac:5d:0b:5a:65:75:21:5a:d7:a5:24:70:7c:d5:bb:4a:d4:
         51:52:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org