Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7afe97c7-a087-3679-bdd8-09f4d2d69a60.roa
File:                     7afe97c7-a087-3679-bdd8-09f4d2d69a60.roa (raw, json)
Hash identifier:          LE3K/ety1fWzyiu8K4FG1CDcNlS2z84dLFV+FaZ8ksQ=
Subject key identifier:   75:F4:83:1A:81:70:6E:E6:4B:3E:E0:DF:33:FA:45:20:2A:AC:48:B7
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285847872125A2FBCB9163BA976100
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7afe97c7-a087-3679-bdd8-09f4d2d69a60.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:25:a2:fb:cb:91:63:ba:97:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=5aa0a141-c162-4124-8368-82de40248b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:bb:2d:b0:b1:51:5e:b0:9b:0f:a8:c3:93:
                    df:05:45:63:8d:8d:2a:cc:fd:2d:f8:29:3c:0a:9b:
                    0e:ae:5f:96:ed:b8:05:9c:f9:ce:17:a6:b3:c3:45:
                    cb:df:88:b5:e3:01:8e:3b:dc:44:37:77:d8:c8:36:
                    4c:e4:91:36:7e:53:87:ff:e3:96:f3:d6:a4:8a:dc:
                    52:29:75:67:8b:85:c4:13:7c:79:4e:7b:e9:2d:ed:
                    a3:c3:ac:99:06:a0:e4:6f:d3:19:0f:7f:82:68:5c:
                    65:0d:57:21:cd:ff:c8:97:71:61:52:14:7b:a8:20:
                    f4:7f:99:08:54:75:f4:b2:ad:26:e4:bf:ec:17:5d:
                    eb:bc:23:25:58:9e:95:59:35:c7:1a:85:03:d7:ac:
                    77:20:93:4f:42:64:cb:b0:00:96:cf:18:f1:86:4d:
                    42:9b:39:0e:6c:d7:f0:32:70:7b:6a:ce:1e:88:c0:
                    e3:71:90:b2:55:49:61:48:ab:da:39:32:d9:05:b7:
                    97:dc:d7:44:2a:af:75:f5:72:e2:d7:ad:48:4f:03:
                    f1:29:96:f5:75:dd:26:12:b5:fa:f4:09:00:ae:70:
                    18:64:a2:80:db:50:90:ba:2f:61:aa:5b:09:7e:56:
                    6f:94:96:62:77:f7:a6:df:b8:16:c4:17:d0:03:e1:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:83:1A:81:70:6E:E6:4B:3E:E0:DF:33:FA:45:20:2A:AC:48:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7afe97c7-a087-3679-bdd8-09f4d2d69a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:e2:f6:96:79:7e:0e:32:eb:07:33:3d:a6:df:fa:92:df:
         c1:e0:1b:7f:81:13:53:01:9c:41:bd:8b:6f:de:72:21:f0:97:
         f3:70:3d:0b:2f:a8:a1:52:1d:08:f4:67:59:a6:34:5b:e6:75:
         80:f4:f8:5a:dc:e1:11:c2:42:6f:39:8b:aa:1d:5e:35:4f:50:
         29:ea:5c:6c:6d:e4:66:97:4a:44:eb:45:64:0c:91:41:08:87:
         83:b4:bb:e5:f1:1a:b1:ce:e4:82:ee:ba:d3:5a:b0:ad:49:e8:
         ec:0a:92:2e:9e:3f:b9:3b:5a:6d:f8:57:75:fa:3e:1d:ad:4b:
         9c:2f:f1:6c:ab:ff:18:6e:c6:9c:98:04:7b:8d:89:f2:a2:cc:
         5a:06:81:56:ec:68:7d:69:62:f9:ce:e6:95:24:c8:d4:5d:dc:
         52:00:7f:ce:b5:dd:e5:6c:20:9b:97:22:e8:ed:cb:85:84:19:
         f5:3c:0c:27:73:8c:93:c6:c5:70:64:31:f0:e6:9e:ef:02:e1:
         e0:5a:19:5e:54:c7:d1:ba:4f:23:b8:e7:4d:62:05:46:5a:1b:
         af:73:1c:02:79:26:11:6a:b1:98:74:31:f1:5d:93:6a:04:a7:
         bf:34:d1:ab:91:a3:97:d9:11:14:c3:38:eb:51:86:6c:85:29:
         23:e4:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org