Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa
File:                     a420750c-a5d8-3043-b838-9eefcf7cad52.roa (raw, json)
Hash identifier:          1BzchM33nJK6F+ZvMbGoBh5HQjLATkYLnRYzxuipCeo=
Subject key identifier:   1B:5B:B7:0F:37:83:FD:46:06:56:82:9D:04:4D:94:F6:0E:37:D4:5A
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584789EBFA19E9CAA487D92AB680
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     13414
IP address blocks:        64.63.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fa:19:e9:ca:a4:87:d9:2a:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=490e298b-7f15-4ae2-962f-490bdbb71eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:74:cd:6b:7f:29:f6:37:c4:29:cf:33:76:
                    47:fb:3f:9a:82:47:b7:18:18:c1:85:d9:59:65:45:
                    74:60:ba:1e:de:76:69:2c:a4:be:1f:b5:f5:c1:a3:
                    4b:e4:8d:2e:14:2b:ff:7f:8b:ef:6f:30:80:61:29:
                    12:1a:74:f6:92:e2:25:9a:be:7b:b8:2b:ff:1b:8b:
                    eb:e3:64:16:9b:30:d7:9b:02:03:e0:bc:8e:7a:bb:
                    f0:43:e2:e4:e1:dd:f1:f8:3a:9c:07:cd:cc:3e:98:
                    1c:52:1e:da:ea:75:65:42:a2:13:63:cd:0b:0e:98:
                    ee:a1:05:3a:93:35:a1:14:79:87:ac:44:7b:44:82:
                    80:b7:12:05:eb:09:9f:92:a4:d0:26:55:5f:00:55:
                    8f:27:20:95:92:45:47:37:74:fd:b5:69:ba:1d:d5:
                    9b:97:fb:1f:2c:90:bf:fc:23:42:d4:8b:b0:f4:e7:
                    5b:87:e0:2f:0d:4b:2d:11:48:fe:00:71:46:1c:94:
                    b3:dc:7a:1e:3e:88:09:2a:79:08:46:5a:be:32:08:
                    d4:d0:68:53:9b:42:83:63:a4:65:a2:d3:2d:2b:d2:
                    63:58:66:57:f2:ed:25:f8:42:5f:70:36:93:0b:99:
                    91:2b:94:8e:d2:74:05:46:e9:3e:a5:fd:8c:50:ee:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:B7:0F:37:83:FD:46:06:56:82:9D:04:4D:94:F6:0E:37:D4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:94:97:d0:55:7b:0e:8e:d9:f8:9b:a7:99:45:68:50:2b:
         eb:44:e6:87:c5:1f:ae:10:4e:d1:d1:05:21:62:0d:78:46:26:
         2d:11:ad:1e:95:84:3a:8e:3f:bd:60:66:a6:62:86:bd:14:31:
         5d:5d:c1:58:14:0f:c1:5e:83:a2:e2:44:53:f0:ca:7a:2c:0e:
         8b:82:bc:21:99:ac:dd:87:92:2a:94:42:6e:0a:ed:0c:b2:4d:
         40:1d:3f:b2:03:a1:bc:4a:d1:60:7c:e7:00:db:ed:2e:bf:25:
         eb:63:32:7a:85:ba:9c:a1:29:56:12:09:13:19:28:28:cf:8e:
         e3:b7:80:72:d6:1b:3d:64:c7:bc:64:d0:63:50:7a:68:a5:4d:
         7d:43:50:b3:62:b8:93:82:59:75:04:90:bc:1b:05:1e:38:45:
         0f:84:35:a2:4a:2f:09:ac:e3:82:4f:6b:86:23:b9:ed:4b:1f:
         3f:17:14:50:30:26:76:db:df:58:66:e5:a9:8b:45:f4:4b:e6:
         de:81:17:c0:d3:a0:4b:81:aa:4b:82:2d:5a:d8:93:57:a6:8b:
         d7:d2:0c:27:97:ea:c9:da:c6:5b:b0:dd:dd:f8:01:8d:41:62:
         30:69:71:04:f5:56:a5:e4:06:32:b1:2d:e3:ad:b6:86:09:33:
         2d:40:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org