Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa
File:                     cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa (raw, json)
Hash identifier:          V/w0+jV5D8zDdiAgaG2PtilIRkzj/hjNG0E5u4mg+9U=
Subject key identifier:   3C:5F:7F:12:D8:88:9F:6F:62:D3:C7:D4:DD:21:86:13:3C:27:71:62
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584787212BFCC96A46BADD968B80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:2b:fc:c9:6a:46:ba:dd:96:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=e75f2bae-a560-4cb8-8b97-5d03fc3d3a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:55:9b:df:ca:41:d0:dd:93:17:09:1d:31:
                    5c:a7:09:c9:69:c6:5c:af:a6:72:3e:9b:e2:8f:81:
                    e2:37:98:5f:36:54:af:38:ca:ba:64:ef:67:c3:59:
                    83:8b:c7:1f:4b:75:48:a6:27:b4:23:3f:56:53:13:
                    7a:cc:20:c0:25:fc:e3:8a:37:34:7a:03:00:59:3f:
                    1b:69:14:74:a6:03:98:7d:2f:e8:07:05:73:41:10:
                    5b:f3:0b:fd:3c:49:2e:38:0f:6b:8a:5a:47:8d:8d:
                    c5:59:d7:d1:eb:7c:ee:03:a4:91:d0:5f:0c:c0:0d:
                    ab:2a:c6:58:97:a3:49:26:37:4f:a6:8e:f6:e6:e6:
                    39:b5:81:f2:ef:80:c2:be:51:db:da:3b:27:c6:5c:
                    76:fd:26:be:b2:8b:39:b7:e5:a8:9c:bd:de:cc:fe:
                    c6:29:60:58:71:82:75:45:8e:73:b7:4b:57:e9:4d:
                    86:69:dc:4d:9e:f9:16:dc:22:6d:73:73:37:00:21:
                    19:2e:c7:a1:29:a2:d5:51:54:0c:46:2c:88:61:6e:
                    78:d7:30:25:fc:d1:8f:f9:b5:ec:f9:ce:05:04:b5:
                    8b:0f:11:f7:c9:dc:03:f6:3a:15:ae:6c:88:cb:a1:
                    7a:90:c7:df:a4:1e:83:51:f1:c2:31:8d:b2:da:4f:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:7F:12:D8:88:9F:6F:62:D3:C7:D4:DD:21:86:13:3C:27:71:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/cff8125a-573d-30a3-b0e6-78084c6d9bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:2b:1a:7a:a1:f0:7a:29:3d:94:6f:7e:d8:d6:2a:01:6a:
         fa:fe:ef:7b:e2:53:8c:21:22:b7:60:56:7a:06:93:97:2f:8b:
         b3:b9:7b:fd:63:6a:9e:b7:f3:b2:fb:66:e1:3f:2d:94:9f:13:
         9d:cf:c2:d0:99:a1:08:1f:3e:7c:40:c9:42:a9:d5:36:61:f8:
         c1:8a:ee:44:ac:35:a2:47:07:89:5a:bf:b0:c4:04:e5:e9:a8:
         c3:8b:b0:d4:14:9b:dd:c5:19:cd:99:70:96:02:cc:6b:7e:a9:
         21:39:fc:cd:76:5a:07:ea:d4:f1:96:3e:4e:08:3f:3b:b8:60:
         2c:06:c1:79:f5:0b:c5:04:e9:5e:8a:2a:e8:27:78:92:f5:6d:
         9e:08:b6:5f:16:4d:a8:0f:32:aa:f4:f0:f7:9c:56:46:dd:75:
         ee:b9:02:52:f8:e0:a0:7a:38:08:28:89:c2:b3:c7:20:43:55:
         a8:27:80:38:9b:04:bc:28:54:69:77:5b:83:4a:b6:bf:25:3e:
         de:5a:23:06:25:51:7a:6c:63:76:d2:e7:45:ee:58:51:c9:51:
         3c:65:2d:44:b5:be:96:55:1b:b3:7d:b3:63:0d:5a:48:3a:f7:
         db:1e:fb:fb:40:3a:12:c4:23:7f:c0:9f:84:7b:05:46:ad:2a:
         51:f1:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org