Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa
File:                     ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa (raw, json)
Hash identifier:          oeshi3oqatLIUcQsNfElEXSvcQn9Caer1FJnMmBXovM=
Subject key identifier:   92:11:FC:7D:8E:5F:96:B6:3E:87:3A:90:66:A3:FD:0C:39:C5:CD:7D
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584787212587547285D98D484400
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:25:87:54:72:85:d9:8d:48:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=fdeec3ff-e546-422f-b6cd-de311337078a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:b3:0c:d9:72:3e:20:59:f2:57:db:3d:c3:
                    a0:ad:2d:d2:95:5e:4e:15:f9:3c:1c:3c:99:1e:4a:
                    6a:7d:ef:7c:a4:77:97:48:dc:2e:fd:15:7d:a6:69:
                    b9:a1:da:cf:f3:28:81:ad:b3:f1:08:a6:11:9a:f5:
                    b7:26:1d:c9:b8:4c:da:b4:c8:88:77:c4:bf:a1:67:
                    c1:36:50:0d:63:30:99:f1:07:91:79:6e:b9:d4:b8:
                    42:4e:d7:d5:29:49:9b:65:0c:ca:02:f7:1a:df:bd:
                    e6:10:73:82:3a:54:20:20:0b:c3:cc:82:30:40:b4:
                    8b:1d:cc:c0:2e:88:50:86:8f:9b:d8:02:18:43:fa:
                    1f:7d:73:3e:af:8c:50:5f:d5:0b:db:ee:80:91:61:
                    67:06:10:17:85:f3:02:87:a8:a2:b9:f9:93:5b:e1:
                    b5:a5:2c:55:8f:03:05:9d:ad:f5:0e:f3:68:31:09:
                    11:f2:14:33:0d:00:98:0c:35:b1:3f:db:4d:ef:25:
                    6e:e6:a1:d6:75:e8:ac:a6:b8:5a:4b:77:71:3a:52:
                    d5:e6:25:ce:f3:05:58:3c:7a:10:55:c1:6d:c9:74:
                    e5:12:21:21:e5:f6:95:9e:24:88:ab:dd:65:44:66:
                    7f:b0:8d:4a:f2:0b:0e:25:e4:92:86:a0:d5:d0:b9:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:FC:7D:8E:5F:96:B6:3E:87:3A:90:66:A3:FD:0C:39:C5:CD:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ff6ae0c5-7b2f-39f7-a5a1-84d83ce7d62f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:4a:36:44:e8:0e:fd:c7:de:b5:e9:ed:38:a6:38:08:68:
         04:31:2e:8e:02:eb:a3:3d:5c:d3:d9:97:78:32:75:91:f7:47:
         7b:76:61:ee:0b:84:ec:85:04:fe:bf:53:30:b3:31:38:7a:99:
         1d:d4:35:6e:03:c9:83:75:7a:f2:14:c7:02:94:f2:f3:3b:f1:
         05:c3:b7:6a:33:61:4f:10:ea:5a:8b:61:6e:60:3d:f8:a2:61:
         8f:74:66:27:ce:7b:2e:4c:34:f1:3c:50:d4:3c:e7:6b:b5:e3:
         c7:ac:55:97:4d:7d:c1:ee:18:df:24:57:7e:a9:a0:1f:3c:10:
         ed:e6:eb:a7:4a:ba:b6:48:7b:12:29:9c:6c:c1:00:2c:b5:66:
         1d:8c:ae:d1:91:cb:65:3e:5b:c9:4b:08:86:41:79:4d:23:05:
         dc:2e:44:4b:58:2c:7b:fd:47:37:d1:a5:3d:82:30:ee:ee:03:
         c2:11:aa:62:eb:70:3f:d2:f9:6e:a5:e7:17:ee:bc:76:c1:34:
         62:1f:15:74:33:c3:5d:34:dc:42:ea:73:3a:71:08:01:66:fa:
         b2:f8:ea:85:71:bc:5c:e0:d1:ba:cf:46:46:d6:71:0e:08:14:
         b5:57:d5:90:9c:f3:da:90:77:a7:46:b7:2c:6a:5a:1a:6e:a8:
         71:0a:0c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org