Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0da0e958-3420-3c17-8c36-32cc8a73d573.roa
File:                     0da0e958-3420-3c17-8c36-32cc8a73d573.roa (raw, json)
Hash identifier:          ThE4uBKjlfOBjaBbFE7Po0fflk7OtlliYYbg0ZKGIBM=
Subject key identifier:   26:3F:98:F2:AD:58:17:67:A5:30:34:C0:04:C6:CF:D4:1E:06:27:7E
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584799467729CB63E398C2B34100
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0da0e958-3420-3c17-8c36-32cc8a73d573.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     11232
IP address blocks:        64.33.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:77:29:cb:63:e3:98:c2:b3:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=b52e3bd5-6cf5-4a8f-a14c-c2f4c68dc4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:a0:48:41:7a:2e:aa:2c:9a:2f:fd:d9:47:
                    62:d9:9e:2f:c6:26:a9:f5:ea:c9:5e:98:f6:0b:d2:
                    e0:7f:4b:df:03:4d:60:90:bc:c2:be:28:f3:bc:c8:
                    ab:6e:90:83:b8:7e:6e:19:7f:99:b2:64:97:a9:5c:
                    01:35:2b:ea:c0:ac:d0:e0:81:5d:2f:9b:da:08:78:
                    a1:a7:36:4c:1b:e6:e3:02:b1:8a:98:cd:ff:15:08:
                    7f:7b:64:4c:f3:4e:93:42:59:9c:7a:75:42:07:18:
                    da:ac:c4:f7:fa:c2:15:5b:7f:0e:e2:5f:e7:5f:dd:
                    61:1d:1f:5b:42:0a:a9:dd:51:79:c2:8f:cd:71:fb:
                    3d:12:be:ef:65:a7:85:48:e1:58:f4:b1:a3:57:f4:
                    10:91:5b:9d:8c:2e:ab:c2:09:ce:69:15:2c:fa:c3:
                    bd:21:9e:96:95:6d:5d:e3:8d:c0:58:c3:22:7f:af:
                    9d:a4:9f:52:59:5c:45:34:4a:21:33:ae:a8:01:17:
                    7a:e5:9c:83:ad:af:0a:02:a1:8f:e8:70:e5:bb:2f:
                    3b:d8:f8:9e:25:f2:df:24:d5:b8:a8:4e:3d:e3:40:
                    d3:da:c0:82:7a:cf:cb:35:18:87:ef:40:78:b7:b6:
                    73:49:fc:4a:fb:05:12:9e:d8:e4:e3:32:d6:50:5c:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3F:98:F2:AD:58:17:67:A5:30:34:C0:04:C6:CF:D4:1E:06:27:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0da0e958-3420-3c17-8c36-32cc8a73d573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:53:a0:74:46:22:b2:5f:af:34:10:a2:1f:06:c4:5a:74:
         c7:ac:95:f1:90:15:c3:98:74:69:1f:d7:44:cf:5b:25:4d:6b:
         7d:6f:8f:73:b6:f5:9e:96:66:d4:69:33:11:ac:75:40:b9:cc:
         45:c3:79:6d:1f:01:7b:47:2f:9f:4a:b2:51:cf:b1:f6:e1:a9:
         12:5e:40:99:d7:40:ff:5a:57:7a:15:6a:80:b6:13:e5:da:82:
         03:08:7f:31:23:3e:59:6d:e3:0b:34:f4:a2:ed:7f:15:a9:a6:
         53:97:33:17:b4:28:f2:8f:83:ea:0d:be:5d:c0:b1:4b:27:d4:
         a9:c7:dd:23:b4:d5:30:16:ca:38:10:e8:0c:ec:c8:4f:65:91:
         94:04:a0:9a:19:75:c8:ea:85:dc:2e:6c:a8:5c:25:c4:7f:62:
         3b:28:cd:78:2f:15:cb:67:6e:74:1f:d6:18:9e:54:c7:35:ac:
         1c:25:93:7c:16:5a:27:61:83:55:94:bb:f6:86:5a:ca:46:b0:
         40:48:3a:1a:a2:5b:73:21:d1:9c:0a:92:ad:28:c5:b6:08:c4:
         b0:53:92:7b:99:da:88:39:29:b3:db:b7:93:8d:3a:45:31:4c:
         a1:fd:80:b5:7e:6d:61:98:35:d5:85:fa:8b:cf:ec:e2:a1:ff:
         18:6c:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org