Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/1e4ac8ae-4ece-3037-955e-2d140c9408b0.roa
File:                     1e4ac8ae-4ece-3037-955e-2d140c9408b0.roa (raw, json)
Hash identifier:          a9GLv5NBFPkaogrrOM1hKGvBP0uaPwDpC1EQNKqzIkQ=
Subject key identifier:   63:CC:62:6F:3F:67:A7:FD:5C:B2:74:43:E0:20:02:2D:3A:53:E5:FE
Certificate issuer:       /CN=7ea21a7b-596c-45f8-899e-6879815f26b1
Certificate serial:       010D0C9F432858479AABEB8DF491B65545A58F00
Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/1e4ac8ae-4ece-3037-955e-2d140c9408b0.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        139.64.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:eb:8d:f4:91:b6:55:45:a5:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=dc243487-7dad-41e9-af8f-712e00f2b829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:2c:2b:3d:85:4a:a2:f1:d3:b8:86:f1:e7:
                    43:4f:2b:79:13:44:ce:ac:0a:f8:4a:b3:cc:87:4d:
                    13:d8:be:fb:a9:98:f5:9d:d3:f1:ea:d7:08:6f:f4:
                    f5:f3:44:2f:d0:3a:17:2d:c8:a9:8f:3f:be:33:e3:
                    c0:f2:1b:61:10:0d:3e:a7:d3:80:04:2d:48:64:52:
                    90:5a:78:24:87:36:b9:da:c8:a9:e2:57:1b:b3:9e:
                    38:98:e7:09:63:cf:32:79:a0:3f:c3:67:00:58:a4:
                    a0:e7:f0:1f:de:af:5b:eb:b9:85:1c:85:e8:12:b3:
                    8a:c1:31:c7:d7:25:3a:8e:0b:73:05:03:1c:88:10:
                    41:cc:2e:40:94:1d:2f:dc:3a:29:0d:f1:71:44:a0:
                    18:43:ae:e0:de:fb:ed:da:84:2e:15:74:60:1f:a4:
                    76:fe:c8:3b:a6:88:87:b9:25:89:e5:85:dd:c7:40:
                    e9:64:bd:53:2f:c2:05:b5:d3:cc:00:29:36:37:a8:
                    ff:cd:96:fc:d5:15:58:c8:7b:26:9d:7c:84:e9:38:
                    19:b7:19:6c:b7:e7:42:68:90:00:18:e4:cd:6d:45:
                    7a:61:77:67:e5:54:ea:52:80:56:c8:24:d3:22:69:
                    1a:72:4e:ad:df:2d:f1:0e:22:93:f9:4c:c0:42:2b:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:62:6F:3F:67:A7:FD:5C:B2:74:43:E0:20:02:2D:3A:53:E5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/1e4ac8ae-4ece-3037-955e-2d140c9408b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl

            X509v3 Authority Key Identifier:
                keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:46:94:e0:b8:83:75:2c:81:15:4d:e5:e0:55:c9:a8:15:
         02:e4:9b:73:b5:60:7d:cb:ec:25:3d:5b:40:ff:74:40:b8:b6:
         e5:15:c8:2f:b9:5b:34:a2:f8:1a:0f:b1:1b:ca:3e:5f:83:99:
         f2:28:e5:11:ad:cb:0e:17:6c:4d:12:4a:57:04:37:99:85:2d:
         bf:31:d1:7e:b5:ca:77:62:6c:2a:91:92:cd:a3:e1:f0:5a:c9:
         af:33:32:fe:35:1b:b2:c2:aa:3c:5f:36:52:02:db:9e:34:0c:
         4f:0c:61:c5:86:56:7a:de:71:7f:a6:2d:7b:16:93:43:3a:1a:
         4d:35:7f:8c:4d:c7:85:db:1c:57:f3:3a:9d:2f:16:09:5d:9a:
         b2:46:61:18:2e:64:05:a6:c4:ef:ed:b7:11:02:21:6f:bb:90:
         23:1c:75:12:b3:50:7a:85:0d:53:3f:da:9f:ce:e1:af:5a:12:
         a1:87:9d:d7:ed:10:24:1c:97:d9:1b:47:6a:71:08:72:18:00:
         2a:1d:39:47:5e:80:81:04:5c:1b:5f:25:58:10:05:9b:0c:5b:
         87:ca:aa:09:dd:30:48:a3:f2:eb:e8:fc:47:6e:14:18:c2:dc:
         99:10:ab:09:18:c3:b6:ad:47:25:e4:54:3c:3f:3d:0a:bd:48:
         7f:52:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:06:37 2024 by rpki-client on console-fra.rpki-client.org