Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa
File:                     67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa (raw, json)
Hash identifier:          w6jLGx00VmMNaiXd/JcRmMZC6pK9uMZ6jEWR80KxYKg=
Subject key identifier:   E7:88:3B:19:E8:B9:19:79:33:DF:C1:56:C7:BB:38:60:CF:18:8B:2C
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F43285847C1DF5A3EAE0AA5F11AAAB900
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     5738
IP address blocks:        64.17.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5a:3e:ae:0a:a5:f1:1a:aa:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=ff86e388-f867-4162-a751-a34a614c424b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:01:e9:6c:6b:a6:bd:ca:ed:73:84:14:fe:
                    17:b4:80:d7:24:87:70:ae:cc:24:b1:b9:d4:10:9c:
                    74:1a:7b:c7:6f:5d:44:a9:2d:70:b9:c5:88:00:c1:
                    3b:44:42:cc:e0:bf:23:49:57:68:ef:bd:7a:22:71:
                    1e:fd:aa:63:5e:ad:d3:e5:a1:ab:d7:1f:5f:c7:29:
                    18:f4:c0:65:79:bd:e9:ba:20:16:1f:5b:b8:ac:70:
                    27:43:4b:ef:f0:a0:de:9f:a3:94:25:83:da:a3:4b:
                    fa:a7:6b:2a:36:ac:8b:92:a3:28:08:7e:4e:66:4f:
                    e5:0b:a0:e7:cf:59:f5:67:98:6d:0e:b6:52:d3:41:
                    03:c0:48:e0:68:d8:be:ee:d7:20:48:8c:d6:16:2e:
                    6b:a7:2b:b9:6c:16:43:3e:d3:9d:59:7f:51:37:ef:
                    a9:e4:4e:a1:cc:c2:f1:4b:6b:a8:d1:3c:71:31:68:
                    ac:04:cb:81:98:17:1a:a6:b7:ac:dd:19:48:af:70:
                    a5:f9:63:a7:a5:ff:b5:44:f3:13:db:81:77:f8:92:
                    60:05:2e:0b:58:fe:0e:bb:fc:7a:f8:9c:c5:f9:80:
                    78:cc:07:5d:6e:14:d1:ee:ca:95:cb:0a:de:83:5c:
                    30:c7:51:aa:65:9c:b4:23:9d:c1:5d:95:2f:79:7c:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:88:3B:19:E8:B9:19:79:33:DF:C1:56:C7:BB:38:60:CF:18:8B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:03:a6:ce:f1:f8:4f:75:49:f6:49:6b:38:67:cb:56:48:83:
         cb:6d:3e:f7:ce:e3:60:85:22:cc:9e:3f:27:e4:84:3f:1c:04:
         ce:f0:b7:ed:2e:18:98:78:26:9e:03:d9:65:4f:d2:84:ea:44:
         7b:0b:e7:8c:f9:64:28:a6:ca:08:0f:29:a8:66:77:b0:17:ff:
         f3:cf:05:83:c8:9e:7d:19:b6:df:bc:38:12:2f:bf:0e:d6:40:
         f7:69:80:ca:b4:02:cb:f9:49:e4:60:b2:d3:38:16:a1:fe:12:
         98:76:4f:95:ce:d0:96:14:d2:6b:d8:8e:7c:6c:61:0d:eb:62:
         3d:d9:a3:9a:53:2e:c5:aa:f2:4f:d7:2d:cd:05:a5:02:cd:a0:
         ed:9f:85:6d:7d:c6:25:9d:19:2d:b7:72:c9:04:1f:7d:92:10:
         be:86:eb:db:92:4b:d3:b2:80:91:4d:7b:13:aa:52:2d:ee:a5:
         4c:87:99:8f:18:2e:15:06:fd:cf:38:1f:b7:d5:3e:19:38:ef:
         d6:f1:ec:80:53:61:a6:2b:49:b1:da:79:ee:05:27:89:9a:48:
         30:f2:3c:e1:b0:b4:d4:b3:8c:0b:61:58:1a:36:9f:5a:8b:ff:
         da:95:cc:34:67:d7:dd:36:98:a8:95:65:49:90:87:25:bc:2a:
         dd:f7:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:23 2024 by rpki-client on console-fra.rpki-client.org