Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa
File:                     4756446c-96ad-309f-b6b4-5601e968e103.roa (raw, json)
Hash identifier:          s65S5E+nBlGOOYpbq24H5dhIvUextzrlxJYnQyCM3iU=
Subject key identifier:   62:13:CE:D1:2A:E8:31:D9:93:1F:97:E0:8B:2F:8F:CE:3D:44:EF:B2
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F43285847525C8BF75ADA9A0987B04A80
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa
Signing time:             Tue 24 Sep 2024 15:22:42 +0000
ROA not before:           Tue 24 Sep 2024 15:22:42 +0000
ROA not after:            Mon 23 Dec 2024 16:22:42 +0000
asID:                     27446
IP address blocks:        64.147.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:5c:8b:f7:5a:da:9a:09:87:b0:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Sep 24 15:22:42 2024 GMT
            Not After : Dec 23 16:22:42 2024 GMT
        Subject: CN=3b084e44-5281-4b24-8ac5-dce51e54a0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:58:dc:4d:6f:1e:99:91:69:53:60:c4:70:
                    e8:61:a1:7d:57:c1:12:8a:67:be:35:a6:1d:6c:a8:
                    8a:a6:a5:d3:c4:49:f6:2f:94:dd:3e:e3:b3:b6:4c:
                    12:99:1b:7b:c6:66:7c:1f:7a:c6:cc:50:e1:04:45:
                    81:3a:4c:46:21:59:8b:6a:5d:17:8c:dd:4c:80:42:
                    af:7e:38:4d:93:f3:3b:ac:ca:9d:8a:bc:44:c2:a9:
                    c2:45:fd:de:59:40:7c:fc:6d:8f:47:e9:5f:8d:0a:
                    72:0b:70:25:45:aa:2a:8b:c5:ec:4d:20:c7:f7:a0:
                    33:9b:2c:7a:9c:ce:07:e8:3d:9d:6f:91:4a:0d:b6:
                    49:99:27:16:83:f7:dc:85:c8:77:07:7d:6c:6e:2d:
                    6b:77:6c:a6:47:91:6c:3e:f2:b5:47:c8:4f:a6:53:
                    79:67:c2:39:c0:d7:df:5b:b1:c5:a7:cd:cc:61:ec:
                    18:69:10:04:62:22:1e:6e:bc:34:1d:16:75:dd:2d:
                    26:b2:15:02:15:bc:93:e6:e0:5c:16:6b:eb:8b:4d:
                    1f:c6:14:6b:20:3f:4a:4d:fa:ce:e6:2a:37:24:0d:
                    cc:0c:83:c4:fd:e1:39:16:41:52:8c:92:57:36:3a:
                    bc:af:4a:3f:71:ea:e7:4d:97:5b:37:bc:88:a8:ef:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:CE:D1:2A:E8:31:D9:93:1F:97:E0:8B:2F:8F:CE:3D:44:EF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.147.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:2c:a8:2b:62:d6:2b:83:72:a0:1d:18:48:61:9e:50:ac:
         6c:a9:c7:3b:24:13:69:df:da:c9:15:ce:44:f6:fc:f4:0f:4c:
         21:6d:50:ad:8b:d9:d4:9a:2b:00:b8:d9:9c:f1:36:58:b3:0f:
         a7:ac:b9:50:b7:c0:9e:c7:ec:59:be:aa:a6:ab:b6:5a:50:b5:
         56:1b:50:8d:18:08:16:cf:d4:aa:90:04:64:2e:ac:82:cc:59:
         14:ad:65:70:ed:b6:45:cd:67:b0:40:04:5c:e7:04:da:3e:e5:
         8b:d0:04:39:b3:cd:7a:32:8a:30:d2:18:30:03:0b:ff:ad:ca:
         2e:96:3f:a8:ec:12:6a:45:d4:f1:1e:d0:b2:6f:40:82:89:24:
         19:c8:b9:19:b5:b2:4c:bc:2f:4d:22:11:d2:cd:d6:16:e2:91:
         49:db:7e:0f:df:04:29:98:bd:92:ca:0c:78:86:68:50:84:3e:
         2a:5f:9f:33:96:b2:39:71:9f:ba:ef:5c:fd:01:25:86:b8:96:
         7a:4c:a1:61:22:f7:a0:4d:bb:7b:f7:26:29:f3:a5:36:50:c8:
         65:33:3f:9f:c5:04:4d:f4:72:30:b8:16:65:f1:1e:44:aa:c0:
         b0:ca:8e:09:ce:fa:e2:42:39:d1:61:36:7e:46:09:ea:44:90:
         4f:da:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:24 2024 by rpki-client on console-fra.rpki-client.org