Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa
File:                     eae38249-949c-338e-a384-9f61ab8838c3.roa (raw, json)
Hash identifier:          qvRey+m9P9X4V3ql6czDzAMbpSmNgz04BvfPmdMwvRQ=
Subject key identifier:   E3:63:62:36:70:D4:11:47:50:A3:39:26:7F:DF:E7:5B:A2:F1:3B:DF
Certificate issuer:       /CN=eaf7df35-c67f-440d-9799-461e7a809ef3
Certificate serial:       010D0C9F432858477BF65C333BF844FFB3372500
Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     62856
IP address blocks:        64.207.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:5c:33:3b:f8:44:ff:b3:37:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=1e581bcb-9dab-4576-96cf-9fe3bcbebc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:5f:5c:2c:55:48:e7:25:0c:8e:03:b5:3c:
                    74:07:a8:76:87:bc:f7:bf:3b:1d:a5:4a:47:eb:b7:
                    d6:3e:67:de:4c:a4:93:bf:4d:59:63:90:f0:8e:70:
                    d7:ce:db:6f:83:ce:3a:1c:b7:62:b2:c5:16:f8:7d:
                    2a:42:83:2b:19:e1:54:84:47:96:e4:4a:9b:ec:e5:
                    97:9b:dc:da:42:e1:2e:bf:e3:c9:41:48:74:56:41:
                    4e:73:d8:d0:6f:b3:12:38:3c:ac:b1:f6:b5:51:d1:
                    21:b9:b1:fd:bf:a0:ce:69:5a:65:72:02:00:49:72:
                    22:d1:a7:f5:0f:a0:52:42:6f:60:5b:1f:41:c9:11:
                    41:7d:e2:85:1a:3d:12:91:7b:f1:48:6d:35:59:d4:
                    b8:3c:75:e9:58:d9:eb:73:2e:99:7b:0c:19:b7:f9:
                    ec:87:8c:51:8e:a7:1b:7b:49:4e:30:2d:2e:a1:fa:
                    64:66:70:74:d9:84:42:b3:70:ec:11:f5:f2:cd:95:
                    2c:ec:18:66:f2:45:e7:56:09:fb:6e:07:66:1c:f5:
                    e2:e2:d4:50:48:89:01:21:bf:5c:a6:06:0d:83:37:
                    d0:4d:38:0c:7e:c3:db:68:74:85:d3:b7:06:36:72:
                    54:b4:86:4a:52:97:cb:c3:c7:0b:4d:b2:32:ea:3c:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:63:62:36:70:D4:11:47:50:A3:39:26:7F:DF:E7:5B:A2:F1:3B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.207.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b9:c0:a8:a8:bf:c9:a2:cc:16:b3:0f:77:aa:aa:c2:f1:49:
         9f:0b:5d:d1:ae:54:51:17:cb:86:15:e6:7b:ca:60:e1:45:ca:
         1c:0f:79:0f:97:bc:68:ba:f1:30:9b:1c:fd:6b:7b:a6:e8:40:
         70:84:d1:7d:af:00:16:2c:a7:8a:e1:80:7c:e8:51:93:34:e9:
         fd:b5:68:25:13:a1:e7:3d:92:c9:d8:25:7e:49:03:cc:3e:ef:
         04:f0:16:16:c4:8e:f2:0c:2d:8a:0e:5e:ab:06:00:c8:07:9e:
         ab:a3:38:88:db:fe:84:44:5b:15:f5:51:05:38:38:37:b4:81:
         39:96:9f:fa:67:35:ac:07:3e:d0:ea:44:37:4f:ac:d7:d9:f6:
         00:73:f2:9c:80:4f:5e:bb:51:a8:70:70:7d:00:0e:95:2f:19:
         b3:84:32:21:63:3a:83:a6:cc:f1:45:08:e4:d8:74:3b:68:9d:
         6a:38:85:08:83:28:9b:f0:6c:4f:2f:07:4f:2b:c4:9e:9b:33:
         29:b3:84:0d:36:40:6a:4f:44:5f:39:6b:4d:dd:cd:94:a9:4a:
         85:6f:c6:a2:46:38:22:c4:0f:1b:12:c5:ec:34:c2:c6:7a:de:
         e7:b9:69:f7:cd:d2:42:30:3d:3e:69:ac:78:e6:1b:16:5a:d4:
         a8:b8:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org