Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa
File:                     df938649-fe0c-3f68-86dd-87b8933d0a23.roa (raw, json)
Hash identifier:          kjPFLBWnSCPErTZGNOZJMpet8pYtgVYU5zHd1DUXsG0=
Subject key identifier:   9D:83:4C:5C:39:8C:DD:97:75:BD:6B:BF:2A:80:DD:33:BE:40:03:9C
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F43285847CFD4D79F34010C7E9FDB7F40
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     36352
IP address blocks:        64.20.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d7:9f:34:01:0c:7e:9f:db:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=976a0007-5bcb-43b8-b11b-7478d4fbbc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:45:d4:75:70:c3:bb:10:20:d0:52:a1:f4:
                    ee:90:22:4b:f8:81:79:c2:c7:a2:b4:4e:94:ec:33:
                    b0:33:6c:5a:28:7b:2a:42:75:4a:85:35:8b:ec:c0:
                    86:f6:86:c4:0a:1d:28:7e:4c:cf:c6:c5:7e:39:f8:
                    46:51:3f:f4:e5:06:b0:d7:27:63:66:d8:74:a4:13:
                    bd:40:ff:ee:fb:68:26:fe:4f:90:5b:61:c0:4e:26:
                    d6:e6:25:22:22:52:ce:88:d0:b9:2d:ed:41:38:58:
                    50:a4:5e:98:f2:44:49:37:a8:13:09:9d:04:8d:f6:
                    ff:3c:5a:51:b6:61:10:02:5f:e5:0b:76:f1:be:f7:
                    54:fc:68:e7:55:d4:d7:cd:e8:9e:c1:e1:b0:4c:8a:
                    c5:a9:17:7e:b8:02:47:2e:a3:94:ae:a9:9c:35:b1:
                    19:6b:a9:66:e4:f5:c3:8c:06:91:af:75:dc:8d:8a:
                    f1:a0:e1:4e:84:18:72:d9:85:b0:7b:36:13:f0:f4:
                    53:74:c8:cd:34:4d:03:be:b6:bd:71:46:75:a0:0a:
                    3b:aa:eb:d3:bd:2c:91:82:23:5c:9f:34:30:4c:99:
                    f8:93:df:5b:02:f6:06:47:86:32:bf:27:73:78:9b:
                    16:20:bc:4d:41:bc:22:e0:ca:7c:83:dd:8d:07:6d:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:83:4C:5C:39:8C:DD:97:75:BD:6B:BF:2A:80:DD:33:BE:40:03:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:93:8c:e5:70:32:c7:96:14:99:26:52:97:d6:9a:24:2e:
         e5:d2:2d:c4:ca:34:66:87:16:ea:85:f7:60:b8:40:07:14:d9:
         30:dc:5b:01:ec:74:28:3e:bc:8b:6a:0b:f3:e1:03:2c:b5:b4:
         17:11:41:e2:60:3a:a7:1c:f6:a7:2e:48:37:95:cb:86:fe:1f:
         4a:7c:8e:f0:65:62:a1:84:09:37:ec:00:70:a4:ed:a3:27:bc:
         a1:41:bf:b2:0e:02:ef:27:52:8e:75:55:de:b8:6c:fd:42:ff:
         1d:a2:8f:c3:8e:b3:67:d5:59:21:c9:bb:62:f4:bb:ec:e8:5f:
         5d:0d:08:8a:32:6a:4b:dd:e0:d7:d5:1a:85:8c:2f:41:ce:79:
         9c:75:8e:37:62:34:ff:ff:95:74:7f:a3:f4:a1:c6:61:fd:da:
         29:30:37:a2:84:1c:d3:b2:3f:a4:f5:2d:f0:33:7e:cc:e0:15:
         5f:57:f5:98:bf:a7:0f:82:c2:8c:90:13:75:c9:79:10:a1:7c:
         ca:d0:a9:1d:99:c1:91:9b:5a:c7:ed:d6:3b:52:8e:b6:2c:27:
         df:ec:6d:5b:02:8b:b9:f2:54:d1:0d:5f:c4:23:c4:3a:ac:3c:
         30:2f:61:ff:10:72:df:d8:5f:54:4e:c1:8c:21:cd:2f:0c:d0:
         4e:9c:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:32 2024 by rpki-client on console-fra.rpki-client.org