Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/e3ae31a2-89df-3e70-9859-22ae201f9cc7.roa
File:                     e3ae31a2-89df-3e70-9859-22ae201f9cc7.roa (raw, json)
Hash identifier:          vJ5B/xLylLn9evumLvuaTvjzBHG8gYQb1B3e4WJoyAU=
Subject key identifier:   B6:7E:7A:A5:5D:A8:69:2A:68:D2:D7:4F:E3:61:D8:1E:2C:DC:19:B1
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F43285847CFD4D5ECF77156EA6AFB1A40
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/e3ae31a2-89df-3e70-9859-22ae201f9cc7.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     8100
IP address blocks:        64.20.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d5:ec:f7:71:56:ea:6a:fb:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=8b579243-1eb0-4297-bdfe-025c74b478dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:a0:b8:d4:c1:f8:f8:7e:53:d1:74:f7:8b:
                    a1:48:35:fe:42:88:ce:28:32:39:b2:7c:d8:96:b0:
                    4b:a7:d3:a5:95:c6:53:13:b3:a1:80:1a:cb:8e:7f:
                    21:67:6a:b2:b1:65:0c:17:24:0c:3f:10:27:a5:da:
                    71:08:46:3f:56:27:ce:e7:02:59:9a:e0:51:58:7f:
                    59:6e:04:3d:0b:d9:24:f6:f6:ef:2b:63:e6:63:4d:
                    0e:1a:9a:f4:c6:62:a4:c4:9e:67:25:bb:0b:de:b3:
                    1a:64:36:a3:f4:74:e6:b3:b1:0d:92:e1:eb:6a:53:
                    96:db:a1:ad:c2:c8:e8:3d:3a:0c:5c:92:9c:7e:36:
                    e6:93:47:ca:ca:e6:5c:62:0d:b3:13:e9:12:ba:16:
                    62:6b:38:12:1e:01:5f:ab:cc:7d:91:14:c7:bd:31:
                    0b:40:78:ed:99:23:aa:cd:04:ce:25:c7:4f:28:53:
                    b4:f9:0a:ef:a1:62:00:0e:55:0e:83:c8:7f:a2:86:
                    29:13:7a:79:94:62:99:9f:f7:7c:c5:b4:2e:7d:19:
                    a6:77:76:37:c0:2e:80:88:b0:74:59:0c:7d:f3:74:
                    b8:12:80:64:1f:a1:29:ca:b2:3c:ad:20:05:5f:ec:
                    2e:de:06:1c:77:aa:93:27:e5:84:e2:e9:31:bb:10:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7E:7A:A5:5D:A8:69:2A:68:D2:D7:4F:E3:61:D8:1E:2C:DC:19:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/e3ae31a2-89df-3e70-9859-22ae201f9cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ff:3f:ac:0b:f5:05:67:29:82:58:88:8f:a3:32:0c:fd:fa:
         59:75:72:bb:b0:6c:21:89:57:9d:8c:5f:33:93:e1:1e:67:3a:
         ef:a9:0c:74:57:85:aa:86:84:4e:9a:94:ea:ff:f5:5a:65:ad:
         2b:93:85:89:48:e8:f3:60:ec:35:73:fb:2d:81:fa:f8:a6:02:
         ab:73:f0:f1:ce:ba:30:ef:50:5f:f0:e8:46:84:d8:fe:aa:bd:
         c2:92:81:bf:6a:23:ea:e4:02:06:df:64:db:ec:54:9b:92:a3:
         fa:91:f7:dc:29:37:ee:e9:93:f5:31:fa:28:35:2a:76:2d:1b:
         7f:9b:b9:d1:1b:9d:1a:bf:82:0f:98:00:f5:67:7f:f2:5f:a5:
         b1:55:45:04:e5:49:78:4e:88:1b:06:5a:7f:2c:d8:6f:97:0f:
         68:33:0c:ef:98:94:e4:9e:2f:c9:dc:05:e0:65:1b:47:91:9e:
         6a:39:15:ef:86:d3:87:73:50:28:60:90:86:93:35:bc:1a:5f:
         a7:60:6a:16:c3:0e:3d:de:95:ab:15:d8:4f:da:a7:e8:1d:38:
         35:44:07:9f:70:96:c5:41:d5:85:66:0d:05:e1:f2:06:55:26:
         f2:35:b9:2c:2d:b3:1b:8e:f4:1c:c9:e0:9e:91:82:5b:b8:1f:
         27:8f:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:32 2024 by rpki-client on console-fra.rpki-client.org