Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/fb161303-4ec6-3426-a89e-6a2911a5b88d.roa
File:                     fb161303-4ec6-3426-a89e-6a2911a5b88d.roa (raw, json)
Hash identifier:          usPgRfyL1v4b6qLKXySgk0NHlGtIn+8m4TKm4U0jAzo=
Subject key identifier:   00:B0:32:85:9A:48:27:31:E7:F9:5D:D2:86:E8:39:7A:65:77:64:34
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F43285847792BB5719C92261057E3E000
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/fb161303-4ec6-3426-a89e-6a2911a5b88d.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     393227
IP address blocks:        64.28.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b5:71:9c:92:26:10:57:e3:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=c7a2ed1f-79ba-4965-b90d-729f10515ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:81:0e:97:ef:d8:79:d3:9a:cb:0f:24:ec:
                    d4:1c:1d:f9:27:68:9c:df:c6:c7:ee:d4:c8:53:e8:
                    9e:cc:92:42:65:e0:98:03:36:24:85:b3:14:48:9e:
                    62:7c:8c:61:20:9e:a5:6d:77:ad:62:10:9a:df:84:
                    d3:e9:15:26:51:ce:43:a3:1c:e3:a4:c1:73:ee:a6:
                    87:ba:5b:44:5d:70:42:73:b8:21:1a:4e:34:1f:da:
                    4c:4c:35:a7:14:58:0e:5e:e1:92:c1:36:b1:c7:ef:
                    1c:78:8f:f9:72:e1:65:a8:92:4e:a3:59:c3:50:4b:
                    28:59:f0:69:1e:50:fc:93:b4:84:b9:13:9e:1a:4b:
                    05:fc:c6:41:0f:d1:95:5d:e9:ac:d5:eb:23:b4:1e:
                    88:ff:f8:d7:48:3d:d0:69:9a:98:d3:4e:23:19:2f:
                    bb:de:7b:67:02:dc:13:4f:8f:32:7d:71:a7:57:ab:
                    a4:ad:97:16:fe:f0:8d:0f:b7:ec:b7:d0:94:f0:3d:
                    a0:ed:2f:73:8b:dd:e3:b3:b3:ae:b1:1c:05:a6:6c:
                    a2:bc:a7:33:39:c3:8a:5c:3a:83:40:ea:d6:33:a1:
                    32:7a:36:85:37:14:67:f9:58:28:e9:44:ab:f7:43:
                    0c:e4:a4:28:f0:44:0b:7e:8c:e5:7a:b6:14:ac:30:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B0:32:85:9A:48:27:31:E7:F9:5D:D2:86:E8:39:7A:65:77:64:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/fb161303-4ec6-3426-a89e-6a2911a5b88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f7:3d:0e:af:41:41:f1:25:ca:d4:9a:b4:dc:2b:62:95:fa:
         26:d0:3b:e9:4b:c6:61:a4:54:69:bd:e9:3d:40:aa:73:6a:77:
         af:ce:d3:5e:94:b1:4b:ed:19:9b:bb:2a:e9:16:ff:6c:8c:a3:
         c3:51:b8:e7:94:3d:03:dc:23:a9:f8:95:c7:40:b5:97:de:8d:
         ea:69:0c:97:1e:71:f6:76:c5:78:79:80:d1:4d:ff:ba:28:79:
         9e:d6:09:ae:f5:d9:80:b6:b1:b0:23:cc:0a:26:11:2b:9e:6e:
         e1:8b:3a:01:62:09:19:78:56:c2:ed:54:80:37:31:0d:a7:c1:
         e8:82:ab:b4:cb:44:ee:6d:28:2c:a3:92:16:d7:c8:b6:2f:89:
         3b:ba:da:09:2a:65:bf:95:4c:db:8c:90:11:83:56:77:be:ab:
         6a:01:8b:c6:7f:db:61:65:a2:9f:3f:ac:72:73:c5:b9:16:63:
         6b:6e:e2:3e:a4:22:b5:1c:56:3e:3a:35:62:2a:a3:26:62:ac:
         32:2b:05:ef:37:c1:06:53:34:84:e5:a2:fe:97:bc:4a:7f:9b:
         3a:d1:23:ca:b7:64:de:17:19:e8:18:d7:93:9c:72:9d:06:71:
         ac:12:2e:b5:9b:cc:25:4a:d7:a8:93:e0:62:f2:c7:65:8b:b1:
         22:cb:e5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:19 2024 by rpki-client on console-fra.rpki-client.org