Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa
File:                     2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa (raw, json)
Hash identifier:          oWc6PG+BoZrum+qvpY4JOc2WCaThcnQMkWOmk+FB8RA=
Subject key identifier:   32:D2:3A:02:1B:52:6A:C9:D1:03:02:9F:FD:3D:DE:C8:D2:9D:59:72
Certificate issuer:       /CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
Certificate serial:       010D0C9F4328584754E0E240717582E7C98CBE80
Authority key identifier: 76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     40551
IP address blocks:        64.111.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e2:40:71:75:82:e7:c9:8c:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=3c39195f-24e5-42d1-9253-799922fb7e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:38:dc:3a:40:bc:1f:57:c9:20:63:0a:ce:
                    d5:40:45:ee:b1:aa:ff:d9:7d:4e:c1:cd:1f:f3:69:
                    a6:19:67:8e:ac:f7:48:f4:d3:a5:19:bb:9e:dd:be:
                    64:6a:51:5d:87:9e:32:69:48:e8:d6:82:93:e9:a4:
                    e0:6d:ef:e2:92:90:49:f0:a8:1a:ce:b4:06:90:23:
                    a8:7a:49:c4:a2:8f:5e:11:7c:a5:3d:aa:c0:70:28:
                    79:c8:50:a2:73:f8:a8:4b:fc:93:39:4f:d3:64:91:
                    8e:f1:8f:3d:4e:15:b0:f2:85:68:ea:33:a8:5e:7b:
                    de:06:16:3a:52:43:19:8a:cf:50:e8:aa:a9:5c:00:
                    e0:74:a7:9b:67:7b:d9:f9:0c:21:0d:64:ba:b2:dc:
                    5f:d2:0e:9c:4b:11:b5:05:23:d2:28:e6:0b:fa:b1:
                    26:e8:dc:d4:d3:d9:4a:e5:9e:78:8a:35:f7:98:0f:
                    ac:a7:26:69:55:13:e7:25:c5:7a:87:ec:9f:83:79:
                    87:49:1a:c5:eb:96:4a:1a:b6:5c:46:8d:85:7c:a3:
                    61:82:93:58:48:3e:1b:b3:7d:6d:74:0f:bf:6d:64:
                    33:92:6e:d0:3d:65:b4:9d:56:ea:c6:36:c0:18:6a:
                    43:51:95:9d:03:a4:c5:38:38:eb:0c:c3:b1:31:09:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D2:3A:02:1B:52:6A:C9:D1:03:02:9F:FD:3D:DE:C8:D2:9D:59:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl

            X509v3 Authority Key Identifier:
                keyid:76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b5:dd:17:ae:a4:c1:1f:c4:f7:a2:f6:09:f1:56:91:dc:fc:
         86:e9:e1:71:37:35:e1:2c:27:ac:ee:6d:a3:9d:0b:3a:79:97:
         d3:d6:eb:14:42:66:cd:35:9d:4e:d8:3b:4a:e4:71:6e:63:ce:
         57:89:03:30:46:db:0f:7a:b0:97:ef:11:2a:1d:d5:58:64:2d:
         91:e1:81:5b:41:f2:1e:d4:a9:e7:61:b2:f7:3b:81:7e:97:36:
         42:32:e9:a5:86:d6:9a:41:e7:29:ae:b2:c6:bd:05:51:63:73:
         15:e7:e2:d3:a5:9c:ae:94:82:ce:95:c1:06:e1:06:3a:88:4a:
         70:0f:52:fa:e0:27:bc:cb:39:bf:09:9a:f3:92:9d:f2:75:fd:
         8a:ea:e9:5f:4a:5b:c3:31:fb:04:c3:76:31:e1:a4:63:6d:84:
         8e:e4:41:3e:5c:c2:2e:e2:09:e9:d9:07:45:79:b7:1a:5e:05:
         0a:d2:5b:9d:94:06:98:b9:1c:fc:6d:3a:62:b1:28:d1:a0:3f:
         d7:4a:fe:07:97:ca:b8:2d:4d:52:8d:07:95:54:91:63:d0:c7:
         a9:da:25:06:d2:63:2c:77:c8:82:d2:56:1c:ab:36:84:25:dd:
         85:d9:2c:e2:b6:7c:c8:01:a2:75:2a:0d:21:fa:35:bc:a5:09:
         95:77:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:23 2024 by rpki-client on console-fra.rpki-client.org