Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0b32aa44-21ec-3a7f-a783-e4b44530e2ec.roa
File:                     0b32aa44-21ec-3a7f-a783-e4b44530e2ec.roa (raw, json)
Hash identifier:          yHewHOeQL8wQhW8m5vIpFcmHDma9MB/YsOOCw2ImKSo=
Subject key identifier:   E2:F7:C8:BF:16:27:E5:1C:3D:8E:22:06:36:F7:EF:B5:5C:08:CC:DB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584733609C5F0DA4F80B5D091480
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0b32aa44-21ec-3a7f-a783-e4b44530e2ec.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     14056
IP address blocks:        64.125.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9c:5f:0d:a4:f8:0b:5d:09:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=048fa0c7-0792-4b84-aa9d-d8192c0c219a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:78:73:72:6e:5b:bc:e2:d2:1e:00:c2:83:
                    51:69:0c:31:08:66:45:f3:ed:c7:4d:aa:80:0d:1a:
                    73:a7:e2:9e:cb:ad:d5:c5:25:00:cd:cd:92:67:da:
                    c6:fc:53:e4:ce:fe:0b:23:b5:fc:28:54:d6:92:07:
                    f3:f7:7d:31:bd:c2:f7:5b:52:85:97:3f:a9:af:52:
                    3e:d8:35:7f:46:ec:39:25:61:52:59:29:1a:0a:b3:
                    e2:54:67:cb:2d:36:74:69:7b:bc:58:41:ab:16:49:
                    5c:c2:e2:c9:48:9b:55:c0:13:8b:36:c4:ae:21:23:
                    0e:07:05:39:d5:ba:23:e7:79:13:5a:cb:37:f7:4c:
                    86:f4:1d:76:6c:14:a1:b0:5a:fb:cc:c5:c5:6b:91:
                    f1:0f:8c:66:b8:23:4d:9e:30:7c:7e:3e:6c:a6:1b:
                    ea:7c:98:ae:29:ef:03:0d:14:09:86:99:07:5b:b6:
                    61:7e:d6:e6:8e:9e:91:ae:de:9f:9d:3b:bc:ff:ef:
                    87:a8:b9:96:0a:f0:24:14:79:30:94:89:e2:9b:fd:
                    d3:96:01:67:68:8a:9f:d5:69:ea:8c:3d:2a:1a:b9:
                    ce:63:c6:a5:5b:5c:26:6d:fc:05:86:f3:f3:78:82:
                    94:5f:96:36:85:98:cb:c9:f1:c2:6b:91:03:4b:a2:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:C8:BF:16:27:E5:1C:3D:8E:22:06:36:F7:EF:B5:5C:08:CC:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0b32aa44-21ec-3a7f-a783-e4b44530e2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ca:29:eb:bc:5b:76:37:f9:d1:8f:17:2f:b4:60:a0:3a:0c:
         32:e1:0d:7f:22:43:3b:83:2f:9b:ac:76:f1:2e:5e:60:a6:a6:
         48:f4:14:45:2e:23:62:d8:c4:6a:db:59:6a:f3:dd:d6:d4:ec:
         ae:ac:00:80:2b:4a:f6:d3:ad:53:3f:8e:51:d8:a8:eb:39:b1:
         44:e7:c8:92:1b:f1:13:28:f2:5e:39:0d:62:9e:1e:ce:5d:87:
         f5:b9:98:cb:c7:9e:ce:1d:fb:22:c9:81:73:71:43:e5:97:8f:
         22:85:f4:b1:7d:a5:5c:0d:f1:1d:13:3e:b1:69:94:f6:56:9d:
         ef:6a:fa:f4:47:52:38:48:12:8f:71:01:fc:c6:af:d5:d1:75:
         dc:22:2d:d4:5d:5b:3c:c0:c6:bf:c4:0b:de:f8:00:e9:da:c0:
         f2:01:8b:59:3f:94:5e:98:c6:cb:91:ed:84:14:e6:25:7a:f0:
         3b:f9:40:ca:2f:95:73:53:7d:1c:4a:90:67:c2:cb:4c:68:6c:
         a3:90:8b:94:74:1c:22:48:c4:ae:b1:9a:61:57:36:40:6a:a3:
         bd:3f:93:c4:ef:24:5d:7b:cc:9c:ae:24:0e:46:89:8c:10:52:
         ef:1e:81:3d:67:68:07:95:17:db:b0:56:c3:69:b0:8e:08:f9:
         35:1b:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:54 2024 by rpki-client on console-fra.rpki-client.org