Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfec32a7-f047-3f26-947d-da70cd73038c.roa
File:                     bfec32a7-f047-3f26-947d-da70cd73038c.roa (raw, json)
Hash identifier:          tky4iNzfcaSX3XVys0CYIDwqI71wfMbq/+7s4m1o7hw=
Subject key identifier:   F8:A6:BF:03:CE:35:9B:37:E1:25:FC:C0:0D:E8:C9:78:99:4B:A5:E9
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858473095FF974A2BF55B70FC8280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfec32a7-f047-3f26-947d-da70cd73038c.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     17367
IP address blocks:        64.124.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ff:97:4a:2b:f5:5b:70:fc:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=306d9736-a7d7-468c-9c71-31e97a7cea22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:b8:10:45:6b:5f:ee:14:5b:a0:0a:99:f5:
                    4d:b4:8a:a5:f4:47:76:13:e6:48:43:cb:db:b1:8f:
                    1a:f5:2a:18:01:ad:5f:ca:30:49:62:66:4b:bd:e3:
                    5d:05:fc:52:ee:47:a0:5d:de:a8:be:f9:11:1c:79:
                    02:b5:9e:95:b2:bb:1e:9f:16:71:76:78:4d:ae:25:
                    80:c5:ce:50:8f:75:5f:7c:db:2b:a6:20:9c:c0:cc:
                    97:29:f7:5e:78:f0:c0:d1:34:f7:5d:28:2b:fd:d0:
                    12:ad:3d:51:bc:9f:af:90:46:4d:dc:3e:2a:71:ff:
                    62:7d:d8:9b:c5:85:62:ec:5e:91:cb:1c:a1:c2:3c:
                    fd:af:2c:32:d3:25:22:30:54:58:71:cf:20:35:25:
                    8c:85:44:0e:19:e9:7c:d9:06:03:6d:b9:54:90:91:
                    8b:da:8f:a3:6b:d2:65:0b:37:f2:d2:70:62:f1:d6:
                    88:e0:79:83:8d:8c:aa:29:9d:45:20:44:c8:7e:98:
                    be:cd:63:e0:bd:4f:5b:d5:a3:66:35:e5:95:31:98:
                    0b:bc:53:07:86:6e:2b:7f:4c:22:fd:d3:9b:da:6e:
                    a1:24:f4:a0:69:12:ee:5d:ae:09:a3:2a:28:27:72:
                    8e:8c:8e:cf:69:8a:6a:6c:96:95:fb:7e:51:2b:aa:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A6:BF:03:CE:35:9B:37:E1:25:FC:C0:0D:E8:C9:78:99:4B:A5:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfec32a7-f047-3f26-947d-da70cd73038c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:3b:98:62:65:70:a2:d3:0a:62:f4:59:b4:7c:59:b5:0f:
         dc:5f:17:56:d7:71:27:b4:0b:60:06:f5:c3:4c:23:0b:73:a6:
         8e:35:83:9f:e2:b0:6b:ed:da:3e:d7:a3:d6:5e:a8:e1:3a:f0:
         d9:25:da:e8:2f:72:95:56:88:85:0e:d0:45:a8:75:2d:4f:4c:
         d0:82:44:55:ba:80:c8:20:c2:8b:dd:b5:38:50:db:53:c6:8e:
         ca:1d:87:e2:57:6c:ba:ce:10:1d:60:4e:8a:9d:eb:1a:42:56:
         2c:5b:c4:65:10:df:56:23:01:7c:e1:77:2b:17:7e:21:2c:4c:
         ff:8b:69:9d:8f:93:1d:ae:7a:99:29:02:e7:bf:c8:04:27:5c:
         49:d2:e5:67:66:77:e4:45:3a:35:6e:da:8c:ee:98:5c:a3:79:
         1d:6c:d2:9e:25:29:24:0e:12:2b:a2:8c:62:84:66:5b:43:70:
         ec:23:78:70:c3:64:a7:a6:90:0b:74:82:90:f4:36:2c:91:5d:
         f6:c0:38:9e:2b:b7:87:10:c8:c8:76:27:57:45:b9:ec:10:9c:
         a4:99:ab:03:e3:12:13:25:33:59:6d:3a:5b:7c:67:ad:52:0b:
         8a:4d:18:71:0d:0f:1f:19:76:47:e4:af:41:06:1a:17:bc:58:
         2b:bf:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:55 2024 by rpki-client on console-ams.rpki-client.org