Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
File:                     9150111f-8e0d-3fbe-b669-7e5d4f757864.roa (raw, json)
Hash identifier:          0qM6FJ41Sy19gt9FKuAHJFWKQLgRCZOVRRb3H7lDBdE=
Subject key identifier:   76:2E:19:91:9E:A9:F7:16:55:A4:35:DA:CD:3C:16:D5:C5:0E:DC:13
Certificate issuer:       /CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
Certificate serial:       010D0C9F43285847A73BEB0CA317493981933A00
Authority key identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     397140
IP address blocks:        64.32.43.0/24 maxlen: 24
                          198.8.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:eb:0c:a3:17:49:39:81:93:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=5dd87fad-a508-4825-9109-89560bfd47da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:19:84:cf:a8:e6:f7:ac:4f:b5:a9:2e:06:
                    3b:ba:12:10:fe:83:02:b6:d9:71:af:39:6d:67:d2:
                    9a:f0:11:47:ba:14:49:bc:7a:9c:b5:6d:83:5f:e5:
                    f5:83:63:26:b0:a9:fa:fe:0a:64:53:f8:1d:5b:a1:
                    7f:d3:10:ba:e8:0b:0d:bc:bb:f9:33:66:a1:b9:52:
                    55:b3:c9:a8:0a:b1:b5:8a:11:43:38:4e:17:ff:d0:
                    3c:a2:e7:5b:71:fc:58:d4:79:9d:c1:14:3c:1d:6e:
                    cc:46:74:e2:a5:c9:8e:a0:44:d9:1d:a3:e3:fa:7d:
                    c1:24:9d:7c:08:b3:52:86:d6:86:a7:fe:16:c1:5e:
                    96:e9:9e:9a:2e:37:b6:73:a7:3d:fb:a7:49:ab:72:
                    da:a3:a0:ad:36:09:09:e8:26:55:8e:cc:de:57:37:
                    ba:94:4e:8b:dc:9c:e2:67:59:c0:e7:a5:79:e7:ff:
                    a5:cd:92:7c:14:16:15:8e:61:79:c9:88:c6:46:e2:
                    b8:ac:05:a1:6a:4a:f6:e2:13:71:fb:17:d5:dd:92:
                    25:3f:d7:a3:d5:1c:6c:fa:de:e1:1d:31:fa:03:5d:
                    9a:92:23:2f:6a:b9:d2:6b:1d:b5:37:bc:dc:d1:99:
                    cf:a0:3f:0f:6f:fa:cc:40:b5:08:d3:25:11:12:bb:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2E:19:91:9E:A9:F7:16:55:A4:35:DA:CD:3C:16:D5:C5:0E:DC:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.43.0/24
                  198.8.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:de:85:ca:a4:7f:f3:ee:9b:18:79:18:f7:50:d3:d3:eb:
         df:07:ef:9f:c7:f5:b4:48:e9:6b:ea:14:60:cd:9f:96:da:21:
         bd:bf:ea:35:5d:93:41:e7:26:ad:9d:48:24:eb:fb:16:b4:7f:
         2d:6e:dc:cd:d0:c5:ad:7c:c5:00:20:12:b0:6c:3f:06:05:f6:
         37:28:b4:65:e3:97:a2:a2:8a:4c:4e:01:c7:7c:8a:56:63:71:
         a2:e6:a9:5f:2f:af:22:20:31:f9:25:26:4b:39:11:0c:95:65:
         b2:a2:85:81:14:0e:8b:cb:89:8f:15:57:4e:1c:a6:63:55:13:
         91:d4:6d:ea:09:85:1f:54:3b:17:db:f3:f8:9b:86:7e:de:b1:
         55:30:d0:ce:df:43:5c:9b:ec:04:35:17:39:3f:df:bd:3c:69:
         b1:f4:c8:c9:86:c6:68:fa:2a:f0:89:20:11:bf:52:3d:c7:f0:
         55:ed:a5:b8:ca:ba:2b:cd:85:1c:a8:58:71:01:ef:be:da:f1:
         77:ea:74:ab:09:9e:4a:0a:5e:c8:40:5e:61:e5:c0:ee:7d:08:
         97:7c:36:81:4f:b1:92:bb:2f:83:03:d1:53:ce:db:63:78:c7:
         ff:87:4d:94:f2:a5:c8:62:7b:5c:3d:2c:08:20:6f:6a:4c:d8:
         0b:34:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org