Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa
File:                     64bbaefe-121e-3227-8c64-63eb0383f20d.roa (raw, json)
Hash identifier:          eY/y8xc2iqukoR//APitpn3c/RpXvS9OrToaROxgbdI=
Subject key identifier:   91:4D:25:D4:4B:9F:D2:9B:EA:5F:31:07:93:49:73:58:03:9D:25:15
Certificate issuer:       /CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf
Certificate serial:       010D0C9F4328584797E13EE8B83EB1E560950600
Authority key identifier: 18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     25950
IP address blocks:        192.169.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3e:e8:b8:3e:b1:e5:60:95:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=ee8677e0-52ef-4fd2-8393-8fd63e63cde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:52:5a:b8:32:fe:3a:36:1b:11:9e:a7:80:
                    e4:2b:d5:e2:af:d6:94:a5:76:86:82:2b:17:f5:7e:
                    3f:e8:ad:17:f2:2b:a4:3b:03:e8:8b:3f:83:41:28:
                    b1:91:dc:fa:cb:8d:0c:6f:83:38:3f:94:cb:8b:59:
                    c9:76:50:e9:2f:36:fd:ee:4c:ff:5b:5e:27:d6:ad:
                    e6:5f:71:5a:fc:3e:ad:84:53:d6:b4:fb:2e:5f:db:
                    e0:09:cf:a2:31:6f:91:89:a9:16:5a:bb:15:42:41:
                    f4:83:a2:32:0f:be:be:69:03:66:22:8d:09:38:e1:
                    b8:70:ee:2d:17:4d:99:61:49:57:8a:18:47:b7:c6:
                    33:4c:71:f3:d2:31:86:8d:9e:2e:b0:66:9f:d0:7f:
                    d9:9a:07:fc:20:35:a2:30:d7:9e:d8:4b:dd:7c:61:
                    9d:7b:26:2c:bd:39:86:ea:de:06:db:12:b1:ae:dd:
                    5b:5c:95:cd:1b:62:c5:81:ed:85:83:82:ce:95:05:
                    d4:64:bc:9f:72:0a:92:a9:8f:36:70:c7:28:c3:fe:
                    ba:56:90:9f:a3:76:db:c4:40:2c:ad:ad:ee:9b:b3:
                    ee:91:ae:ad:61:b8:57:4f:47:f4:0d:c9:a9:8e:d8:
                    09:d3:a6:a5:4b:2d:16:5e:d8:c7:85:c2:36:b7:58:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4D:25:D4:4B:9F:D2:9B:EA:5F:31:07:93:49:73:58:03:9D:25:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.crl

            X509v3 Authority Key Identifier:
                keyid:18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.169.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:57:b0:4f:a3:e6:44:bc:d4:a1:ca:ac:c5:df:69:31:d0:20:
         f2:31:a8:0f:3a:13:5d:66:d8:ae:30:8e:c0:cd:24:bb:a9:d7:
         06:10:4a:d2:54:48:30:9b:13:45:29:d6:4a:00:0d:9e:4c:27:
         35:6e:69:50:82:85:17:47:ca:df:35:6c:9b:62:5f:da:7d:2a:
         f7:87:3f:08:35:1b:df:77:9d:fb:16:51:0f:b8:16:7b:71:dc:
         8b:c9:ac:c1:66:0a:1c:36:e1:9d:f8:25:14:06:ae:06:9e:50:
         8d:b0:79:2c:c9:17:96:00:ec:3f:7a:a2:84:3e:01:f2:5c:db:
         a3:2c:6c:06:31:88:0a:eb:a2:4b:3a:7f:e9:f9:5a:e4:01:00:
         7a:75:e9:8c:87:e6:24:de:1e:0a:c9:f3:62:34:dc:ca:51:e3:
         69:28:f9:1e:0a:ff:29:68:54:d0:b3:a8:3b:e3:5e:11:17:fe:
         14:2e:00:d7:29:7e:1e:34:e5:02:c4:54:de:dd:f5:f8:64:c1:
         97:b7:32:7d:42:35:5d:60:cd:23:97:6e:c3:d8:c8:10:fd:f0:
         1e:2d:ca:f1:8d:b2:f3:af:57:a1:6f:10:1a:fc:76:60:b5:d2:
         5a:ae:02:a5:87:ab:1c:39:4d:f1:32:7c:a8:4c:5e:13:6a:9d:
         4e:38:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:23 2024 by rpki-client on console-ams.rpki-client.org