Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa
File:                     556c32cb-56ac-3007-88c8-3f234c1b45af.roa (raw, json)
Hash identifier:          OGpnZrov5Gmgde+Ck68W3uSh4B2zQSteCup1x1ruKdg=
Subject key identifier:   09:31:18:19:90:55:3B:5D:23:A6:85:96:39:D4:2A:CA:A9:ED:6C:C8
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F4328584752105A29C608A8A40DEABB00
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa
Signing time:             Tue 24 Sep 2024 12:49:11 +0000
ROA not before:           Tue 24 Sep 2024 12:49:11 +0000
ROA not after:            Mon 23 Dec 2024 13:49:11 +0000
asID:                     18888
IP address blocks:        64.42.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:10:5a:29:c6:08:a8:a4:0d:ea:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Sep 24 12:49:11 2024 GMT
            Not After : Dec 23 13:49:11 2024 GMT
        Subject: CN=fb03ff42-10f4-4c3e-961d-050cd001c045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:d5:16:fe:eb:31:95:cd:8a:c4:4a:65:31:
                    1f:67:92:2c:f9:d0:c6:0b:bf:b1:3f:31:71:fa:18:
                    5e:42:40:f2:64:50:b6:7c:19:39:f8:8e:5e:86:d7:
                    12:a2:2e:05:cf:4f:28:85:b3:f3:04:a7:ce:b1:77:
                    f4:fc:56:29:38:12:38:ee:90:9c:90:19:e1:89:1e:
                    32:21:52:32:72:c0:c5:71:36:e4:ec:22:e1:ad:b3:
                    0a:b6:62:29:09:c7:82:f5:0b:84:c5:e1:4e:53:a5:
                    39:d3:c5:26:07:d3:e0:99:0c:08:3d:96:77:cf:0d:
                    9b:94:ae:87:52:01:09:a9:d5:03:d4:10:54:a8:23:
                    63:36:10:65:c5:36:cd:0d:a3:6a:34:53:af:6f:11:
                    cb:fa:ab:af:08:e6:cd:26:ed:41:ca:62:7f:23:fb:
                    79:e8:56:d2:30:a1:0d:6e:47:7b:af:05:7e:aa:06:
                    35:27:ed:cc:2f:e0:fd:42:e3:d7:3d:94:c0:68:fd:
                    80:e4:df:b3:ee:77:e1:a9:9a:fb:85:02:54:ea:85:
                    0c:c3:b8:58:3f:c5:c3:34:72:b4:eb:f2:46:28:41:
                    fd:c9:1c:a3:64:e5:53:d0:4a:51:99:d2:cc:2e:cf:
                    64:1a:46:d8:f7:7d:96:d6:af:31:07:20:c9:14:dc:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:31:18:19:90:55:3B:5D:23:A6:85:96:39:D4:2A:CA:A9:ED:6C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:95:0b:ec:cb:e3:b4:57:29:f7:3f:95:79:15:07:52:90:
         a0:db:a2:00:0d:f6:58:07:2a:6e:85:a7:b7:91:72:8e:75:88:
         27:1c:fc:0f:25:16:ff:92:33:bc:d4:31:ce:06:94:d3:f5:3c:
         59:96:e4:85:3a:ac:81:2f:09:5f:cf:a0:8c:6b:92:98:06:b8:
         d1:37:34:1c:52:d1:e9:8b:e0:c4:e9:b1:83:40:57:9f:5e:f0:
         c7:da:fa:39:82:fe:df:7d:44:f4:88:b2:19:30:da:d8:5b:cc:
         4c:79:11:a1:a7:5e:0a:3a:75:19:9e:88:ce:d3:d9:eb:79:38:
         ac:8e:31:fb:ea:4e:96:ba:5a:d8:b3:1c:b5:ff:59:d2:c0:7c:
         76:0a:31:7d:b2:6a:17:cf:10:e3:2b:ff:f1:33:ad:91:34:1d:
         4e:ab:ca:4e:a7:1e:c1:25:6f:95:ea:4c:2e:ae:b6:d1:92:da:
         0d:c6:7a:b8:a9:c6:33:03:35:9c:4f:23:31:fb:eb:37:b4:31:
         0c:f4:65:45:9a:0e:3f:ea:ae:8a:00:cc:0e:9b:9a:bc:44:ff:
         66:b3:54:2f:de:1e:a9:59:03:e1:8d:6d:a2:5a:c9:88:88:fe:
         32:db:fc:be:ff:2b:72:5d:61:c4:80:7f:d3:19:17:19:51:cf:
         7c:ed:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:59:55 2024 by rpki-client on console-fra.rpki-client.org