Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa
File:                     d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa (raw, json)
Hash identifier:          27XYwfli3V1NdK1IVpuwPY7JDBMYjzwDS5yrIqBdd1E=
Subject key identifier:   4A:8B:82:BB:CE:C0:96:0C:E0:65:D4:2A:1C:6C:1D:2E:9A:28:88:13
Certificate issuer:       /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
Certificate serial:       010D0C9F43285847D4049C1848D82F48464F1D80
Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     21790
IP address blocks:        64.190.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9c:18:48:d8:2f:48:46:4f:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=7392ac81-af8a-4626-868b-3010b624942c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e0:ca:70:b9:c1:b4:55:20:03:8f:a5:04:bd:
                    4c:15:cc:0a:39:e9:fa:8e:b8:a7:c0:67:87:78:1a:
                    1a:7e:35:c4:cf:b1:32:f5:fc:a6:5e:a8:48:94:a0:
                    88:86:92:0b:c1:d8:7c:07:ba:f5:95:de:d4:02:a1:
                    fb:6d:6a:d4:ba:4e:f9:19:ac:37:6f:66:9d:8b:5b:
                    1e:4d:91:0d:83:fd:52:0b:08:71:d7:44:2e:94:b6:
                    cd:9c:bd:cf:70:87:e1:ca:36:0f:ad:f1:02:16:e5:
                    ff:06:74:0c:b4:b9:ca:f9:1a:3a:79:c6:af:83:c0:
                    a2:85:82:69:68:5c:86:aa:98:48:fc:2d:cf:d1:1e:
                    ba:a2:f6:3d:96:59:e8:86:66:16:16:dd:3b:2e:37:
                    98:02:5c:b0:23:68:d8:a2:a7:99:a3:6e:54:0f:7d:
                    3e:d8:21:6b:22:f2:9e:d8:03:44:04:54:d3:42:a0:
                    e1:4b:8a:92:09:3a:7f:f2:49:1b:ba:1e:d7:c4:df:
                    c2:c9:31:df:dd:a7:ae:7f:d4:3d:c5:41:8f:36:69:
                    2b:df:84:7b:13:39:65:1f:86:9a:3f:47:0c:c5:9d:
                    7c:93:32:b5:85:e7:ac:9a:83:fd:2d:a1:00:28:10:
                    9d:4e:1a:47:99:96:07:b2:1a:79:f7:4c:07:d4:65:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8B:82:BB:CE:C0:96:0C:E0:65:D4:2A:1C:6C:1D:2E:9A:28:88:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl

            X509v3 Authority Key Identifier:
                keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:78:c5:43:af:39:0f:42:61:9a:e7:4e:1b:e9:5b:e5:79:
         74:f5:a7:a9:87:e9:28:1a:c9:bd:1f:ae:1c:92:ef:f5:99:50:
         98:38:08:96:cb:d8:c4:d4:42:b0:df:1e:2f:39:6d:a1:31:ab:
         14:e3:e2:ea:84:1d:e7:bc:ca:c2:bd:f2:ca:d7:4b:a4:2d:c7:
         cf:71:e0:b3:cc:d6:5e:69:a8:0b:07:5a:e5:93:db:0e:62:fe:
         ca:27:4a:5d:d8:5f:f7:17:e0:48:7a:32:64:32:35:99:eb:5e:
         11:e1:d1:c4:52:0d:17:80:f5:93:4a:51:a5:3b:26:33:5c:fb:
         57:d2:a3:7b:6b:01:ab:1c:24:1e:4f:a0:d2:c5:a7:93:5d:55:
         2c:81:5e:b8:31:ab:65:e7:f4:8c:5d:ec:c2:1b:aa:d6:af:7c:
         ae:21:cf:7f:dc:49:3e:9b:3f:90:7f:3c:7d:42:d0:38:ed:2d:
         e5:15:c7:67:ac:1f:fb:78:da:96:84:98:7b:f7:8c:8c:2c:1e:
         c0:6c:c5:a4:e9:02:3a:0d:09:a6:06:7f:56:51:4c:52:02:25:
         97:5d:eb:64:c9:55:86:aa:74:eb:f1:17:4d:9d:cc:15:66:2c:
         7b:b4:e1:cd:d5:90:a8:19:9f:9b:a6:31:bf:f7:66:2f:5d:64:
         ea:5c:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:18 2024 by rpki-client on console-ams.rpki-client.org