Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa
File:                     00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa (raw, json)
Hash identifier:          oVubOCileDIU517ZkoFgzT4lhNDMEE7u6FqLd3Qnt88=
Subject key identifier:   DB:F5:26:59:A7:AD:46:B7:F9:70:5F:40:C9:AA:7B:23:B9:83:03:ED
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F432858471FD5C7D1AD09137F7FD23E00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     397041
IP address blocks:        64.112.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:c7:d1:ad:09:13:7f:7f:d2:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=0311b669-49d7-4e66-88c5-4204d81b1fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:88:57:64:42:2e:32:49:e2:5f:d9:4d:76:
                    1d:81:ed:03:a2:27:66:2e:05:bf:93:13:05:09:53:
                    a6:2f:02:fc:8e:12:ab:60:f6:54:45:59:ff:c6:12:
                    1c:ec:54:ac:5f:d3:01:f3:68:ed:b0:6b:cf:e5:d5:
                    3b:a6:7e:08:25:91:3e:51:53:17:32:25:b0:be:b9:
                    ac:df:90:75:27:02:2b:d5:98:b3:b1:af:50:8b:8a:
                    20:4e:dc:c8:1b:f6:90:ef:3a:eb:81:a7:db:83:81:
                    8f:d9:da:df:3a:c6:c9:db:40:db:1b:2e:84:42:3e:
                    b5:8f:a6:a7:f4:fe:c3:70:d1:94:ad:43:e9:ea:b1:
                    f3:56:eb:de:33:06:b1:e3:10:27:74:fb:06:78:50:
                    c1:51:46:31:35:5c:f5:7a:9f:23:dc:42:af:dd:a6:
                    aa:62:2d:a9:74:d4:3b:92:b0:a1:af:b6:93:af:a0:
                    37:c3:ac:0f:a7:b0:a3:8e:7c:da:17:b4:46:de:8f:
                    ec:7b:1a:03:f1:d9:76:f0:d2:77:c6:b3:64:3d:a9:
                    dc:7b:d4:1f:72:e5:b3:df:bf:fd:e8:52:8f:21:77:
                    f8:a9:b1:dc:38:4e:6c:6c:3c:b8:60:1d:9f:ba:9e:
                    dd:ac:9b:ac:d7:bf:fb:ec:aa:08:c7:69:08:59:0c:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F5:26:59:A7:AD:46:B7:F9:70:5F:40:C9:AA:7B:23:B9:83:03:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:cf:52:bb:84:dc:57:2e:98:e2:2c:a4:6c:84:9e:da:01:34:
         24:44:71:f2:df:d2:97:35:9b:15:73:61:3c:aa:cb:a5:59:42:
         0e:a0:d9:7f:e4:9c:c8:c6:43:5d:0a:19:50:7e:f7:c8:e2:cd:
         38:2b:82:6e:9e:f8:ba:85:50:65:5d:88:7d:2b:e7:55:c6:40:
         3d:a0:68:0c:e1:87:e3:b1:1f:ae:7a:67:82:a6:94:9a:f3:9d:
         4a:ee:7a:91:e0:2a:c6:11:93:6e:1a:e6:49:22:ce:ab:d3:2e:
         a1:85:22:e7:dd:55:13:97:6f:7c:05:93:a5:af:dc:46:93:3a:
         a8:46:7f:b2:ed:2b:25:8a:46:93:29:2d:fe:af:dd:21:b5:96:
         64:bc:da:89:96:4d:42:a6:a1:6f:c9:b4:94:7c:ed:ee:14:b0:
         66:b0:2b:08:2a:e3:5f:3b:ec:6c:c8:5a:39:71:27:48:2c:d3:
         c6:88:3a:42:0c:19:41:c4:7a:03:6b:c1:64:3d:db:b9:ef:b7:
         f1:5a:29:9c:1d:98:b4:e7:e9:61:9a:f9:ad:d6:7e:17:b3:37:
         d2:af:48:d3:0e:d8:9e:54:e8:b3:88:2c:41:45:3e:c7:26:58:
         11:bd:36:0a:ab:09:2e:5d:19:b7:1c:cb:f7:1d:ac:4a:05:c2:
         1c:76:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org