Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa
File:                     6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa (raw, json)
Hash identifier:          HlPN4q2nLPRptVjYYVGFvOYhpVvGgJRuRXUYaVHvNFk=
Subject key identifier:   4B:12:D4:EE:FB:60:29:9E:D5:74:B9:21:64:8D:BC:84:33:75:0E:B5
Certificate issuer:       /CN=d3f2a064-9e78-4a16-a8db-33eef399665d
Certificate serial:       010D0C9F43285847B6E4997FBDB27D307C559300
Authority key identifier: 4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa
Signing time:             Wed 30 Oct 2024 15:37:40 +0000
ROA not before:           Wed 30 Oct 2024 15:37:40 +0000
ROA not after:            Tue 28 Jan 2025 16:37:40 +0000
asID:                     397753
IP address blocks:        64.49.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:e4:99:7f:bd:b2:7d:30:7c:55:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f2a064-9e78-4a16-a8db-33eef399665d
        Validity
            Not Before: Oct 30 15:37:40 2024 GMT
            Not After : Jan 28 16:37:40 2025 GMT
        Subject: CN=37aa2298-8c80-48fd-b0a8-5fd7b89effc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:a6:04:bc:ec:ad:e0:30:10:a3:48:4f:58:
                    30:50:6b:8c:05:9e:1d:13:d5:04:42:e1:be:42:61:
                    33:82:39:f3:c9:6c:6e:ce:db:73:6e:15:13:1c:6e:
                    0e:40:4d:74:a4:3b:cf:80:00:16:0a:1a:ed:10:2b:
                    2c:d4:22:03:60:36:3f:83:15:ed:b4:dd:ee:f1:ed:
                    08:ce:f3:9c:78:69:9f:93:9d:90:2c:b4:d6:9c:7c:
                    a8:65:f1:43:d7:a0:3c:e7:18:e6:91:73:50:1e:d2:
                    06:91:b2:3e:ba:5d:2b:99:35:cc:33:af:c9:e5:dd:
                    df:bd:49:19:2b:ff:ff:05:ab:6e:af:ec:dc:19:4a:
                    1a:51:2c:e5:bd:bb:5b:ec:ad:12:76:b2:fc:76:b4:
                    8a:81:5d:9c:6d:ec:8d:68:af:b3:4a:b2:74:ff:bf:
                    99:ed:92:a1:21:a7:f1:51:a7:da:c8:dc:08:5e:2a:
                    11:d0:ba:9e:41:bc:f3:db:72:c6:77:44:77:3c:1a:
                    dc:1d:b8:67:60:78:95:58:d8:38:53:ea:6b:e9:d5:
                    f4:fe:ea:9d:ac:46:b4:f4:8d:1b:6b:7c:6f:90:02:
                    cd:53:20:b5:a2:e5:7e:b2:fb:09:a8:f3:32:c6:74:
                    00:12:03:fb:ec:56:15:43:a0:96:b8:8e:05:40:3a:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:12:D4:EE:FB:60:29:9E:D5:74:B9:21:64:8D:BC:84:33:75:0E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl

            X509v3 Authority Key Identifier:
                keyid:4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:16:8b:e4:be:ef:e7:e8:a3:69:53:98:5b:a5:0f:17:0e:
         46:41:2e:61:e2:f6:02:7f:94:b6:44:7f:fd:08:b1:90:9f:8a:
         33:86:62:14:19:7a:e5:31:50:ab:9c:bf:84:9e:bd:b8:77:59:
         84:3a:97:9e:b9:52:df:48:8a:6e:4f:52:53:b9:8d:16:77:25:
         66:1f:9d:c9:88:37:a9:c7:a4:4e:1d:ae:fa:ed:ae:fe:ce:4b:
         6c:9b:44:f0:17:76:f1:66:37:6a:fb:b6:78:44:07:6a:aa:5c:
         cb:47:22:65:0b:3b:60:64:be:07:f6:b0:fe:dc:6f:bb:6e:c2:
         42:c0:b1:12:75:74:64:c7:6e:3f:7f:04:54:e2:04:eb:78:fb:
         99:bb:ab:9e:72:7a:3a:37:33:5e:77:1a:e8:a9:be:9a:8b:38:
         a5:c2:77:26:3e:e1:ed:4f:b5:b0:80:1e:45:57:a3:c1:95:95:
         c4:71:88:3d:0f:a8:39:dd:a6:37:f2:3e:40:8b:75:58:7b:16:
         c1:0b:d3:38:d1:57:0a:af:cb:59:0b:4d:0e:b9:ce:c8:9f:0a:
         29:33:76:42:2b:31:76:ea:43:5e:be:17:ad:4a:01:dd:12:5b:
         64:bc:13:00:a6:4e:1c:80:11:e3:d3:b3:20:1d:ed:81:25:b5:
         fa:ed:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:45 2024 by rpki-client on console-fra.rpki-client.org