Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa
File:                     3e8b7889-e23e-3034-ab41-de81b60a5710.roa (raw, json)
Hash identifier:          cHnxZpYISQnjP0hdzL+XQ/BajXwbMcJ1eHiQB15JqPE=
Subject key identifier:   15:C7:15:4E:C3:17:FC:56:B0:FA:88:C0:55:D0:5C:E0:37:A8:EC:90
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F432858473360910AD78ECBC0E806FD00
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     14080
IP address blocks:        64.86.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:91:0a:d7:8e:cb:c0:e8:06:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=a273571d-4852-4ee1-ac48-3e1968a45116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b0:05:74:ad:e3:56:9b:5e:02:c0:fc:32:b7:
                    b6:4a:a8:6b:99:8a:d1:d9:e9:df:1f:8d:10:69:ca:
                    87:f0:3e:6f:36:44:69:13:30:49:e5:20:89:91:25:
                    1c:de:04:f9:74:dd:87:50:0f:8c:d4:5f:48:a8:d7:
                    38:8d:f7:08:23:33:48:46:6d:43:fe:ae:08:23:48:
                    f0:d6:a8:46:39:d6:ea:c0:68:28:95:ec:7c:b9:d7:
                    c8:97:53:8e:cc:0b:7a:cd:68:fd:a4:88:0c:b3:21:
                    aa:48:4f:16:28:de:42:05:27:1e:61:a6:a8:9c:82:
                    78:34:ef:cf:47:ff:8e:c5:40:0c:ec:14:da:0b:ef:
                    12:9d:c3:a1:14:4c:ac:22:cd:5f:15:73:be:df:ae:
                    a8:5d:f3:fb:d5:4c:93:a3:bd:a2:69:88:88:50:b2:
                    66:40:91:0e:21:4f:69:dc:db:5b:be:e3:6d:cb:c2:
                    40:09:50:5e:9f:e2:0a:a3:d2:94:70:b6:c9:b6:b3:
                    a9:e5:a5:c3:97:13:ee:79:a8:4a:8a:6c:a4:f9:36:
                    77:61:a9:32:10:e5:2f:5a:0d:e4:88:e3:62:bc:6b:
                    4a:da:0a:fc:4d:22:c9:de:ac:96:f0:6e:94:21:2b:
                    0b:0b:52:a2:64:b3:a3:c0:3b:8e:7b:3b:18:fd:0a:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:15:4E:C3:17:FC:56:B0:FA:88:C0:55:D0:5C:E0:37:A8:EC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:62:22:dd:6e:34:a2:e3:5d:14:47:84:1f:2b:ab:89:0e:3b:
         99:1c:de:90:e2:30:36:f0:0d:d4:ff:89:2a:15:6b:24:84:de:
         7c:99:d7:23:9d:2b:8a:a0:04:8c:5b:fe:88:e8:23:36:fe:7c:
         c7:9a:84:54:48:16:3f:0a:4a:90:b2:60:5e:b6:3f:2d:81:20:
         e7:1e:3f:ed:a4:8b:34:e4:c6:aa:82:bd:45:4c:83:87:2b:7e:
         fb:26:1c:06:a3:09:0d:6b:42:ee:97:50:36:7e:83:94:e6:4e:
         10:49:5e:6d:a2:ba:73:19:3a:c5:cc:f9:bd:cc:47:43:d5:47:
         27:48:9b:22:11:0c:49:d0:bc:de:38:fd:02:a9:b9:d6:88:ad:
         ff:02:3f:c9:e0:6a:86:e1:d7:92:39:c5:a5:8f:f8:fd:46:2f:
         fe:3e:a7:32:1d:df:e8:05:9f:1c:42:f5:fe:d4:d8:fa:4c:47:
         6e:5a:31:45:5e:34:5f:60:00:66:6e:29:a9:b3:5a:b8:3f:af:
         a5:ca:9f:40:31:e2:f4:1f:29:6e:08:e0:2a:62:1d:96:dc:1a:
         ba:0b:33:aa:2a:fe:5d:d5:e2:83:4f:fa:5a:20:2b:cd:5c:ed:
         14:5a:f5:db:13:5a:bb:c9:18:f3:61:e7:35:ee:6f:bd:1c:91:
         19:d1:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:02 2024 by rpki-client on console-ams.rpki-client.org