Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1e1a168b-039f-3f83-adc5-686b4b291fe4.roa
File:                     1e1a168b-039f-3f83-adc5-686b4b291fe4.roa (raw, json)
Hash identifier:          gmpEWBPufTr0JcH3QuJSshtN4kKlL8DB30+N5hncQ/Y=
Subject key identifier:   01:00:5F:62:4A:DE:6E:03:5B:CB:E9:BE:DA:1A:17:05:31:6E:DE:28
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF44AD399C5C49E0466600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1e1a168b-039f-3f83-adc5-686b4b291fe4.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        64.114.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:44:ad:39:9c:5c:49:e0:46:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=8810429b-511a-452d-b286-02dc710120f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:da:17:92:fe:bb:b4:af:ae:8d:7c:26:b4:
                    a6:c7:30:b5:21:14:26:9c:d5:69:fb:46:de:f9:cd:
                    83:dd:db:c4:ea:57:7b:90:02:ce:3b:88:96:00:9f:
                    2b:e8:0a:bc:8f:90:c2:34:69:9d:15:9f:e3:f5:ec:
                    14:eb:65:04:7c:fd:7d:11:3b:53:64:98:a6:0d:0c:
                    f5:1a:74:64:15:35:d1:d1:98:29:4a:d8:8f:88:53:
                    20:82:70:e9:69:48:9c:9f:6a:0c:63:95:35:9d:38:
                    30:db:7a:1b:4f:a6:ec:ae:f4:1c:6e:41:b2:06:e8:
                    3c:e1:74:85:0b:1f:9e:c8:59:51:c9:dc:04:17:a3:
                    76:2f:1f:97:9e:79:d4:4e:e4:7f:d2:f7:21:eb:bf:
                    1b:1c:1e:46:46:71:44:a0:6c:1f:fd:81:4c:91:0e:
                    f5:24:32:57:dd:f7:d7:1b:0c:b9:ce:a3:e5:4a:5a:
                    6a:79:3c:e9:10:b1:2d:74:83:b2:1a:58:cd:c8:cf:
                    72:4b:5e:83:10:91:1c:22:39:14:f5:b2:aa:fb:a7:
                    5b:c7:34:05:6d:df:c9:71:9e:e3:1a:be:5f:14:0b:
                    b4:4f:b5:1a:a4:d9:cd:b0:35:e3:98:89:96:97:6f:
                    fa:b3:f4:5c:a4:79:a1:81:4e:23:b4:37:8d:59:64:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:00:5F:62:4A:DE:6E:03:5B:CB:E9:BE:DA:1A:17:05:31:6E:DE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1e1a168b-039f-3f83-adc5-686b4b291fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:cf:07:d1:d1:20:42:1a:41:bf:d7:bc:90:a2:50:fa:dc:
         cf:2a:5c:4d:9a:38:93:c9:e4:85:83:fa:4a:f5:c4:4c:81:4d:
         02:57:8d:f1:58:c9:7d:8c:b3:64:ec:ce:c7:09:8d:c9:17:c0:
         96:56:87:c1:b1:f8:f9:29:a1:d2:30:dc:e1:66:19:d1:18:47:
         b5:4a:e6:ae:40:cc:0c:8e:9e:1d:3b:a2:4a:c4:77:22:93:75:
         5e:ed:45:38:00:c7:3b:e6:67:24:e3:46:e9:19:75:a2:b2:e8:
         a1:26:23:7e:7e:52:79:68:f0:ea:b1:4d:7a:99:99:12:6c:a7:
         8d:89:8b:d6:d0:4d:be:51:71:53:90:9b:f8:3b:11:90:6a:a9:
         19:ff:69:91:67:32:46:4f:5d:3a:a5:bf:dc:e7:15:df:61:fc:
         97:e3:64:fb:79:e3:da:23:27:d7:ce:49:30:53:49:55:23:65:
         eb:91:ae:53:19:c6:63:a7:82:18:a5:5f:34:d0:c0:fa:0f:87:
         0f:d1:f3:32:a5:a8:43:5a:72:6f:57:b6:58:e5:e7:73:b3:1b:
         13:1e:61:b4:7e:07:d9:74:6c:29:7b:f4:f2:c1:64:c4:c6:be:
         21:9c:56:24:4f:20:83:10:af:4d:f8:00:e2:6f:fa:4d:02:3f:
         39:1c:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:10 2024 by rpki-client on console-ams.rpki-client.org