Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa
File:                     4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa (raw, json)
Hash identifier:          WIACXq/C7JpcGxuUBvmbRucP3F6uUnK/BKwqfqqg4BY=
Subject key identifier:   19:EA:86:8F:99:52:93:57:1F:20:2E:F9:C0:05:3F:15:53:29:92:24
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D999E9C5479EB2D2CCB65100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        64.114.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:e9:c5:47:9e:b2:d2:cc:b6:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=1ee6da41-3260-4ae5-855f-1c28cd07b392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:f5:71:6e:ad:cb:2c:94:5e:82:49:e4:98:
                    1f:0d:09:9d:57:fe:60:25:b0:fa:8e:02:e3:74:51:
                    31:c0:d8:e5:0a:3a:bb:b8:1c:cb:f2:82:52:a7:b7:
                    78:15:7f:77:c5:1e:12:87:41:e9:0d:41:ba:1c:bb:
                    5d:03:19:b1:a4:a9:b0:22:fc:83:e9:ec:bb:9d:f8:
                    a3:c8:73:4a:fc:1d:8a:8c:74:62:b7:39:79:cc:cd:
                    f7:ca:15:d7:6d:ac:87:0a:e4:15:bd:b2:ff:88:fa:
                    6e:60:26:21:4f:6e:b0:b8:c1:a9:29:dd:99:07:20:
                    67:06:c5:94:67:23:5a:62:3f:24:22:db:50:dd:ae:
                    34:70:87:6f:71:bb:46:10:00:82:9a:be:c0:7d:0c:
                    7b:fd:50:d4:b1:68:bc:0c:9c:6a:54:34:cb:91:38:
                    15:d3:01:8a:8b:a5:cf:f4:78:9d:fb:34:e0:a0:4d:
                    60:9d:2b:0f:c1:a8:eb:b5:5d:50:4e:5f:bd:90:0c:
                    86:c2:6b:3c:b0:da:ad:9c:d6:78:a1:36:ff:9b:ac:
                    7c:06:56:53:1b:4e:cb:63:6a:c8:af:82:46:27:b5:
                    d1:2b:bb:a7:d4:d4:f8:0a:86:9d:44:46:be:13:c9:
                    a0:9d:87:cf:0a:07:95:c1:c4:dc:92:34:93:fa:47:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EA:86:8F:99:52:93:57:1F:20:2E:F9:C0:05:3F:15:53:29:92:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e8:bf:0f:61:69:d2:70:2d:0a:1f:eb:61:a0:e3:b3:c4:d1:
         76:19:01:ec:1e:47:ab:c8:ad:05:d5:a2:22:56:5a:20:1f:71:
         6f:03:c3:11:d5:ce:79:f9:f5:eb:59:50:3a:2c:36:b6:b0:33:
         9a:6a:d0:96:a7:fe:41:54:1c:c1:88:67:64:34:96:a9:cd:9c:
         eb:4a:6c:c1:2c:fe:59:c4:4b:76:cc:26:60:3d:36:48:d0:b5:
         3c:92:80:60:ce:0f:fa:d4:9c:9a:92:4c:78:5f:13:db:6a:8b:
         07:c8:9f:04:d6:d8:2b:f3:99:75:b8:a1:e6:93:2a:da:8c:92:
         90:c8:73:2e:5b:7e:d9:75:3a:de:68:bf:0e:ed:b2:81:8b:b8:
         13:e4:6e:4f:71:83:da:6a:9f:bc:43:62:72:21:63:19:6d:d8:
         29:82:ad:9a:67:ca:ba:b2:5a:f5:74:37:ee:64:54:15:d3:2b:
         2e:63:26:82:50:24:9b:ba:35:4a:39:e9:3f:bf:71:b8:a8:f8:
         49:9d:87:6d:0a:90:22:88:00:34:95:5d:8c:a4:86:aa:f9:1a:
         f2:82:a4:26:f3:2a:9d:3f:51:d9:51:fa:af:0c:cd:c2:f0:ef:
         38:a2:5e:f7:f6:82:88:77:78:19:a1:9a:6b:9b:c2:be:6a:90:
         5e:bb:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:10 2024 by rpki-client on console-ams.rpki-client.org