Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa
File:                     b804937a-f843-3745-b3d8-d70631744a5f.roa (raw, json)
Hash identifier:          GY0aqVHEPvkIU5XO0uvRkV+H8bKrseLDV+vidoTxyUU=
Subject key identifier:   A4:FD:DA:86:4C:F1:BD:84:EB:BF:61:CF:46:08:FC:08:C3:8A:FD:90
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847CA3F7B7CBCE8B9C9888FEF00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     25668
IP address blocks:        64.114.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7b:7c:bc:e8:b9:c9:88:8f:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=c1998eb7-e62e-4ce8-9a95-d734ca841f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:0d:bb:04:bf:c8:3a:82:15:98:d7:5f:a3:
                    36:21:6c:52:94:70:01:ab:c3:30:ea:13:20:eb:59:
                    fa:af:30:58:3f:64:bd:5f:3c:81:ba:de:bc:0d:26:
                    8f:da:34:6c:82:67:c9:20:68:c3:c1:9c:fa:60:66:
                    29:bc:45:c7:ae:60:08:68:8e:52:19:3f:bc:fa:b4:
                    40:86:48:a0:9d:44:fb:f8:2f:fc:42:1f:60:93:b5:
                    8b:23:90:60:26:1f:df:83:b7:5f:b8:4a:b6:b9:ea:
                    42:8a:f0:b4:81:8e:ef:6a:7b:90:af:40:fa:bf:45:
                    f4:1f:18:e5:30:8e:3f:b4:96:94:84:74:99:b4:20:
                    0c:24:ff:7a:ba:63:a0:a2:5c:c1:c7:a5:a9:6e:df:
                    9a:87:b0:5b:a3:57:aa:82:ab:d4:53:ab:e0:f1:9c:
                    ea:98:86:07:12:14:1d:9a:7b:aa:9e:7f:a0:24:c1:
                    2e:cb:7f:c9:62:13:76:20:95:52:0e:a1:c1:e2:90:
                    7b:6c:34:b7:25:7d:88:19:61:44:27:9c:10:af:bc:
                    66:7f:0e:07:d0:56:7a:b2:16:2c:50:a0:46:36:91:
                    cb:c9:9f:59:5a:af:fd:b9:c3:1b:46:1a:2b:54:5e:
                    44:e6:55:95:57:05:57:4f:5e:dc:81:f1:94:bf:4e:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:DA:86:4C:F1:BD:84:EB:BF:61:CF:46:08:FC:08:C3:8A:FD:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b804937a-f843-3745-b3d8-d70631744a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:4f:cc:84:7d:e4:a4:46:d0:c9:ef:9e:29:58:ed:68:5c:47:
         b8:46:13:3f:08:82:11:2d:9a:57:72:53:d8:83:73:dd:cb:14:
         89:7b:25:a1:65:c7:a2:3b:94:6e:50:4a:4f:fa:fd:fe:54:49:
         cf:77:ef:1b:b9:68:70:6e:53:9b:60:7b:23:fb:38:ea:0c:9d:
         1e:41:87:00:f0:61:20:89:64:ef:fe:d0:65:4a:40:bd:98:c5:
         3f:6e:da:9b:87:ab:25:f9:0f:ab:b5:5a:d8:ff:48:87:0a:cb:
         75:45:34:ff:80:2d:6e:6e:ec:79:30:26:43:07:0e:0d:ec:c6:
         c9:80:6b:9c:c3:3c:52:7e:74:35:a9:40:40:86:54:e7:c6:28:
         8a:b7:ad:10:f1:98:94:2d:92:7b:34:31:68:4f:78:a1:f9:c6:
         78:7e:15:7a:dd:f0:38:4b:a9:4e:07:cb:da:d2:a1:c1:d5:6c:
         6f:2f:26:ab:ab:2a:07:99:12:b8:7e:fa:21:89:0e:c4:53:94:
         8b:f5:98:4f:88:d2:a8:7d:ff:fa:70:6b:ed:ae:d0:b9:be:0f:
         ac:26:11:db:91:27:42:5b:17:7c:ff:59:95:f4:cf:b2:32:a9:
         8e:a1:48:13:75:87:59:57:0d:93:77:7d:98:a2:f0:a9:1f:68:
         27:a5:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:28:07 2024 by rpki-client on console-ams.rpki-client.org