Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0a19662b-e3bd-3519-8120-aebf94e61f79.roa
File:                     0a19662b-e3bd-3519-8120-aebf94e61f79.roa (raw, json)
Hash identifier:          elNJIF8bYsHzasGNAK+SKYxmCg72EhEYEHPK8izlwuU=
Subject key identifier:   5C:8A:A8:C6:A1:38:CE:F0:F7:05:2E:6E:CB:7A:B8:6D:5D:A8:23:1C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F4D998578CD7B4B6FB2140
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0a19662b-e3bd-3519-8120-aebf94e61f79.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:d9:98:57:8c:d7:b4:b6:fb:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=b2555fae-b79d-430f-bbec-ded3e5568882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:e2:8c:96:73:65:25:e9:f4:a6:31:10:88:
                    a3:e1:8c:1f:27:ee:2d:50:35:ec:b9:37:b2:fb:56:
                    37:10:88:2f:dd:e3:fd:7d:9d:da:8f:08:49:ff:ec:
                    c5:bf:c6:b5:ee:31:c2:ec:17:a1:2f:9e:99:b1:99:
                    8d:ac:2c:97:10:60:4f:d7:fa:83:9d:27:bd:cd:5f:
                    6e:93:ac:6e:ec:fa:28:f8:ee:35:13:4f:0a:07:4a:
                    36:08:08:0c:e7:e1:28:00:79:3f:98:64:9e:a5:06:
                    95:16:0d:6c:d5:65:21:c4:9f:11:24:ec:5c:5a:1e:
                    b7:94:5f:ba:e4:b1:89:fd:b4:08:86:63:4d:59:1b:
                    8c:0e:a5:07:43:3f:18:c8:37:44:63:df:d6:eb:5a:
                    12:57:66:29:80:22:5f:7c:9f:3d:a7:e7:6a:c3:65:
                    a3:7f:a4:9f:2d:9e:88:79:bb:ba:e9:c5:35:ba:75:
                    5c:cb:67:b2:35:1a:bc:db:88:fc:55:41:58:a7:2c:
                    0e:2b:31:32:63:c8:fe:a8:8d:07:4d:83:9f:0b:4a:
                    95:b0:50:37:6e:d6:fb:ab:4f:d5:8f:dd:3b:df:86:
                    08:69:67:22:02:ba:3f:37:85:0d:eb:b3:33:78:71:
                    68:a6:34:af:2c:91:29:62:52:e1:27:46:64:1c:bd:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8A:A8:C6:A1:38:CE:F0:F7:05:2E:6E:CB:7A:B8:6D:5D:A8:23:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0a19662b-e3bd-3519-8120-aebf94e61f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:42:13:ba:95:d0:98:31:d8:78:af:d7:80:bc:17:d3:01:
         d5:a1:e4:6c:17:58:df:56:12:3e:93:1a:6b:2a:b3:ed:6c:2d:
         4a:49:57:50:a8:5c:50:70:fd:26:8a:06:3c:bf:60:82:90:e9:
         c1:23:d7:47:95:fb:23:0a:06:27:29:bf:5d:3e:df:8b:b3:6e:
         0a:c6:86:0b:fa:0c:59:af:23:c9:5a:c9:8d:66:2d:38:ca:37:
         69:05:34:e2:48:54:d4:6e:2d:33:7d:04:30:be:7d:cb:98:46:
         0b:fa:84:d5:16:1a:d6:9c:80:df:8b:98:0c:29:95:45:b2:65:
         66:54:af:56:d4:23:ea:a6:9a:b8:82:f8:42:7c:17:3f:21:83:
         05:7d:08:8e:03:8c:d6:0a:65:71:ac:98:16:22:01:82:c1:bb:
         4e:c5:7b:5c:d0:4a:ee:42:e8:99:ea:8f:2b:1c:46:f8:25:84:
         fa:14:dd:34:aa:39:75:3f:46:46:d9:ae:41:b4:f9:be:19:22:
         4d:d9:c8:3c:a3:96:59:ea:c5:c3:0d:ed:20:02:d4:a8:7c:70:
         cb:6a:55:b8:e5:b1:6c:95:6b:3b:07:bb:34:33:cd:60:f5:9c:
         7b:e9:6e:c3:d8:ab:ea:70:84:46:95:18:60:37:ec:58:c8:5b:
         8f:cc:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:13 2024 by rpki-client on console-ams.rpki-client.org