Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1b9224d9-a9ed-3f2c-8314-ff5343ebe91f.roa
File:                     1b9224d9-a9ed-3f2c-8314-ff5343ebe91f.roa (raw, json)
Hash identifier:          2YlNby5K6AD/x45WQrr9zHSK8gkU/zxtGbqj4DzUdv8=
Subject key identifier:   E7:DF:E5:1F:90:A7:FC:07:E3:E9:F2:28:60:24:C0:B8:D3:47:98:F7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F4EC72A6D8F94F81B307D0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1b9224d9-a9ed-3f2c-8314-ff5343ebe91f.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:ec:72:a6:d8:f9:4f:81:b3:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=a7721981-75bb-4fa1-96fa-696cbdb03328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:35:45:a7:0f:1d:d7:2e:87:97:6f:5e:21:
                    65:51:f3:03:b9:e3:da:21:56:30:2e:f2:38:1a:e2:
                    f5:cd:1a:e8:99:a7:85:2e:aa:1a:6c:27:c2:79:87:
                    b6:c4:70:f0:08:2b:c6:62:e3:71:9c:2a:40:1b:12:
                    09:ef:5e:bd:39:da:00:08:6f:93:63:73:eb:de:d0:
                    8a:de:f1:cb:fa:74:6e:16:2f:26:cd:5a:37:e9:59:
                    6c:4d:83:e1:53:3c:48:fe:c6:c5:2b:a8:f3:3d:f4:
                    c8:05:74:6f:e4:b8:c5:a2:f7:51:26:76:35:d4:33:
                    85:2e:ed:e0:c5:4c:67:f2:22:9d:38:69:b5:97:24:
                    ee:de:01:7c:b7:02:26:8d:9c:f5:e4:c7:1b:95:91:
                    68:3f:8d:38:68:a5:7f:56:af:41:cd:a7:66:43:75:
                    41:9c:9c:55:75:42:83:e8:9c:4c:c1:25:10:74:92:
                    31:f5:b3:7d:cd:78:27:8f:6e:5e:3c:2f:e9:ca:b6:
                    ec:26:ca:1a:1d:49:fd:83:f9:57:b0:9b:d2:52:f2:
                    e4:71:e8:a2:ff:ba:1a:32:7a:21:ba:60:34:b2:22:
                    ce:20:37:95:21:84:fd:16:03:c4:fd:6b:28:c2:9a:
                    16:7e:ea:0c:a2:32:31:9f:20:b0:88:4c:c3:e1:0d:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DF:E5:1F:90:A7:FC:07:E3:E9:F2:28:60:24:C0:B8:D3:47:98:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1b9224d9-a9ed-3f2c-8314-ff5343ebe91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:6c:4f:e2:45:f1:05:a3:1a:4f:03:74:25:75:16:da:61:c3:
         8a:3d:0d:1f:0c:e4:17:18:5a:cc:c2:52:80:0b:09:07:54:ad:
         18:66:d6:ef:1b:c5:23:8b:63:3f:10:9e:60:ee:3e:bf:9c:cf:
         c1:90:e6:b3:3a:a1:ae:32:97:5d:5d:9a:ea:03:6a:f0:89:cb:
         0c:c2:4d:de:27:2c:df:90:8d:6e:0a:64:8f:c1:9c:2c:6b:96:
         99:d8:aa:db:f7:b9:c9:85:43:88:08:42:9b:8c:86:b8:ee:9c:
         7b:95:df:78:91:37:be:46:c7:b3:83:f8:7c:7a:92:d6:1d:db:
         3d:73:62:0e:f5:47:84:f4:07:84:21:44:0b:81:08:8c:fa:f7:
         0b:e8:2d:72:f0:2e:41:10:a4:47:be:d4:57:f9:6a:dc:d0:91:
         1f:bd:26:26:5b:03:d3:a5:98:47:d6:9f:e4:d5:12:06:a7:7c:
         dd:ad:76:87:72:0d:3f:c2:0b:9f:b8:23:3a:04:fb:37:1f:93:
         36:e9:73:5e:bd:5a:f4:e6:4e:8b:12:c8:89:06:c9:b1:71:ee:
         c3:b2:45:35:d7:7b:14:d1:71:cc:0e:af:54:13:76:39:a9:bc:
         6d:f2:c8:87:c6:ca:08:83:fb:2f:a6:30:52:9b:ad:1a:16:dd:
         18:9b:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:13 2024 by rpki-client on console-ams.rpki-client.org