Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa
File:                     8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa (raw, json)
Hash identifier:          Fmj6vT1/igvV8ajnRLd+pvT86h+8Qlt4URP+eZyiyY4=
Subject key identifier:   33:FE:4E:AF:05:0D:C5:FD:05:D0:87:72:54:E9:7B:23:81:F5:E5:F1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F4DE03BC109256E08DF480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:de:03:bc:10:92:56:e0:8d:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=22f2afaf-39ff-4a50-a786-493228e995dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:e8:7f:b4:43:6b:c3:a8:ff:a2:43:7a:a2:
                    98:bf:c3:34:fa:48:9f:8e:bf:ed:6d:ac:b0:97:be:
                    f0:92:0f:0f:e4:90:1a:08:58:12:b5:9b:88:c1:35:
                    fb:38:f5:19:0f:27:f2:a8:f1:7a:1e:d0:25:80:83:
                    9d:c8:23:ff:b7:46:5d:5a:95:56:3a:74:76:0f:19:
                    e7:af:2a:e1:59:d3:3c:c8:22:a6:ed:48:3d:40:ed:
                    34:99:44:ac:0d:9b:e2:7a:02:df:9f:8d:d8:15:bc:
                    eb:b1:e4:d7:03:7d:2a:10:55:af:9d:91:94:81:3b:
                    a3:82:43:9d:fa:96:43:00:bc:9e:b0:02:21:7d:24:
                    d7:89:78:bb:73:71:f5:6b:67:14:67:29:94:69:af:
                    93:f9:a9:b3:84:6a:df:60:79:b4:9c:69:2e:ea:3f:
                    8a:62:49:f2:6d:6b:4e:57:a2:dc:9b:47:7b:28:df:
                    a8:3c:fb:95:9a:61:1f:c0:35:05:86:eb:9f:64:b2:
                    3b:ff:de:80:30:6a:ed:c8:f3:81:ce:0a:8d:72:93:
                    a2:e6:79:20:3a:15:f9:b0:64:04:ad:1e:ff:8c:b9:
                    d5:7f:c5:2f:03:84:c9:af:02:e1:d7:50:29:05:94:
                    9c:45:61:97:e1:b4:4e:36:c4:b4:d6:4b:4c:10:e9:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FE:4E:AF:05:0D:C5:FD:05:D0:87:72:54:E9:7B:23:81:F5:E5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8807ecca-80cd-32ab-a6d2-8f40ef9ca668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:da:42:0c:a4:f8:65:36:da:63:74:1b:1f:d1:f3:15:ce:
         c8:f0:61:9e:05:66:c0:be:65:2d:6d:2e:d4:fd:9a:e0:0f:af:
         18:6e:44:3f:65:22:ed:ed:eb:71:80:cd:47:f8:1f:e6:98:f8:
         a7:e9:f8:5a:04:b5:8f:18:00:e3:16:66:17:e5:e5:01:c3:1b:
         ac:19:ed:21:58:b1:45:59:31:34:72:fa:6f:ce:cb:8c:3b:8a:
         7a:65:6a:69:7f:ce:20:71:9d:0b:63:87:9c:05:b8:89:18:b3:
         06:3e:18:c4:bb:ab:03:26:c2:8e:ca:5e:18:10:d2:0d:d5:07:
         81:ab:95:41:84:07:e5:5d:82:7f:2b:28:46:4e:e2:59:fa:f5:
         c1:53:7b:a1:7f:c7:7b:3d:04:18:fe:4e:99:95:f7:95:ad:3b:
         e4:ec:f3:fa:69:5a:7b:5e:e8:f4:01:fd:22:e8:0f:5b:d7:61:
         d2:fb:1d:a1:d7:7d:ec:b5:18:3d:b9:63:4a:c6:9f:be:d9:ef:
         19:19:cd:49:1e:c7:1c:09:55:9d:7a:56:d5:82:c7:e2:61:f8:
         38:b3:f9:59:47:e9:5b:aa:9b:2e:f8:3d:2a:6c:56:46:12:23:
         5e:d2:8a:14:3e:e7:ef:54:b4:a6:84:18:a3:41:db:9a:5f:a5:
         ba:30:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:49 2024 by rpki-client on console-fra.rpki-client.org