Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa
File:                     8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa (raw, json)
Hash identifier:          4YKKvtNX28VJIXx3ltWT0hLb/ulDZB22l0FN7aIvNQ4=
Subject key identifier:   9E:D9:26:23:68:2C:59:46:29:F8:42:61:32:10:CA:EB:DD:50:D9:9F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F51BD549E97ECF87F7F400
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:1b:d5:49:e9:7e:cf:87:f7:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=6a9b1669-8f68-4ab1-920a-f66f8ae8666d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:84:bd:87:b1:81:76:68:b2:f2:b4:8f:ec:
                    02:13:6e:84:c7:bb:6f:f2:a2:64:00:c0:87:b9:39:
                    d8:ae:f2:d1:58:7c:48:a9:e1:91:24:e0:f2:34:b2:
                    58:4c:21:e1:57:74:17:da:c7:35:d7:b1:47:a0:30:
                    e7:cb:06:0d:7a:3a:ff:41:f3:c0:c4:71:ea:cb:3b:
                    e3:d9:86:c2:c7:f0:fa:f9:9f:e6:00:ee:75:0e:c6:
                    3b:aa:67:cf:84:ed:39:38:1e:ac:80:ac:1d:b1:ca:
                    6d:be:5f:9f:c9:61:6c:54:ad:e0:17:a3:32:0f:ed:
                    ad:b7:db:d7:f9:00:78:12:71:13:67:4d:bf:8c:fd:
                    af:05:5c:a8:31:bb:b4:56:79:ca:55:3e:8c:c9:9d:
                    85:9b:ca:05:1d:18:7f:19:cf:f0:5b:71:af:3f:36:
                    34:a3:48:ee:22:4c:32:0a:dd:b2:d4:b7:6f:7e:fe:
                    21:8c:a4:ea:ea:51:46:6b:8e:7e:64:1a:8d:9e:16:
                    59:67:9b:3a:e8:e5:ab:4d:7a:90:2b:44:17:b9:ba:
                    df:d0:89:0d:43:45:59:af:b0:af:b5:a6:dd:f5:b3:
                    32:bb:e9:46:54:df:d9:26:17:ae:88:c0:e3:22:5f:
                    a3:a8:02:38:92:0e:31:2e:ea:f2:e5:09:4c:00:ca:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D9:26:23:68:2C:59:46:29:F8:42:61:32:10:CA:EB:DD:50:D9:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:b2:63:85:81:73:55:1d:4b:93:2c:f2:6c:29:97:45:75:
         a1:52:67:d1:b2:5f:2d:cc:86:25:bb:e5:c5:79:1a:53:2d:3b:
         29:50:2e:a2:c5:3a:8a:30:a0:c4:8a:f3:c4:fb:9f:60:bb:0c:
         97:96:d8:1b:12:2d:57:85:df:3d:ee:6a:3d:04:1a:60:28:84:
         56:b4:05:a2:e5:15:ca:86:51:25:11:ad:56:90:2d:4c:d2:b4:
         59:34:68:73:e6:69:5e:81:e8:a4:96:3b:db:81:d0:f8:27:b3:
         1a:72:91:e0:d9:7c:83:56:ce:7d:10:8d:c6:bc:81:42:bb:1d:
         fc:6f:68:38:73:15:88:d1:72:75:df:51:39:f6:eb:ab:92:72:
         1a:3d:e2:e7:fb:9c:4a:97:67:5f:42:9e:a8:fa:d8:cf:7d:f0:
         01:11:b8:bd:be:35:fa:28:f5:68:18:97:5c:c1:d7:af:e9:07:
         6a:e5:a6:e9:f7:bc:e5:2f:c0:24:bd:43:29:8f:7e:35:64:19:
         44:36:f6:03:0c:c0:29:8c:d5:ad:3a:c6:e5:a9:b9:6a:19:d9:
         41:08:e6:4b:ff:7c:53:71:c1:20:ec:74:39:b3:33:47:52:17:
         68:50:19:9b:3a:b6:9d:9e:d9:de:5b:e3:1c:3d:f2:eb:86:2a:
         9c:1d:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:49 2024 by rpki-client on console-fra.rpki-client.org