Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa
File:                     aec344a8-4f5c-3241-ae81-d26a1958ad45.roa (raw, json)
Hash identifier:          hIm759K83W0zh25thu6iaLX7DpUzSCsUjuqJ8G1q7ec=
Subject key identifier:   59:4D:84:B7:34:79:31:76:99:BF:88:B7:B9:E3:6E:D7:F0:6A:B8:3D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E8F50C6669826FB001205620
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     36492
IP address blocks:        64.9.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:0c:66:69:82:6f:b0:01:20:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=b3de0af1-2479-4be4-9675-7c9d79653bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:e3:32:a8:98:b8:36:c1:9f:64:f2:45:4d:
                    18:af:67:05:99:41:a9:46:4f:6f:6a:f2:8b:54:3b:
                    ed:51:e5:2d:14:ec:ef:48:5b:ca:3e:4e:0f:b3:85:
                    42:4d:01:48:dc:db:34:25:cd:1a:63:59:70:56:7c:
                    49:4e:cd:db:b6:a7:36:e5:48:6b:67:5f:ab:7b:22:
                    9f:d3:25:f4:ef:6d:44:1a:2a:6a:6d:f4:42:93:d1:
                    1b:21:8f:f9:aa:93:ce:f3:0d:99:41:c4:4e:8c:82:
                    dc:ab:bf:27:b5:25:c8:84:95:65:aa:65:a7:9b:46:
                    e3:07:f9:18:0f:c0:ec:b1:d6:c4:7d:51:4f:7c:04:
                    e2:93:9c:79:42:71:11:9c:0d:9e:e9:ed:b2:20:d8:
                    06:19:22:82:16:a7:b4:66:8a:34:b6:b3:8c:03:78:
                    d8:5b:78:ce:5f:cb:ad:af:45:42:12:a8:19:ba:eb:
                    1e:4b:f6:cd:df:9c:ed:bb:e8:9d:10:83:4f:01:70:
                    96:f9:d6:c3:52:41:43:ff:77:e8:cd:f8:30:e1:de:
                    52:bf:99:4b:ae:30:83:a2:7f:24:af:dd:34:25:41:
                    f4:95:6e:a0:55:ad:0b:93:8b:36:20:68:15:f9:6c:
                    92:9b:07:30:18:52:b7:e6:62:e8:13:af:fb:90:a2:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:84:B7:34:79:31:76:99:BF:88:B7:B9:E3:6E:D7:F0:6A:B8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:87:92:22:00:49:02:aa:0c:3d:ca:e5:fd:af:e2:94:8c:
         93:25:ca:ac:75:73:8e:35:41:0a:e3:68:bd:77:89:e0:9f:48:
         ce:12:63:f9:5f:f3:79:37:16:00:2a:92:8f:14:79:4d:fd:9e:
         37:55:70:28:fd:80:9c:d5:a6:d5:fe:9d:43:6e:16:b0:a0:8c:
         0a:90:7e:31:26:47:f0:5e:ad:66:ba:02:cc:0a:f6:80:22:23:
         16:af:7e:35:2f:bb:d5:ba:39:a5:71:78:90:7b:83:14:ea:ad:
         ed:45:23:73:71:3a:1e:3b:fa:3e:7d:11:38:4c:52:ca:c0:25:
         7c:69:76:3a:b3:3d:da:29:5a:87:4e:c6:d8:b5:eb:27:28:be:
         86:62:4f:97:65:7d:fe:fd:66:40:79:36:14:0b:91:8e:63:73:
         05:6e:d1:3b:c7:29:eb:b3:b0:ac:e6:97:08:76:a2:13:81:58:
         55:83:58:10:56:64:67:73:45:f6:22:b1:2a:48:2d:5e:01:27:
         f4:b9:e9:cf:2d:6e:a5:1c:71:e2:8c:0a:58:25:ce:e5:0e:00:
         70:23:31:62:56:1a:1f:ce:6b:59:0b:b6:01:26:ae:e5:76:b1:
         8c:65:2f:e6:d0:40:54:e2:82:51:e8:81:45:00:b9:f2:ee:50:
         15:68:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org