Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa
File:                     2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa (raw, json)
Hash identifier:          QIwa9Ana/ZdeQ6KhP0g2RfRJOZHsVzpGcKlPYJLe39s=
Subject key identifier:   CB:85:E4:9D:2F:02:9F:19:69:37:C3:3A:04:6C:BA:60:1E:3C:4D:55
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F432858480BDA791D87E045A5E37BDC40
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     398391
IP address blocks:        64.226.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:79:1d:87:e0:45:a5:e3:7b:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=333e69d6-e9ec-47d5-ab49-b2e152e1f9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:c0:36:92:e6:1f:fb:e3:98:40:6e:9f:86:
                    65:5f:ec:4e:a4:8f:a4:16:11:3f:4c:4a:d4:45:04:
                    cc:f4:62:4b:4a:0b:8c:14:ce:17:9c:c5:b3:c6:53:
                    5c:5e:79:84:ec:8b:a9:e9:31:81:9f:08:64:9c:47:
                    36:e9:f1:a8:c5:07:1b:0e:f1:b2:42:87:eb:b6:31:
                    68:47:c3:02:c7:0c:2d:97:62:9c:2b:15:bf:fa:f0:
                    bc:59:47:5a:b2:76:8e:1a:dc:90:91:29:f4:fb:f7:
                    95:c4:60:61:37:71:97:2c:61:f1:db:67:f7:68:91:
                    da:89:d3:85:ec:eb:0d:b9:a6:f1:91:0a:7b:59:c4:
                    94:8e:52:1a:1e:91:39:f8:96:28:d4:40:07:2e:a4:
                    c4:fa:ce:4d:ca:1c:83:b0:30:ad:f5:d9:7e:c4:32:
                    04:61:df:47:a3:8f:c2:fe:29:d2:12:ef:ce:b4:e6:
                    ea:a5:30:44:b5:fa:59:dd:43:47:d6:74:a3:5d:51:
                    b2:f9:dc:af:3b:92:51:7a:fc:ea:be:82:94:f9:34:
                    8b:74:11:13:8a:16:dd:9e:a4:29:8a:90:0e:cf:d4:
                    9b:4a:f5:c1:13:bb:77:60:01:de:7d:4d:2e:66:e5:
                    b0:64:d0:3b:2b:29:a2:fb:03:ca:2b:13:6b:27:9f:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:85:E4:9D:2F:02:9F:19:69:37:C3:3A:04:6C:BA:60:1E:3C:4D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:43:ef:20:8b:b1:2e:60:91:3e:46:51:0b:f8:e2:5e:aa:
         c0:1c:c5:9f:96:9f:47:8d:7a:6a:85:bd:e9:a9:4b:09:67:e7:
         8e:37:40:6c:c4:9d:be:28:ae:9e:4f:c3:e1:2f:c7:5d:89:82:
         9d:23:bd:4c:91:ac:28:25:21:00:74:c7:4c:f7:04:cc:87:ec:
         d4:dc:4d:7d:30:74:c7:5f:aa:61:ee:e9:2b:73:44:b6:ca:fd:
         37:1b:53:98:45:3c:1a:34:93:26:dc:a6:d4:96:c6:3c:08:2e:
         d8:d5:58:5b:78:9e:ab:69:81:24:47:50:5d:45:e8:77:2b:63:
         3a:61:09:73:a2:33:3a:e5:8e:88:b3:a6:90:77:1d:1a:99:fa:
         fe:96:29:9e:8b:f3:8f:d4:bd:a4:4b:00:f7:f7:61:d1:42:16:
         a7:6f:44:0a:2d:c5:9b:ef:3c:03:bd:29:08:a6:ab:68:3a:5c:
         05:ec:f6:a9:16:61:36:21:e0:b6:a4:14:26:c3:93:e9:44:9c:
         20:b5:80:58:0e:3d:41:1f:8d:02:fb:01:3c:8c:d9:f3:b8:15:
         03:a8:4a:d5:d1:af:a2:56:0e:aa:75:79:2a:98:82:3c:15:99:
         e6:e4:be:b1:e3:ab:2a:2f:5a:f0:52:63:f4:08:66:a9:f9:35:
         a4:45:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:52 2025 by rpki-client