Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa
File:                     caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa (raw, json)
Hash identifier:          6XybHlNKRsT7NfkzKomxwBW9CAoUghX7yxiXE03lAGc=
Subject key identifier:   B6:4A:AA:F7:57:C5:00:C8:19:DA:91:8C:2F:6F:11:7D:0F:92:83:3A
Certificate issuer:       /CN=ac683038-c192-4fba-ae61-c511683cdb6a
Certificate serial:       010D0C9F43285847DC64A6908B3B37AE00B55E58
Authority key identifier: D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     13549
IP address blocks:        64.7.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a6:90:8b:3b:37:ae:00:b5:5e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac683038-c192-4fba-ae61-c511683cdb6a
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=a4197128-8c62-41d4-ab8e-54a37b844dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:05:02:da:ac:2f:a4:c4:e8:36:85:9f:43:
                    8c:7b:c5:05:cb:0b:44:e8:c7:78:2c:d5:7d:cc:ff:
                    37:aa:9f:ac:73:57:3b:48:f4:d2:db:4c:15:b2:4f:
                    05:fd:d0:26:30:91:5a:f2:e2:7a:72:b4:d9:82:f6:
                    12:34:89:06:3f:9b:a4:52:83:e0:c2:2d:ce:a2:88:
                    0c:44:8e:4f:1e:77:87:f9:4d:b7:9f:7a:89:7c:8d:
                    85:a9:dc:34:df:7c:0e:42:5f:c6:dd:3c:1f:2d:72:
                    91:23:44:3f:36:7e:7a:33:e0:04:c0:22:3f:0d:a5:
                    9a:c4:e4:e4:28:31:bb:73:9f:dd:77:a0:1f:2c:52:
                    e3:0c:39:a6:2a:14:67:3e:45:72:11:fe:18:79:91:
                    88:36:37:df:32:35:ce:b0:bf:d6:87:6f:4f:2f:35:
                    a2:2d:b9:67:30:62:67:38:89:37:64:e5:40:cb:a9:
                    1a:33:97:04:bd:eb:4c:0f:f4:ba:5e:d9:c7:2a:d6:
                    0e:c4:b2:6b:a7:c0:04:ec:f0:ac:fd:23:d4:87:e2:
                    c4:df:c7:62:11:b2:1e:d7:a3:ee:2d:1a:e4:06:90:
                    30:ec:d6:14:08:ac:41:84:cd:36:49:d5:de:8a:57:
                    2e:11:03:17:11:79:6a:be:99:a3:7b:33:65:3f:5d:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4A:AA:F7:57:C5:00:C8:19:DA:91:8C:2F:6F:11:7D:0F:92:83:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/caae2dc4-be77-35c9-9cc1-45c63bb92eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl

            X509v3 Authority Key Identifier:
                keyid:D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:32:08:51:03:35:36:31:7f:84:1d:3e:79:e4:54:53:27:fa:
         35:0f:9d:52:30:8d:0c:bd:ce:1f:41:73:ad:37:6c:15:89:27:
         5e:1d:88:83:88:7a:80:5d:93:5a:96:a2:d2:5e:a2:76:2b:c6:
         61:0f:5f:e5:93:f9:0d:6a:f2:42:df:6d:db:13:ed:ec:e3:c2:
         7f:7f:b1:5c:43:3c:13:d9:15:9c:e3:12:2c:3d:4c:08:08:a3:
         38:f6:48:37:4e:3e:a0:ac:c1:3a:f4:ad:77:f3:8f:4b:96:8f:
         dc:6b:da:7d:93:59:c5:0e:5b:b2:fd:0b:29:24:35:96:de:d7:
         41:a9:d2:c7:0b:46:5e:ae:2c:77:3e:8e:ea:44:61:d9:f0:fc:
         d8:bf:f5:33:27:29:35:bd:5e:ed:e5:31:6a:a6:0b:74:1f:ad:
         7c:3a:33:52:c4:12:c0:89:17:e7:df:6a:5e:4c:41:12:a3:06:
         a7:3d:f3:be:2e:b5:d0:78:5b:fd:35:b6:ef:88:25:18:f9:f7:
         b0:93:47:a8:b2:99:c1:16:a2:d1:b9:5c:ef:67:ba:be:8c:6a:
         1e:66:fd:f5:8a:d6:bd:26:a8:45:27:13:6b:91:30:9e:9c:a1:
         6b:74:7a:94:19:cb:81:3a:f4:0d:b1:4b:a4:4a:d5:49:86:e6:
         9c:c9:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:20 2024 by rpki-client on console-fra.rpki-client.org