Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa
File:                     12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa (raw, json)
Hash identifier:          cusvOuiiVfwiEkbz7K6MiMe9BoRf4jTsJ+8EPFCTF+k=
Subject key identifier:   BC:90:BA:98:A8:6D:55:C2:8C:79:C8:3C:9C:35:F0:69:65:42:54:08
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584769D0DA99AA54C959F335FC40
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     395406
IP address blocks:        64.191.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:da:99:aa:54:c9:59:f3:35:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=f3c7ee2f-3526-42ae-bd6b-afccad1ed0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:01:d8:a5:c2:fd:f8:67:6a:36:3b:0b:75:
                    f1:44:bd:11:c9:b3:f9:82:8a:28:fd:77:6b:4f:4c:
                    0e:a1:43:9c:4b:c0:6b:eb:54:5f:9f:29:c4:60:1c:
                    b4:01:5f:c7:40:79:de:5f:49:99:e6:ff:e5:dc:84:
                    33:d4:91:be:ba:e2:0b:4d:59:3b:e6:48:99:9f:6a:
                    f0:2d:d2:aa:38:b9:eb:86:29:42:ac:7c:0d:0f:d5:
                    07:ea:69:dd:2c:d1:1d:25:4b:2f:06:e0:aa:03:7c:
                    a1:d3:30:2e:31:00:ee:fb:08:5e:0c:78:0d:4b:20:
                    40:be:09:6f:9f:fb:ab:b8:e4:cc:3d:b6:67:de:49:
                    fd:4e:73:07:93:77:08:77:20:81:cc:00:f3:a5:5b:
                    28:33:56:f5:77:4b:a5:42:23:1c:ac:5f:97:68:de:
                    f8:ff:82:bc:79:06:e3:c2:7d:76:7c:97:ef:0f:4c:
                    77:34:99:2b:9e:c2:c2:77:68:c7:79:74:9e:95:23:
                    c8:3f:f0:d4:03:bd:1d:31:29:4a:69:9d:41:e0:1f:
                    18:ed:52:70:42:90:4b:a7:d0:f2:f4:fa:39:68:12:
                    db:65:70:aa:01:49:f5:6d:78:ce:d4:2d:65:7a:db:
                    47:7f:f7:2b:21:bf:a4:70:9f:7a:7c:ee:85:64:8a:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:90:BA:98:A8:6D:55:C2:8C:79:C8:3C:9C:35:F0:69:65:42:54:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:22:fe:12:fe:fe:ac:20:44:e5:7f:50:e9:ad:d3:1a:00:1c:
         40:01:26:f7:6d:ea:cc:ea:79:13:51:8d:ec:62:34:5d:58:fe:
         a1:50:14:eb:2a:5f:f5:ad:87:a4:4f:85:01:b5:cd:8c:43:01:
         bd:81:4c:e4:54:c0:9d:8c:5e:04:49:4d:ae:40:cf:31:16:e2:
         8e:c6:8a:ee:6d:1a:c3:a0:bc:2d:bf:55:56:60:2c:53:95:c2:
         83:76:40:12:77:ce:5f:a5:42:fd:bc:f4:51:b6:f7:02:64:46:
         f8:6a:c1:c7:d7:c9:0a:5e:0d:5c:f7:8d:79:a7:c8:64:d4:af:
         c7:02:d3:94:68:fe:65:f9:a1:63:3d:e8:7f:d5:06:77:09:f8:
         ae:68:28:22:11:50:87:94:96:57:98:a4:30:e0:38:40:47:63:
         c7:fc:48:55:99:f7:fc:0d:4f:9f:86:bf:8a:de:9d:86:4e:55:
         75:1c:92:09:43:5c:79:5b:e2:c5:05:b3:b9:3f:7e:a7:fd:1c:
         41:ed:3c:2d:89:5d:65:f9:9c:ff:10:64:fa:e9:76:e8:b6:46:
         b8:a4:bc:83:88:c0:94:11:c8:57:34:be:55:a0:58:35:26:fe:
         83:91:35:ae:8d:07:f6:d7:b0:03:9e:92:ad:0e:aa:06:ed:57:
         a4:bd:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:23 2024 by rpki-client on console-ams.rpki-client.org