Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa
File:                     39180b00-aeca-33d4-9a03-d7d925444ce2.roa (raw, json)
Hash identifier:          BRP6CBhMYsdOxcdgNOjE7fy9k7+dQCfVDk1Gb4zlOTQ=
Subject key identifier:   08:DC:D8:9A:00:9A:6F:F0:30:C2:FB:3A:01:92:1A:21:23:D5:4F:60
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584679B9FA000480E48CC3689A80
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa
Signing time:             Tue 09 Jul 2024 01:00:25 +0000
ROA not before:           Tue 09 Jul 2024 01:00:25 +0000
ROA not after:            Mon 07 Oct 2024 01:00:25 +0000
asID:                     399629
IP address blocks:        64.52.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:79:b9:fa:00:04:80:e4:8c:c3:68:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul  9 01:00:25 2024 GMT
            Not After : Oct  7 01:00:25 2024 GMT
        Subject: CN=87903a4a-5449-43af-9271-593e3bb892d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:d2:b0:69:57:92:db:b1:cf:df:73:ee:38:
                    16:5e:c4:57:96:15:03:49:03:e3:24:3b:bd:9b:3f:
                    f9:44:8d:70:1c:68:db:9e:15:e2:11:d1:9f:63:d5:
                    15:0f:0a:bc:c2:19:a0:5f:43:75:fa:03:b3:27:ea:
                    ea:3e:a2:6b:80:fd:3f:6d:53:0d:62:85:76:76:eb:
                    9c:a6:ad:13:cc:8e:58:79:a3:14:c0:af:d4:9a:56:
                    86:51:98:55:7d:50:5d:e1:59:fa:4e:41:96:ed:e6:
                    d5:b0:eb:8a:f8:ca:41:5d:2d:53:22:7b:17:5c:d9:
                    01:63:69:29:e2:49:a4:3f:97:46:71:42:95:0e:87:
                    5c:d2:16:84:47:7a:58:fc:a4:dd:93:b9:51:6a:0c:
                    cf:b7:52:0a:1f:65:ec:59:77:32:99:77:3a:fc:69:
                    e6:60:56:e5:2a:cd:ff:5b:92:1d:ba:ff:25:ac:b7:
                    5d:ec:41:5c:0a:ca:5f:77:04:41:63:ff:e7:2a:10:
                    00:75:19:34:65:a4:b7:51:0e:7a:6c:b7:4e:7f:5c:
                    2f:35:eb:be:81:31:49:8e:4d:fc:2d:51:82:dc:6a:
                    72:09:72:1e:aa:ca:44:d1:38:9c:11:34:a8:90:8f:
                    a8:31:86:8a:2a:f9:a0:1c:bb:19:3e:75:47:d1:28:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DC:D8:9A:00:9A:6F:F0:30:C2:FB:3A:01:92:1A:21:23:D5:4F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/39180b00-aeca-33d4-9a03-d7d925444ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:5f:00:fd:76:fc:4c:16:1b:b8:78:52:de:0c:5e:39:da:
         ba:dc:18:ed:b5:da:5f:0c:89:82:5a:94:be:6c:65:54:5e:d8:
         70:48:1d:53:f1:bd:85:f1:11:7c:5f:0b:82:ce:3c:92:04:37:
         66:8a:b4:d1:d0:c5:b3:f5:64:39:7f:21:fb:6a:ab:73:4e:32:
         f7:f4:2d:4c:85:f7:a9:7d:07:d4:f2:44:51:8e:bd:5f:03:3e:
         17:e7:8c:d8:4f:25:56:fe:34:a4:08:b3:23:fc:57:07:52:cf:
         f8:e1:73:ce:ae:f1:38:db:81:71:03:76:ed:47:25:9e:27:9f:
         1c:9b:f0:d8:dd:32:2d:92:d9:ec:2f:30:51:8c:f2:14:c5:8e:
         c3:e6:71:41:94:d1:cd:1e:16:f5:32:5f:eb:eb:6f:0f:9f:23:
         e4:6d:f0:a0:98:10:b0:a8:9d:ae:3b:58:0d:18:40:da:99:67:
         2b:11:38:38:81:fc:6a:14:d4:4c:d9:1e:14:a2:83:4f:48:51:
         f1:f7:df:9a:93:90:79:44:64:0b:94:b0:a7:be:4d:eb:d6:69:
         9f:f8:af:84:e8:02:0d:43:c8:ec:20:6f:87:1c:84:ff:61:d2:
         43:75:fc:c1:4d:d5:07:a5:e9:13:b7:ad:35:92:03:e2:cf:5f:
         85:39:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 05:33:41 2024 by rpki-client on console-fra.rpki-client.org