Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa
File:                     5770cdd8-1ebd-3582-874c-5afa608b6756.roa (raw, json)
Hash identifier:          ZPmT6HS9gjUnuvdOGcUlbSywgDLsA0mXBjz5uHCwk+s=
Subject key identifier:   5D:B6:B1:6D:97:5B:10:4B:56:C5:57:A2:17:31:8C:03:4B:F6:5E:62
Certificate issuer:       /CN=44b5f84d-3917-4ce9-99a1-9bded53bb862
Certificate serial:       010D0C9F43285847362B516671069AAC43BD20C0
Authority key identifier: F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     398841
IP address blocks:        64.190.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:51:66:71:06:9a:ac:43:bd:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b5f84d-3917-4ce9-99a1-9bded53bb862
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=16a7302c-a127-48ef-8256-aae2f40518b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:ae:f4:20:dd:dd:8b:36:07:29:ca:e5:61:
                    29:e5:21:c6:58:6f:96:78:d6:a4:a2:d0:82:c3:8e:
                    b0:65:92:75:a2:56:19:b8:f9:78:32:fd:f3:62:9f:
                    06:9d:d5:a3:d3:fd:ea:ff:55:6f:41:eb:8d:bc:4b:
                    4d:ec:53:48:66:94:eb:43:40:31:c0:4d:ee:a1:44:
                    0a:3c:f4:39:52:f3:e5:52:b2:95:c0:de:10:a8:80:
                    24:28:62:ed:c6:18:1c:fd:d7:7e:eb:48:6a:4b:8d:
                    d3:c6:4f:4a:3a:70:7c:c9:19:fe:9f:4f:7e:be:d7:
                    79:0c:83:3e:19:be:75:0a:ff:b2:42:8b:a1:3d:a2:
                    0f:4c:66:fe:96:a4:2a:17:bb:a8:b3:cd:bf:38:6f:
                    81:68:19:66:ce:36:3e:c1:6f:9d:bc:62:8b:3b:11:
                    1f:2c:a3:41:b3:96:5f:fa:1c:57:53:63:a4:0a:20:
                    d3:d2:86:66:26:c3:ed:d2:ea:ed:e4:88:2c:d9:2e:
                    c7:a0:a1:9a:5c:84:75:1f:4d:2f:5c:02:c3:64:3d:
                    4e:1a:40:43:99:7e:df:24:6b:42:c7:3c:3e:6e:82:
                    a4:2a:3d:86:6c:ed:e2:36:38:85:64:64:2f:84:06:
                    de:5c:6d:b7:d1:b0:bf:31:78:e2:cd:a1:6f:7f:34:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:B1:6D:97:5B:10:4B:56:C5:57:A2:17:31:8C:03:4B:F6:5E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.crl

            X509v3 Authority Key Identifier:
                keyid:F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:b5:65:de:6b:6a:40:a0:73:98:b0:34:fa:e3:98:77:51:
         68:64:57:d7:e6:25:65:87:da:19:bd:a9:7d:da:55:bc:f3:39:
         56:8b:ff:13:da:67:ac:1a:34:82:de:7d:46:70:4a:7c:c4:8d:
         db:7c:3e:18:88:9d:0a:40:5c:13:c2:00:0d:0f:7f:5a:16:90:
         44:97:7c:e8:78:ec:31:7d:bd:4f:bb:b0:2e:01:73:9c:05:88:
         0e:68:06:90:e2:cf:ad:0d:ee:70:77:31:4b:9b:8d:44:8d:cb:
         a6:d1:a7:7e:df:13:a4:4a:98:48:58:68:25:86:29:fb:a3:44:
         05:91:12:58:fc:99:ba:ef:3b:ec:0f:6b:db:2f:b9:34:8b:ea:
         3f:b6:5c:34:e8:af:ff:6d:2a:bb:40:e8:fa:25:c9:f6:a8:de:
         b7:70:a8:ab:64:14:fb:ee:69:23:6b:7c:4d:a4:01:1b:27:d0:
         63:42:2d:d7:23:80:73:8a:eb:36:32:b6:c9:10:3c:96:68:ba:
         9a:87:7c:b7:f7:98:eb:fe:98:93:2c:c9:ff:58:5b:20:f6:12:
         26:76:db:67:7e:22:62:41:23:cc:99:c2:aa:0f:43:a8:bd:45:
         f1:59:b9:13:04:c5:ca:57:1a:5b:c1:12:81:40:ad:6d:9c:22:
         f7:f5:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:56 2024 by rpki-client on console-fra.rpki-client.org