Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa
File:                     d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa (raw, json)
Hash identifier:          LpP4gYMOH/iLDNhld8xHeKkQMgD63xTj+DqZdqZ2M+Y=
Subject key identifier:   C1:A1:53:48:1E:52:70:B9:30:BC:AB:05:A3:67:6F:4A:1F:29:C1:A6
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F43285847B531485F59E3A96298108CC0
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     395512
IP address blocks:        64.40.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:48:5f:59:e3:a9:62:98:10:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=92a268b6-81fb-4fba-bb14-76b0a093e249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:3e:ed:11:92:be:9d:39:16:17:c6:66:fb:
                    17:4c:9c:7e:d9:b8:f1:96:c9:5e:01:9c:2e:80:13:
                    41:20:a0:17:92:13:fb:bf:49:33:a3:71:0a:9e:9f:
                    66:6b:ab:a7:60:f8:bc:0c:4b:c1:ed:80:d3:e0:ff:
                    a3:87:c3:44:ed:70:e4:a3:4c:c8:67:04:15:82:39:
                    f4:56:fd:32:64:89:bd:de:ad:06:6c:83:7e:c8:1a:
                    8c:5a:7b:a9:c6:29:b6:31:82:cf:e8:df:a2:6b:bd:
                    db:e1:44:bc:10:bf:9d:90:5f:49:3b:eb:d4:d5:b3:
                    0d:80:8d:fb:94:c7:73:c6:13:b8:65:a4:9d:41:c9:
                    90:ac:77:1f:85:0f:41:7b:cf:ee:7e:b3:69:ae:df:
                    9b:cf:bb:99:4e:14:08:ac:b1:53:dc:44:9a:c5:f2:
                    f5:41:a8:f9:c8:c5:f6:b8:2b:1c:41:1e:d8:69:d5:
                    7a:b5:3a:f8:b4:4a:f4:69:11:4a:71:81:06:ee:3b:
                    de:53:5a:4b:fc:16:61:9a:f5:be:7e:6e:fe:39:8a:
                    57:1a:28:d8:f7:05:bc:4e:0d:1e:7e:a5:f5:6b:1c:
                    92:9e:c6:54:18:cb:29:2c:f5:01:16:ea:f4:14:50:
                    76:f5:0c:64:76:99:f0:a5:87:a7:59:25:16:08:d1:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A1:53:48:1E:52:70:B9:30:BC:AB:05:A3:67:6F:4A:1F:29:C1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:83:94:b7:69:77:ca:0a:c5:17:cf:72:3d:36:c8:f0:94:
         8a:d0:5a:35:52:12:27:69:bf:38:da:98:b0:e0:8a:9c:6d:bf:
         c6:c4:a4:58:69:a3:90:4d:92:5e:86:c6:02:c4:e5:7a:16:84:
         e5:d0:ce:ac:46:f1:93:38:3b:8f:60:01:8b:ca:fc:3c:5a:89:
         3b:58:89:c1:f0:fc:48:3b:14:ac:6c:49:b5:76:c4:66:a0:5c:
         2b:79:7f:21:54:61:8a:13:e9:ae:0b:31:76:1e:d7:b1:c5:47:
         11:12:ef:84:38:34:37:aa:15:26:79:e6:ba:18:6f:82:03:52:
         45:07:45:dc:ef:ba:3e:5f:2f:d8:16:35:ca:bb:8a:71:eb:ce:
         b1:4d:a1:45:4d:dd:86:7b:de:41:a0:75:bf:e8:4c:31:77:af:
         35:f8:00:67:67:fc:25:d0:a7:55:cb:27:1e:20:8f:51:8f:0e:
         b3:81:aa:57:39:70:bb:7e:8d:1c:76:d3:e8:97:f7:b5:b9:ff:
         c7:0d:c0:81:e6:7e:6b:ee:a0:3b:ea:88:40:37:7f:85:f8:0e:
         e6:83:40:f5:c0:00:a6:d3:15:43:60:17:c0:24:42:fb:f7:05:
         8f:44:7e:89:f4:ce:4d:4f:ab:6c:86:c3:5e:fb:5f:7e:fc:37:
         7c:77:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org