Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/704873e2-72fd-3f26-b28b-6b22f455cc56.roa
File:                     704873e2-72fd-3f26-b28b-6b22f455cc56.roa (raw, json)
Hash identifier:          xNe0ORl9++NwMhdks0LKnz0kwE25nJrPkc2u6BH3Fy0=
Subject key identifier:   A8:31:52:90:38:0B:96:70:DF:EA:CB:70:51:B9:74:4A:73:74:FF:15
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F432858479AABEA1A1888E2F04F19B500
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/704873e2-72fd-3f26-b28b-6b22f455cc56.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     7354
IP address blocks:        64.112.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ea:1a:18:88:e2:f0:4f:19:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=441f9393-637a-482b-9642-b79b31518680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:93:14:f4:73:ee:c3:d3:53:32:c7:f0:49:
                    0b:fb:0f:d3:28:a4:97:68:32:e8:a2:33:24:64:a1:
                    89:c2:89:f3:fa:fd:ec:57:51:f1:11:4e:ff:ef:4d:
                    2b:47:58:22:ba:7c:61:e8:6f:a7:97:3f:54:18:05:
                    f7:93:ed:e0:10:34:6c:1c:01:18:e0:88:9f:e5:80:
                    5c:8e:0b:2d:2a:ac:53:39:91:5a:52:00:96:81:57:
                    f7:af:5c:b8:2f:db:13:40:fa:82:de:01:be:e1:58:
                    1c:b1:b9:a2:37:0f:6a:61:e9:8f:d9:c7:c1:61:36:
                    5e:8b:41:84:f7:a1:7a:99:2f:87:c7:25:79:a2:a6:
                    6d:b1:1d:c2:5c:f6:76:c3:d7:4c:4a:c5:f5:f3:f3:
                    98:99:cb:d3:76:0e:8b:d1:3d:65:cd:58:61:e8:53:
                    66:a5:d6:77:56:53:9c:e1:3b:a5:e4:95:d5:5a:16:
                    df:98:04:db:34:9a:8f:1b:1e:de:54:4c:bc:01:5e:
                    ac:1b:af:fb:21:be:82:93:fc:71:f6:27:5e:29:ee:
                    98:5b:8f:ec:c6:d8:2f:5a:c3:73:bb:72:9d:8d:09:
                    52:f5:41:57:df:03:c7:3f:20:68:03:e4:b9:3c:a2:
                    9d:b1:a1:9e:4c:c2:a5:a1:74:80:94:6a:3c:4c:ac:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:31:52:90:38:0B:96:70:DF:EA:CB:70:51:B9:74:4A:73:74:FF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/704873e2-72fd-3f26-b28b-6b22f455cc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fd:bf:67:dc:9a:17:62:3b:93:e6:11:7e:59:26:d0:51:96:
         4a:ee:83:7c:bd:27:75:61:e8:d8:80:2a:9b:01:a9:9a:1c:bd:
         61:fe:26:78:5c:35:63:f4:ce:24:85:e3:ab:8d:8a:03:42:e9:
         d3:83:ae:a2:c9:9d:dd:a8:53:4a:6b:31:29:ea:dd:9e:8e:a5:
         72:e5:3a:e2:87:88:a5:9c:14:ff:18:7f:83:da:c1:32:13:68:
         28:bb:ad:62:5e:18:b3:5c:af:12:8b:c4:f9:f8:7f:a0:de:53:
         f2:77:50:59:6c:83:bb:bd:56:7f:91:a6:6d:46:6e:db:0d:43:
         a1:84:6c:11:5b:d6:d1:5d:ca:d9:fc:6c:e8:67:50:cb:4c:31:
         00:2e:ac:17:33:7e:3e:86:51:c4:3f:ca:ac:e4:a9:7d:bf:2c:
         b7:42:92:ed:52:b2:12:b8:5d:9a:2e:49:f0:d1:88:9b:25:cb:
         45:7b:42:a1:f8:b8:0d:c7:58:9f:be:3d:3c:df:95:f3:a3:cd:
         fc:c2:f0:71:6c:6a:de:d4:1e:95:94:5b:62:e8:2e:63:65:54:
         92:a4:c2:6b:68:ad:c6:fc:f7:cc:9f:3e:a4:d6:84:88:33:83:
         53:a2:69:5c:ba:83:f5:e9:04:96:6b:44:2f:38:35:b1:01:06:
         61:90:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org