Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa
File:                     9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa (raw, json)
Hash identifier:          j0fpbEmhY/u0ZBRecdNePbMNouqqOhlubDtFcYS2BZE=
Subject key identifier:   BC:5F:FC:F2:5F:64:31:10:7F:5D:D4:B0:87:36:4B:C7:A3:28:D4:F5
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584774FB9949BD2C0E575F57DB40
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     31898
IP address blocks:        64.39.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:99:49:bd:2c:0e:57:5f:57:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=d999aa7f-0335-47de-a9e8-e6b23ee6d732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:87:82:21:ab:ab:dd:67:b9:71:41:8c:18:
                    16:bf:8d:72:a6:8f:d9:8b:72:19:33:d2:94:a6:e5:
                    e7:f7:19:59:69:0f:36:2c:d3:26:9b:6b:13:c4:f9:
                    79:7e:30:bf:0f:c4:dc:65:82:b3:a4:00:e9:cd:c1:
                    d3:04:84:eb:58:0f:04:f7:12:bc:c2:70:6b:85:5b:
                    a2:94:f4:d6:7c:b6:02:fb:b2:fa:a9:f4:ab:dc:a4:
                    d8:03:ef:17:c8:15:d1:63:24:15:2d:52:36:33:d4:
                    02:3b:2e:90:53:b3:80:7f:22:0e:d2:27:75:18:1a:
                    00:69:d9:21:c3:b7:a4:88:50:2b:3c:48:b7:8d:5d:
                    9b:3a:aa:76:75:b5:2c:1a:bc:eb:47:24:38:a0:c6:
                    91:5f:3e:4c:50:2b:97:82:c9:16:5d:73:c1:2d:c1:
                    87:d2:9a:e4:de:55:5c:7e:2d:e6:8b:ae:ce:32:d4:
                    ce:cf:31:d6:12:6e:6a:ea:cf:48:91:a4:8e:91:54:
                    72:4f:ca:63:5e:eb:e3:2c:ef:e3:51:f2:f4:36:3b:
                    da:23:b0:ed:73:97:27:1f:15:2f:45:99:2f:a7:5b:
                    9c:44:fd:12:13:fb:83:45:cf:2b:cf:0b:5d:21:f1:
                    79:87:5a:56:73:a8:e5:d7:63:f0:58:ef:58:18:48:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5F:FC:F2:5F:64:31:10:7F:5D:D4:B0:87:36:4B:C7:A3:28:D4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9dd3dbe4-e875-37c0-9d7e-c990301757b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:88:f3:e8:73:44:cd:20:c9:88:a1:bd:29:98:74:16:57:13:
         29:f0:80:c7:01:97:b3:f5:7b:60:7b:7c:03:f0:61:ed:b8:22:
         00:9a:d8:44:9c:90:f6:69:37:95:15:5d:bc:e5:fd:85:95:1b:
         38:1e:0c:63:e0:8b:05:30:a8:39:49:85:c6:76:7c:09:84:9a:
         48:f8:79:8b:2d:94:7c:03:9c:ac:d5:42:48:43:57:f4:47:bd:
         ea:6f:ec:2b:35:f9:0b:9d:96:06:a7:f0:48:81:c2:9a:86:c7:
         07:2c:db:99:a7:b1:90:57:04:70:6e:7e:11:7b:c8:59:f6:80:
         b3:e6:46:35:1a:e9:dc:62:af:a0:04:75:fe:3f:e7:55:7c:25:
         db:7a:be:6d:3d:72:04:66:5e:2e:5d:c8:e4:dd:a5:e4:61:fd:
         38:1a:72:85:e6:f6:5d:e0:1d:1c:19:cc:63:f3:18:ac:71:ec:
         b7:a4:9a:b0:17:49:8f:73:9b:8c:6a:05:1e:ad:25:56:5e:df:
         2b:8b:12:60:b6:2d:ed:3a:fe:76:66:9a:2c:97:ae:dd:37:03:
         a9:7b:af:1d:5b:c1:d7:d9:10:75:1e:ef:e4:62:75:00:eb:9d:
         da:47:38:a1:a5:32:92:9c:9d:84:ce:78:1b:8b:b4:74:97:f7:
         d6:b9:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org