Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
File:                     34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa (raw, json)
Hash identifier:          6aUk0SNy9VCzIvgbz8MnGtG5gsPCxE0l74YGmbU3tgc=
Subject key identifier:   0C:35:D7:53:A4:D3:0E:26:54:0B:22:D9:F2:CF:F7:1E:B8:C3:0C:1D
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F432858475A76301DBA21033771995080
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     20205
IP address blocks:        64.246.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:30:1d:ba:21:03:37:71:99:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=79cee67c-19af-4ea1-b60b-65bcec026f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:f6:1b:a5:69:0c:97:27:8f:09:28:51:50:
                    36:34:84:bc:f4:73:98:41:12:25:85:5e:28:4d:d4:
                    96:55:9e:09:d7:1d:b5:56:df:94:48:be:7f:f5:9f:
                    7c:64:f6:47:10:f7:09:60:a1:3a:66:e9:82:5a:b1:
                    26:d7:86:00:b9:6e:be:7b:35:e6:80:e3:79:30:5a:
                    e7:3d:be:cd:4b:f5:44:6d:ee:a8:74:fb:b9:bd:cf:
                    ad:84:77:d6:e4:4e:0c:1f:08:87:b9:c7:50:59:71:
                    12:0e:54:bf:c3:e9:eb:7c:42:00:8b:72:48:e1:2d:
                    90:b7:61:cd:79:35:9a:bb:d7:4d:75:04:35:1d:dc:
                    8c:78:1b:16:1c:87:ab:a3:21:a4:5f:03:fc:31:1d:
                    b2:a6:84:ec:91:2c:0d:57:de:7f:0f:74:fc:04:4d:
                    8f:42:2f:6e:fb:9c:44:0a:63:8c:21:42:ef:a4:d8:
                    3e:00:9e:b0:72:e7:2a:0f:f6:64:08:a7:bd:bb:98:
                    cc:39:07:37:18:f5:8f:c5:f9:3c:6c:64:1c:cf:a7:
                    1a:21:ab:8d:df:3c:92:ff:a5:b7:48:34:f1:26:6a:
                    89:fe:6b:46:80:ae:f5:4e:0d:e1:72:a5:55:79:16:
                    0b:ad:c0:36:ef:c8:a1:66:c5:d6:a8:8d:f4:b6:de:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:35:D7:53:A4:D3:0E:26:54:0B:22:D9:F2:CF:F7:1E:B8:C3:0C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:86:78:e6:a3:ca:e7:7d:fb:31:93:33:b9:03:9b:4e:20:
         5f:74:14:af:fa:b4:a9:f9:0b:e1:99:c2:da:01:09:d4:bd:aa:
         d8:91:57:17:bc:d6:f5:bc:75:1a:ca:7c:8d:57:1d:a3:f3:95:
         26:2c:c4:16:4b:c2:07:9e:7d:4a:d0:db:8c:3b:72:d7:4d:3c:
         2c:f7:c0:6f:ea:21:01:3b:1c:2f:2b:af:aa:da:37:52:ea:c1:
         c2:a5:c2:e7:c5:3d:de:c4:bc:fb:9e:24:7c:04:e0:6f:4f:28:
         e8:c6:c1:9e:af:08:c0:20:1a:ab:86:4d:94:8f:49:db:12:d7:
         f7:22:e0:ba:be:6d:8a:8d:63:4f:c5:1a:f1:9b:75:35:88:37:
         87:f8:59:e2:43:ee:3d:ff:7c:57:a1:97:87:31:55:fb:0d:56:
         94:08:47:45:1d:47:27:cc:0e:22:fc:0f:8d:a8:6a:c9:11:ff:
         fc:19:4a:a4:1f:7c:6e:ba:31:dd:a1:33:12:a0:d9:63:de:e3:
         39:fe:47:ac:c2:91:e9:99:fb:31:7f:0d:02:bb:bd:18:90:61:
         ba:fc:79:86:cd:34:74:d6:54:a7:fd:d5:53:8b:7d:2f:4b:c6:
         d1:09:83:e2:6a:7e:25:25:3f:e4:4a:ca:27:f7:ed:3b:46:b1:
         18:e1:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org