Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa
File:                     4af76320-999a-3cd7-a897-27c3287ae51b.roa (raw, json)
Hash identifier:          ieyUr4EjVJbsYups/0Nj804kYu/SusYNir3OPNTdsKk=
Subject key identifier:   A5:BA:4A:F3:0D:D7:D2:0A:73:2B:B4:50:A5:24:5C:F7:F2:92:F2:AE
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285847A8A14C48F42D0E9BCA15BF80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     32181
IP address blocks:        64.224.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:4c:48:f4:2d:0e:9b:ca:15:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=4dba5a09-08b5-4313-8cd2-63f93b95d610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:8c:3b:6e:ea:16:fd:24:32:cb:5b:c9:4d:
                    07:59:39:40:f0:d8:49:f8:99:f5:3a:d8:4c:88:d1:
                    a0:49:67:33:c6:77:72:92:f6:f4:f9:98:1b:bc:df:
                    02:af:1a:0d:9c:70:dc:23:03:f4:3c:31:f8:56:eb:
                    cf:4e:02:53:c7:ea:c6:bb:c7:49:ec:9e:c6:b6:7a:
                    82:ea:05:86:63:70:3a:02:d9:08:1e:a9:a9:6a:de:
                    76:93:18:e6:21:e1:3f:47:a9:8b:a5:ad:98:45:c6:
                    ed:ae:8a:0d:a2:e4:2b:6d:33:cc:66:49:db:3f:0e:
                    2d:bf:a8:b7:08:9f:0d:89:83:29:74:d6:ff:7b:0c:
                    0f:63:bf:33:6b:75:b4:10:c4:07:b0:65:6a:0b:02:
                    86:f4:cd:b3:32:1e:c1:0d:b8:c7:f1:aa:e6:41:8f:
                    80:75:d4:35:53:71:a0:3e:26:dd:9b:ef:97:93:b9:
                    af:f3:0a:1f:e2:7b:03:d9:ec:39:43:aa:ca:b6:c1:
                    14:03:d2:ab:be:cb:7a:bf:28:12:fa:e2:c2:f0:99:
                    e1:36:d4:d9:39:62:cb:74:de:75:8a:46:43:3b:90:
                    6a:40:05:99:fa:18:f7:f5:75:b1:e3:9d:cb:51:4e:
                    39:4d:19:30:d9:9e:31:27:77:8a:85:26:34:38:93:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:4A:F3:0D:D7:D2:0A:73:2B:B4:50:A5:24:5C:F7:F2:92:F2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:f2:d7:73:2c:a2:41:01:8f:1e:15:b6:5e:08:b0:36:35:
         a6:87:14:4d:95:e4:b0:d3:0a:e7:98:76:d9:70:79:86:94:21:
         d0:5f:a3:4b:80:87:ce:69:1b:4d:e4:1a:41:6a:97:f8:9d:b0:
         97:f6:14:e0:ed:2e:aa:f3:ac:97:ff:21:c5:45:1e:b4:51:56:
         b2:98:d5:77:73:d6:ca:24:76:bd:5c:0f:25:c7:91:37:74:c7:
         78:08:2f:e2:85:1b:e5:3c:93:bd:d4:38:9c:d3:c9:a3:d4:03:
         cf:60:0e:40:31:ad:26:4e:80:10:04:56:eb:5c:04:8e:54:2f:
         f7:61:8f:90:09:a8:a0:7a:5b:72:32:c8:3f:e1:60:00:f6:63:
         bb:d1:e0:83:f3:ed:70:77:fa:b3:3c:ed:37:d8:44:72:75:0d:
         f6:83:10:09:61:e1:27:68:87:c4:a0:b9:21:8f:7f:2d:01:29:
         ec:52:4c:ad:4f:c7:e9:e2:b0:47:d1:97:92:40:44:d0:3f:c8:
         f4:f8:fa:50:57:18:2a:68:42:ee:d8:61:01:02:65:e1:e8:15:
         45:3b:3d:62:b4:0e:ad:e1:e9:bc:1c:a5:a5:0d:5a:7f:d3:41:
         4a:8d:c1:88:9c:16:d5:4f:16:20:00:67:b5:6b:6f:99:33:89:
         95:30:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:48 2024 by rpki-client on console-ams.rpki-client.org