Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa
File:                     f12b80ea-acd8-3ac7-8605-38958184a82f.roa (raw, json)
Hash identifier:          5DA870yO9W5u+xtF9fyOPcuBfBpBuflrK4po7GC/2l4=
Subject key identifier:   81:BF:22:45:15:94:2C:F3:26:7E:DE:69:5C:A9:89:4B:CB:A3:83:66
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB6989E369BF0A1CB7B5040
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     11404
IP address blocks:        64.187.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:98:9e:36:9b:f0:a1:cb:7b:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=8a5381bc-7954-462d-bd33-62e3b225058b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:da:aa:84:48:c8:4b:f3:10:f6:a8:9d:db:
                    f3:c5:c6:5c:73:66:e8:c8:19:04:0b:78:5d:40:13:
                    a4:26:47:84:46:a8:8a:64:79:28:92:92:5e:7d:73:
                    56:71:8d:8e:1e:ab:2f:6e:74:52:a8:b2:a2:ed:6b:
                    21:f4:6a:a1:33:3b:b8:fd:fb:49:95:7c:58:f7:ec:
                    21:6f:f1:14:07:dc:db:dd:84:7d:6c:fa:cf:a1:c9:
                    3c:35:c7:76:91:2e:0d:69:85:14:ce:34:df:b2:f5:
                    ac:19:41:86:0d:36:54:28:c4:b7:bb:01:92:54:f9:
                    06:71:95:bf:a9:0d:94:83:c7:0a:01:7b:3c:95:62:
                    cf:a0:77:85:89:3c:07:56:70:33:09:c0:1f:f3:51:
                    12:c1:9e:4a:57:8d:e2:86:52:ee:be:9e:6c:64:58:
                    7e:aa:4b:03:3b:f8:b5:c8:9a:5a:e4:6d:e0:ba:1b:
                    33:a6:62:96:f7:d1:48:c5:3a:0a:30:51:b7:cf:3e:
                    3d:b7:e7:6c:e8:47:85:b6:1a:48:16:26:64:f0:49:
                    7b:5c:ba:db:eb:63:eb:00:34:43:88:8f:07:a2:b2:
                    83:16:f1:4d:cb:34:b7:42:2e:70:47:f0:c8:46:23:
                    0e:c3:33:ea:78:c5:35:97:c9:f8:6c:38:7b:74:74:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BF:22:45:15:94:2C:F3:26:7E:DE:69:5C:A9:89:4B:CB:A3:83:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f12b80ea-acd8-3ac7-8605-38958184a82f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:74:fd:ce:a2:89:19:86:32:85:a4:af:20:96:44:f7:d1:38:
         6d:6f:19:85:5d:04:98:7d:85:bd:2f:a8:05:81:41:49:77:c3:
         8f:5a:c1:c1:e0:3d:13:cb:51:7c:0e:16:d7:73:4b:68:33:dc:
         dc:e7:09:8a:12:50:7f:90:81:2b:37:55:14:fa:b5:38:0c:34:
         ba:bc:7b:ab:20:eb:a6:e3:3c:00:41:a7:72:2a:2a:e5:a1:97:
         de:e3:8d:cd:ea:bf:fa:2b:60:21:d0:c1:9c:b8:91:e5:c6:2a:
         7a:b3:2a:5b:1c:ff:a9:a1:b5:75:0e:14:0b:3a:3c:74:32:e7:
         21:83:65:3f:dd:89:3f:cb:5e:f2:1c:cd:30:bd:f4:b3:ac:43:
         56:fd:28:89:75:49:bf:b2:52:db:96:7a:27:2d:57:75:91:6b:
         19:5f:69:e6:3a:f3:55:2e:d3:ec:81:d9:5f:df:00:24:7e:1b:
         ec:de:fb:45:7e:05:8c:b4:46:c0:aa:36:5f:f2:14:e3:50:85:
         b3:6f:89:16:d6:56:55:64:7a:e0:3d:a7:58:af:2e:86:03:af:
         cb:0d:22:b1:f1:55:1b:ab:46:07:2a:fc:25:22:a3:d7:5c:b7:
         25:0c:35:8f:ed:d6:44:df:29:77:7b:72:1d:5d:e1:a0:8c:87:
         25:10:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org