Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
File:                     0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa (raw, json)
Hash identifier:          fxOqALiMSkdmMH8B7G87ezpCtpse9dUpZNrBrNA7sCw=
Subject key identifier:   98:C3:9E:FB:37:88:86:5E:B4:A3:0C:B3:88:3C:17:75:FB:99:C8:BA
Certificate issuer:       /CN=ee451155-06f0-4e35-9b53-96104a44c5e1
Certificate serial:       010D0C9F432858474C80B72290091155B1C11610
Authority key identifier: 28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     55002
IP address blocks:        64.112.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:b7:22:90:09:11:55:b1:c1:16:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee451155-06f0-4e35-9b53-96104a44c5e1
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=2883c33e-124f-4b4b-8a87-f6630b12b426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:a0:f2:d9:c0:81:c3:77:7a:f0:f1:0e:4d:
                    e5:69:ac:e9:a0:79:49:b2:84:c7:3a:6b:4d:9a:f8:
                    22:cc:21:4e:b5:45:ab:be:4a:59:66:33:07:aa:28:
                    c3:63:78:e1:82:7e:d0:08:37:f2:33:7d:7c:a0:83:
                    3e:5c:88:03:cd:61:51:51:79:01:df:23:d5:a4:b5:
                    61:32:3e:38:8d:9e:44:41:86:11:b9:a4:7c:75:4f:
                    88:48:2d:53:a5:91:0a:5b:ff:e9:07:96:a2:8a:32:
                    c8:ad:cd:cf:31:c7:9b:9b:59:87:b8:4b:8a:6e:83:
                    d4:47:6c:d9:72:91:51:09:31:99:c9:12:5f:35:5f:
                    7e:1c:ea:9d:bc:97:1e:17:cb:91:68:0f:1c:1f:25:
                    af:00:97:d2:c9:20:89:ca:6a:7e:56:88:af:c2:5b:
                    d6:21:e9:1d:bb:b8:7e:75:c8:27:90:c7:db:d1:7e:
                    02:32:17:3c:cb:9d:91:76:be:b7:2d:ab:f3:fe:35:
                    85:20:fa:de:f5:cc:63:81:10:f6:ab:60:75:7c:4a:
                    7e:19:28:34:1f:49:00:d4:d9:ea:6c:98:ac:a9:c2:
                    c6:66:14:12:e3:c4:f5:bf:b5:87:76:45:57:32:9f:
                    04:16:80:95:e4:36:2a:5d:cb:d5:7d:8b:52:14:0d:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C3:9E:FB:37:88:86:5E:B4:A3:0C:B3:88:3C:17:75:FB:99:C8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl

            X509v3 Authority Key Identifier:
                keyid:28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:af:1a:fb:51:64:53:89:d0:b6:a1:84:94:28:ab:b4:aa:7a:
         a0:8c:ef:a6:54:5f:39:63:16:68:d4:e4:5a:34:5b:18:2b:71:
         4d:f9:df:85:a3:93:f9:24:30:61:69:b2:19:c7:a5:6e:76:dd:
         3a:45:29:bb:9b:2b:a4:f3:b6:2c:6f:92:b0:6b:52:05:6a:88:
         48:07:d2:cc:c4:b6:2b:59:d0:98:5e:4b:35:24:b8:06:4b:b9:
         19:7f:a7:d5:1f:5f:49:9f:be:62:01:e5:ae:ae:63:82:ec:af:
         df:82:fd:c1:a4:3d:e3:4c:6f:5f:28:fb:8d:ca:dd:4c:46:9e:
         53:07:08:46:3c:ac:58:a2:77:02:10:8b:65:c9:07:6c:69:8e:
         64:4d:e8:d3:e9:ca:ce:69:b9:c3:47:bf:fb:77:41:38:94:ba:
         a4:28:6a:e8:29:4e:f8:ec:f4:9a:dd:a1:3e:2c:0f:42:50:d7:
         df:83:ba:c8:9e:30:3c:55:f0:03:02:24:00:ba:9f:2e:47:13:
         04:d3:d6:b2:e1:d5:82:b4:56:53:4c:66:51:f4:e2:f9:bd:ac:
         9b:15:74:0a:1f:cf:81:1f:4b:4d:97:eb:50:b1:4a:18:32:ef:
         f1:a1:36:f9:23:4f:3c:9b:cd:f7:2f:7a:a6:72:03:9f:a9:02:
         a3:54:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:08 2024 by rpki-client on console-ams.rpki-client.org