Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa
File:                     b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa (raw, json)
Hash identifier:          nlsZrMg1wpaNKjnLEJeJr+C3CGGwoiWpkXLwkwJ4E6s=
Subject key identifier:   F0:3F:1E:38:12:02:67:18:D8:F2:F1:50:3D:BA:30:B9:24:19:A5:F5
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F432858473095FB7967578BF580A967C0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     11260
IP address blocks:        64.178.128.0/19 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fb:79:67:57:8b:f5:80:a9:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=e21514f0-e12a-47b2-b69a-bc4d50a18a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:dd:d9:b7:ce:2a:0a:5a:b4:fe:9b:44:b3:
                    89:11:d2:85:d9:44:53:df:92:3f:b9:fb:fe:5b:f2:
                    53:78:bd:62:56:5e:df:d7:7b:8c:a6:ff:b8:c2:d6:
                    06:d4:39:48:e3:a9:78:b4:45:6d:c9:0e:02:f3:3e:
                    d9:86:20:79:99:ea:95:75:c0:28:92:e1:29:d5:c6:
                    5c:cd:94:41:0c:82:b7:ee:94:91:69:e7:a3:7e:45:
                    cb:00:55:54:ed:86:d3:10:e9:39:7f:6c:5b:38:32:
                    4f:cd:3a:ab:7c:e8:38:e7:e1:2d:56:87:39:a6:65:
                    3d:0d:fc:14:7a:db:7c:69:30:88:d3:44:9e:60:fc:
                    f0:e8:a6:22:da:4d:82:3d:a2:cd:4a:89:d5:da:09:
                    68:1c:13:51:21:c0:2a:11:cc:bd:79:50:bc:59:df:
                    b2:d5:3d:d3:dd:a3:1f:2c:86:d4:62:ab:de:d7:7e:
                    27:99:59:e7:f3:aa:ec:2d:7e:d3:e9:fe:c3:93:be:
                    7d:56:6d:a6:52:4d:88:22:22:25:c9:8c:e4:ec:e7:
                    a3:7e:ff:5a:cb:25:38:3c:dc:72:73:05:27:09:56:
                    78:76:c4:42:30:ac:ed:e0:0f:3e:24:93:f6:7c:aa:
                    94:89:67:94:14:b1:f1:c5:7d:fd:b5:c6:de:08:98:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3F:1E:38:12:02:67:18:D8:F2:F1:50:3D:BA:30:B9:24:19:A5:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.178.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:e9:3a:1e:e7:09:a4:e4:0f:71:63:92:b7:36:4b:62:1b:
         4f:15:92:d4:f7:cc:1d:02:3a:a5:48:a3:d8:b9:5f:8a:42:20:
         de:b9:89:55:69:b2:ca:4e:24:de:7e:4d:ca:22:83:25:b0:fa:
         1f:c7:d5:db:c3:9f:20:5e:f5:cc:83:30:9d:7d:9c:2d:b0:d4:
         fc:41:68:82:32:d0:71:d5:7d:09:64:1a:91:01:93:27:da:08:
         d3:61:75:7f:6c:d6:ac:78:bd:77:6d:1f:b7:0d:41:c5:c4:88:
         a4:f0:da:29:54:14:cf:bb:7a:61:9c:b6:ab:fd:2f:c1:cb:93:
         7a:aa:2b:19:c3:3d:47:c4:5c:60:51:e9:49:1a:60:4e:0b:2d:
         2b:23:e1:c2:a5:2e:3a:fd:c0:a4:6a:aa:e3:a1:93:d7:71:db:
         06:46:d5:b6:04:aa:7b:a4:42:ae:16:30:59:c8:ad:34:ac:0f:
         07:b9:e1:9e:84:d3:4b:ac:7d:91:93:90:a6:d7:0c:d6:79:eb:
         31:6c:1f:7e:48:bf:b0:43:2e:b5:f6:4a:7a:d7:80:5f:15:50:
         f8:8f:22:e9:9d:e9:2f:9b:33:67:cf:68:ea:e2:3d:78:a8:de:
         d1:c1:be:30:bf:c3:c7:aa:69:7d:ca:cc:91:71:04:0f:c9:56:
         c8:7a:50:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:39 2024 by rpki-client on console-fra.rpki-client.org