Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa
File:                     eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa (raw, json)
Hash identifier:          +LbL+mzDsggICCYjJLW1uvdFEnWG9zTmPR9JLav84kI=
Subject key identifier:   69:B8:4A:BE:96:FC:3F:F9:FA:48:54:35:39:90:C9:A3:D1:7E:28:E6
Certificate issuer:       /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Certificate serial:       010D0C9F43285847B7327460FF4E4964A49EC280
Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa
Signing time:             Wed 30 Oct 2024 18:14:32 +0000
ROA not before:           Wed 30 Oct 2024 18:14:32 +0000
ROA not after:            Tue 28 Jan 2025 19:14:32 +0000
asID:                     53855
IP address blocks:        185.224.64.0/23 maxlen: 24
                          2602:814:a000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:32:74:60:ff:4e:49:64:a4:9e:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
        Validity
            Not Before: Oct 30 18:14:32 2024 GMT
            Not After : Jan 28 19:14:32 2025 GMT
        Subject: CN=d64bab15-0265-4b45-90b6-abf51d847444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:ff:e4:59:60:cc:43:28:b5:10:72:1f:c1:
                    1d:fe:a5:ba:65:2c:19:fa:d8:01:c1:0e:9d:bf:f2:
                    ed:1d:cb:2f:eb:dc:21:56:2e:a7:4b:57:31:db:04:
                    a4:a6:cf:b5:14:cb:a3:8e:e1:8f:8d:27:e2:fd:8d:
                    af:34:f0:d5:98:e2:51:df:cc:11:02:4c:58:99:9f:
                    4b:fd:69:67:75:be:8d:fb:f4:38:22:47:5c:f7:ce:
                    e5:db:e6:4b:60:2c:af:fb:07:b6:47:0f:f9:0a:c8:
                    1d:7d:6a:0e:88:7c:0f:8b:2f:c0:f3:e9:a0:49:6f:
                    93:57:24:76:2e:07:a8:d0:61:15:f3:ee:f4:90:65:
                    ea:9c:94:6c:3c:18:43:3b:75:7c:34:cc:10:28:54:
                    8c:b2:8b:4b:17:50:7c:d2:2c:2f:2d:1c:d9:ec:fe:
                    6d:3d:3b:f8:22:58:93:35:a3:c1:22:76:cb:5b:3c:
                    33:41:6b:e5:06:b5:61:4e:07:41:a8:a3:8d:ed:eb:
                    1e:c5:97:7f:66:e1:a8:a0:20:72:c1:16:0b:06:de:
                    85:fb:97:b5:b4:68:9c:7f:b3:b3:fb:dd:27:e1:ba:
                    87:bc:dd:91:a9:af:7b:ae:d9:71:14:59:40:0e:c3:
                    a1:14:05:47:4a:47:a2:56:66:9d:aa:de:9b:fd:bc:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:4A:BE:96:FC:3F:F9:FA:48:54:35:39:90:C9:A3:D1:7E:28:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl

            X509v3 Authority Key Identifier:
                keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.64.0/23
                IPv6:
                  2602:814:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:90:af:fd:e4:82:8d:dc:6b:7b:d9:50:17:6d:78:a7:5b:27:
         57:fe:56:e3:57:3a:c3:a3:9f:93:09:c4:10:12:18:75:01:54:
         20:b8:84:63:28:a7:40:11:8d:25:55:ae:64:84:93:97:74:32:
         f6:15:28:b8:b3:0f:2d:59:66:f5:04:bc:2d:54:51:00:c2:09:
         b6:2e:f3:70:ed:69:9e:89:49:24:77:54:23:a8:95:8d:ab:f3:
         39:b3:f2:aa:d3:1a:eb:a8:0d:df:70:6a:b3:9a:38:e3:90:92:
         17:65:0e:8c:a4:39:42:44:5b:57:7d:a6:86:24:7e:88:96:63:
         2e:26:8c:56:25:30:be:c0:79:56:4b:d4:cc:bf:b0:4c:79:e6:
         51:b8:2a:30:50:b3:29:9f:bf:a6:c0:a4:f6:61:e0:a3:fc:fb:
         7e:11:ac:f1:60:2b:6f:34:47:61:2e:53:d9:aa:eb:9d:46:7e:
         5d:f8:ca:67:2f:6e:55:3a:cb:7f:7d:bf:cb:de:54:2c:85:4e:
         7e:97:af:54:b9:8e:8f:65:f7:20:bd:25:0d:66:fb:7e:6c:ac:
         79:5e:91:f9:c0:ea:25:82:c3:a9:b1:e0:7b:a1:c5:a1:77:e4:
         01:3c:a9:cf:0f:9c:06:7a:23:64:0b:e1:ce:70:a4:d5:d7:08:
         b6:5c:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:47 2024 by rpki-client on console-fra.rpki-client.org