Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa
File:                     5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa (raw, json)
Hash identifier:          Yhtt1gVxaNnDjD0buxNZ6MKT91DIpnmFTivT0MVn2lw=
Subject key identifier:   09:37:2A:C2:11:F3:69:09:63:C1:4E:B9:47:AA:AA:6D:09:E1:F0:8C
Certificate issuer:       /CN=b8a0e292-3e8f-447b-81c6-cedef4747341
Certificate serial:       010D0C9F4328584762D65A4BF7A0FFB41AFF36C0
Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     397058
IP address blocks:        64.202.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5a:4b:f7:a0:ff:b4:1a:ff:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=c63f126e-0114-42b5-9b63-af30bf4b09c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:7b:db:49:8e:c9:64:27:1b:cd:c8:84:3b:
                    41:3e:5a:42:58:9b:af:4b:a0:a0:11:95:f4:ba:f8:
                    51:1e:14:87:36:6a:d6:f3:3d:79:46:b4:77:1d:e0:
                    8c:c6:37:66:dd:16:55:7a:59:0f:1f:18:cf:42:1c:
                    22:fe:89:9a:70:f7:bb:84:35:c6:95:fa:e9:a0:ce:
                    5e:ed:b3:3e:0b:38:1c:40:c7:b6:64:6b:e5:94:bc:
                    5b:30:b1:12:d7:6f:77:3b:81:83:49:34:03:30:78:
                    0a:92:09:28:2f:e3:cd:b2:d2:27:32:4e:9d:bf:d5:
                    a2:df:2f:14:68:93:6d:74:11:5d:11:ab:7d:b2:77:
                    8a:93:9f:40:9d:4a:91:3a:f9:c1:a8:42:f3:3a:4c:
                    8b:7f:f4:18:08:cc:3c:b4:1c:a3:9a:7e:8d:94:74:
                    54:6c:3f:43:31:c2:8c:a4:e3:9e:7a:1a:47:c8:bf:
                    6d:b6:db:e8:f5:11:9c:9b:e8:3b:44:bd:cc:02:c5:
                    c8:76:b9:f8:43:bc:6d:43:8c:ff:8a:46:3a:7c:f9:
                    a7:17:41:b4:5f:b7:be:8c:5d:a7:2b:8c:72:ef:be:
                    1b:e3:87:39:5b:39:c5:0c:ae:66:6b:a8:64:c9:16:
                    9d:5d:18:55:b9:93:7e:37:48:7d:52:27:4e:fc:68:
                    3d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:37:2A:C2:11:F3:69:09:63:C1:4E:B9:47:AA:AA:6D:09:E1:F0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl

            X509v3 Authority Key Identifier:
                keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:d2:f3:9f:07:ae:93:5c:e8:e3:7f:b7:5c:54:e7:b0:6e:
         b0:de:68:5c:9a:a1:9e:a4:d1:46:ab:3d:f8:ee:aa:6e:81:df:
         85:76:53:d4:b1:af:b8:0f:ee:df:81:d9:7c:06:db:4d:43:c7:
         fe:cd:af:32:0f:18:e7:26:a5:c1:ec:2f:57:b5:02:1e:a6:31:
         6a:57:1c:b4:2e:6c:37:ea:e3:bb:82:df:72:62:fb:ff:c9:2e:
         a7:2c:04:ce:a8:a9:cc:3d:e7:3c:e3:45:2f:0d:f0:d3:17:33:
         d3:34:fb:3e:ec:f2:d2:49:f4:04:1f:1f:ad:cf:26:73:e1:2e:
         85:07:11:2a:79:8f:42:78:13:7f:89:03:e2:56:db:bd:63:a6:
         2f:f5:d4:f1:54:5e:06:24:b5:48:37:3c:be:ca:68:24:0e:e1:
         57:00:3b:3b:db:5b:6f:2b:23:9c:79:56:81:03:db:47:c2:65:
         2b:f5:07:33:21:bd:63:53:7e:f0:c5:53:96:54:a9:ef:ba:32:
         c4:b8:b4:97:6f:f7:88:c7:fc:07:70:8c:c0:bf:f8:81:a5:5d:
         ac:1b:a5:92:db:17:6d:fd:13:a9:d7:68:14:9e:33:11:29:a9:
         e6:ad:3b:e4:6c:1f:e4:aa:64:e7:26:f4:92:b5:63:6d:70:ce:
         c4:d7:87:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:11 2024 by rpki-client on console-ams.rpki-client.org