Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa
File:                     4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa (raw, json)
Hash identifier:          vWR2GJwiQvasr3CpbK7Z8IgLSecMI8KYPIQe0nwAj3Y=
Subject key identifier:   C0:37:07:CE:59:93:EF:28:C6:81:BB:65:E4:02:39:26:3C:84:E3:E1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858478CB6A199C73224E69B221C40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     397213
IP address blocks:        64.6.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:a1:99:c7:32:24:e6:9b:22:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=cfda8b68-3394-449e-976b-8f600fed83b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:51:ea:a7:6a:b1:0d:a2:8d:02:1d:48:75:6a:
                    6d:be:03:c6:41:66:c5:ed:01:1c:ca:b8:32:1c:01:
                    40:95:62:dd:72:b3:4d:3b:3b:d8:9e:b7:8f:3e:e8:
                    91:aa:52:5b:a7:4c:d4:3d:5f:00:d2:a6:f1:73:fb:
                    90:40:32:8b:76:4e:65:75:04:0e:ff:e9:c0:ce:b1:
                    e7:5c:55:29:d7:f1:7f:b1:81:06:de:c9:9c:35:4a:
                    93:31:f8:ce:fe:b3:c4:9f:ca:69:1d:33:23:f9:0a:
                    40:55:52:ed:95:75:b8:0e:b0:34:52:4c:e4:cf:99:
                    ef:17:d8:36:24:92:ab:b1:ec:1c:09:18:51:ee:e4:
                    6f:79:75:5e:c3:61:0e:c4:52:18:a2:80:aa:f1:fe:
                    69:e7:3e:31:62:f5:ad:08:e8:04:38:ab:22:7d:d4:
                    cc:dc:27:ce:51:04:89:8c:89:05:77:d7:2b:18:ca:
                    e8:1d:d8:b5:47:65:64:e0:a3:33:3e:0f:34:b0:77:
                    2b:f6:b5:96:37:60:51:c6:c8:89:16:7a:14:5b:4c:
                    ef:64:93:7e:fd:4e:1c:df:01:a9:2b:62:5b:5d:ed:
                    e6:29:cf:f3:b7:f8:c5:b7:00:31:c8:37:c8:8f:56:
                    dc:6a:12:74:38:4c:ed:ed:f0:48:65:c3:a3:f8:5f:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:07:CE:59:93:EF:28:C6:81:BB:65:E4:02:39:26:3C:84:E3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:7c:ff:14:db:cf:c5:aa:16:ce:9b:f7:6d:29:9c:44:20:
         90:fb:71:1b:68:38:19:ea:f4:19:86:ad:26:ee:a9:50:34:d9:
         51:ee:20:4a:14:86:02:c7:84:98:66:00:b9:ab:3f:b5:b7:0e:
         65:37:79:5e:74:79:70:44:b3:c2:ce:e3:71:27:a7:b7:be:7a:
         ab:1e:f8:d9:49:16:18:bb:c0:c5:f5:21:e5:68:b0:4d:ec:d9:
         d8:d4:a7:9e:37:1e:b3:9b:c7:ee:02:26:67:50:8d:b8:48:c7:
         fe:46:87:a0:e8:af:67:64:27:88:4b:d8:4e:28:d0:3f:35:f6:
         db:49:a6:0d:aa:e4:43:06:6a:f3:e1:b6:e0:30:3e:be:ca:32:
         28:20:87:aa:b3:de:8a:7f:5c:2e:a3:5a:18:48:bb:b1:a0:51:
         c3:50:bd:eb:32:8e:be:ba:ed:70:73:f8:04:86:e3:dc:0d:9b:
         87:a7:cd:d4:d2:1a:ae:4b:2d:c5:55:38:1f:5b:72:67:dc:34:
         eb:71:ae:6a:72:27:9a:d0:87:dd:f3:b0:c2:3b:c7:a3:ba:c2:
         f7:b0:4d:2b:64:b8:75:27:30:1f:55:6b:ea:6a:ce:82:61:7e:
         c6:75:53:17:72:67:1e:d8:c5:e3:eb:de:27:82:2e:b9:0d:d6:
         7a:b7:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:03 2024 by rpki-client on console-fra.rpki-client.org