Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa
File:                     7bac194a-18e0-36b4-83d1-6245c751326f.roa (raw, json)
Hash identifier:          5pHkAxV2mLzLkyNfuF4aXAbyb+kRqSbsD/UKwYApa6s=
Subject key identifier:   BA:4B:80:F2:A7:B3:E5:0C:0D:D8:FC:67:FF:4B:16:D9:AB:02:A3:BB
Certificate issuer:       /CN=b915136a-e2d3-4f27-83f6-3ee5af191f60
Certificate serial:       010D0C9F43285847BC2C234DE837A94407278E80
Authority key identifier: B9:E0:D4:6D:67:07:08:51:50:97:DC:D8:91:70:DF:D0:46:7B:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     400470
IP address blocks:        64.90.214.0/24 maxlen: 24
                          216.25.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/b915136a-e2d3-4f27-83f6-3ee5af191f60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/b915136a-e2d3-4f27-83f6-3ee5af191f60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:23:4d:e8:37:a9:44:07:27:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b915136a-e2d3-4f27-83f6-3ee5af191f60
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=ffb0dc16-a2ba-476c-ab02-d98635b82e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:e8:cb:ca:67:d1:76:18:41:39:82:37:89:
                    b5:45:26:37:45:6f:59:2d:d9:3c:e4:35:b8:31:0f:
                    2e:fa:66:87:b4:4c:2b:10:67:3a:b0:a9:a7:75:45:
                    ab:06:4b:b5:df:ee:47:c7:8b:52:e7:75:af:24:30:
                    dc:1e:b2:7f:11:7e:8f:b9:b5:3a:b3:33:b6:b3:40:
                    a4:3c:1c:b0:bd:cd:09:ff:0b:48:31:ab:82:b3:92:
                    d5:1d:d5:de:08:7c:6b:7a:a0:b1:2c:78:c5:9c:c2:
                    95:a8:9d:5e:8e:48:0c:9b:2e:02:55:b0:96:56:21:
                    ae:41:09:2c:e5:29:4e:cf:52:8c:4e:dc:e6:71:3e:
                    7b:18:d7:1d:a3:f8:39:b5:6d:a1:e8:02:57:81:4e:
                    de:83:82:ba:8b:6f:24:f8:16:4f:06:6b:87:f7:55:
                    6f:40:f1:ac:d7:c9:e4:b8:5f:a9:34:79:0c:51:e5:
                    85:9e:63:de:d1:95:58:a7:10:62:2e:e2:58:8f:ab:
                    a3:58:18:1f:6a:7b:af:cc:a6:7c:05:61:85:b2:1d:
                    2f:bc:37:5f:70:1a:66:d3:6c:30:8d:ae:c2:2c:13:
                    a6:b0:96:00:16:98:27:4e:11:71:e5:44:70:76:d3:
                    74:05:7e:de:a9:5b:d3:2f:4f:65:e2:44:02:b2:74:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:80:F2:A7:B3:E5:0C:0D:D8:FC:67:FF:4B:16:D9:AB:02:A3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/b915136a-e2d3-4f27-83f6-3ee5af191f60.crl

            X509v3 Authority Key Identifier:
                keyid:B9:E0:D4:6D:67:07:08:51:50:97:DC:D8:91:70:DF:D0:46:7B:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.214.0/24
                  216.25.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:52:49:2a:61:61:f7:aa:59:86:8c:cb:32:0e:9c:ae:58:3d:
         a0:ff:f6:dd:39:06:53:c3:c6:be:11:03:4d:f7:f4:9d:67:7d:
         b4:27:c8:d8:7a:2f:a8:94:dd:5f:7e:f3:e8:1d:e6:6a:e9:d2:
         c3:64:c6:ac:3c:e6:63:78:0a:cb:1e:1b:f2:61:2e:1c:2e:45:
         34:45:6f:4d:d6:91:1b:8b:5a:77:59:e5:e5:b0:ea:30:3e:83:
         96:04:a0:fc:23:36:10:1a:d1:bf:88:8e:8f:63:4c:94:1c:e4:
         9e:76:41:15:21:e6:5e:a6:c5:75:7e:e1:5c:38:d3:47:b7:f9:
         62:c2:7d:ee:cf:81:1a:14:c4:b4:cf:86:8d:30:0c:47:d5:2f:
         4d:8a:0b:b9:3a:8e:39:6f:46:9f:b0:92:0f:08:ab:be:47:5a:
         71:77:ac:4f:84:d1:b7:45:b3:81:be:70:4a:4d:da:f0:3a:62:
         de:42:97:6b:66:ef:58:be:12:f7:f3:46:87:0f:28:92:09:b2:
         e6:b9:c5:91:a9:81:ac:60:85:4e:a9:9f:d8:c3:80:45:2b:1d:
         20:19:ba:5c:58:f1:59:05:e2:45:bb:83:ee:63:ec:c5:e2:a9:
         af:a7:cd:41:fd:64:96:3a:88:ad:63:5a:52:cf:cc:08:c7:2d:
         c5:f2:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:36:01 2024 by rpki-client on console-fra.rpki-client.org