Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa
File:                     f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa (raw, json)
Hash identifier:          3UjGwLmF3wiwK9aMW15/7XWSyCOOOWdZa3nL96k+eK0=
Subject key identifier:   C0:39:C3:28:92:0B:23:96:76:B0:D2:7E:36:45:11:E0:91:A7:21:F1
Certificate issuer:       /CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
Certificate serial:       010D0C9F43285848143148F32E4E8CF09C6CAE40
Authority key identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa
Signing time:             Tue 03 Dec 2024 01:42:21 +0000
ROA not before:           Tue 03 Dec 2024 01:42:21 +0000
ROA not after:            Mon 03 Mar 2025 01:42:21 +0000
asID:                     29894
IP address blocks:        64.130.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:31:48:f3:2e:4e:8c:f0:9c:6c:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
        Validity
            Not Before: Dec  3 01:42:21 2024 GMT
            Not After : Mar  3 01:42:21 2025 GMT
        Subject: CN=3147d434-8c5d-4bd5-a186-be6de29951e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:94:8f:39:23:f0:a8:a1:01:f1:16:43:77:
                    cf:6c:3a:fa:e1:5a:47:6b:94:39:69:8c:72:ed:26:
                    fb:98:67:f8:48:b1:91:f9:4a:20:a1:3a:c7:a7:a5:
                    38:9a:5e:3c:de:34:83:19:2f:20:5a:4c:5e:c5:6a:
                    da:77:83:88:35:3c:02:5d:60:bf:d6:bc:07:8c:07:
                    98:ce:b6:8f:5b:a3:42:45:41:e5:e8:c0:e1:80:3f:
                    54:29:39:99:69:db:b9:fc:fb:15:7a:8a:b1:92:a2:
                    ed:cd:e8:58:15:14:64:c4:88:6c:bf:b6:79:e9:57:
                    56:7e:64:6b:ff:36:7b:66:1b:0c:91:88:ce:59:ba:
                    7a:1a:2a:5b:0e:44:00:6f:bf:30:27:a6:3d:92:1c:
                    eb:2d:76:c0:82:c5:82:64:c6:e0:99:ce:a4:e5:b2:
                    bc:3d:9a:a1:db:ff:dc:ba:94:81:b1:b0:b1:54:6f:
                    aa:5c:03:a0:52:d6:56:b4:22:33:db:f5:8b:76:14:
                    cc:ae:9c:40:7b:10:ea:31:d6:ae:e4:ac:74:bc:43:
                    ee:b1:46:51:df:e1:9f:9f:01:1c:ad:e3:45:86:c7:
                    c9:75:92:39:15:8f:ce:0e:08:9d:4f:4a:d6:3f:85:
                    01:d8:88:db:09:2c:18:b3:5a:0f:4a:f6:fe:8b:f0:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:C3:28:92:0B:23:96:76:B0:D2:7E:36:45:11:E0:91:A7:21:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl

            X509v3 Authority Key Identifier:
                keyid:AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:a3:10:33:1e:e8:f5:2e:0f:d8:41:6a:3b:97:f2:1d:1b:
         29:21:7d:c4:3c:d1:4b:98:93:9d:f3:6b:99:d3:14:df:7a:6c:
         09:10:91:93:c4:90:0f:1a:f9:4d:0f:29:25:40:f8:ca:c9:83:
         5c:95:df:bc:40:4a:af:5d:0a:b1:08:c2:a0:06:95:c0:f5:07:
         93:fe:83:e4:cd:96:9d:b1:c0:28:39:3a:25:8e:f4:31:00:0d:
         c6:27:f0:56:dd:1a:d7:72:04:7e:50:bd:ca:e0:f4:ca:8d:8a:
         0b:4f:04:85:02:49:56:dd:ec:48:7e:ea:87:74:59:1a:e2:fb:
         f0:f4:11:76:6e:9a:aa:43:07:d8:27:79:fa:b5:bc:6e:46:8e:
         9c:00:c4:35:07:54:bd:a7:ae:67:69:6f:4d:68:db:c8:f3:8d:
         e6:cd:c1:45:ae:67:65:cd:c5:f1:16:7f:3e:21:00:e4:5d:65:
         d7:4d:66:7c:eb:8b:21:3e:71:6b:0f:fe:99:50:b4:12:92:af:
         28:73:22:89:ae:bb:50:7d:3e:77:ba:a1:ec:68:b6:fe:51:3a:
         7a:87:1b:70:8b:9c:17:c9:bd:e9:dc:32:17:5c:25:16:1d:b3:
         c0:2e:ab:bd:92:b5:3c:7a:00:e7:0c:b0:c5:d2:79:b4:75:29:
         63:7f:38:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org