Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa
File:                     add0a9ff-c124-381c-9d60-5f74979be3f7.roa (raw, json)
Hash identifier:          XA1OqKtUmXD4Ax0GEbNNRIPcTvun9sm5CdfIEXCguCE=
Subject key identifier:   14:2F:25:78:C2:DA:4E:45:DA:04:26:A0:DF:A4:5B:D4:23:F0:A5:BC
Certificate issuer:       /CN=afc2bf64-2cba-4362-8b12-56844da30e4e
Certificate serial:       010D0C9F4328584811685102F1C644A0C44F0500
Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa
Signing time:             Mon 02 Dec 2024 01:45:49 +0000
ROA not before:           Mon 02 Dec 2024 01:45:49 +0000
ROA not after:            Sun 02 Mar 2025 01:45:49 +0000
asID:                     14343
IP address blocks:        64.26.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:68:51:02:f1:c6:44:a0:c4:4f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e
        Validity
            Not Before: Dec  2 01:45:49 2024 GMT
            Not After : Mar  2 01:45:49 2025 GMT
        Subject: CN=7098069a-cfa1-49f5-ade9-956afa76843b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:ce:b1:3d:df:fe:53:30:cf:0c:4c:80:9c:
                    70:6a:04:90:ac:67:5b:84:06:62:c4:5d:39:b3:92:
                    ed:97:9e:51:25:6e:af:91:dd:28:c2:4a:e0:58:1d:
                    06:6d:e3:e7:40:42:f8:80:f8:44:27:7d:c6:2f:4c:
                    2a:76:bc:0f:dd:d1:ff:67:5b:46:11:e4:5f:33:0f:
                    12:98:db:62:55:33:ca:49:e8:c8:b3:ef:f4:83:3b:
                    8a:da:c1:51:4b:4f:59:13:be:b7:5e:a0:c3:38:a6:
                    c9:80:9b:1f:d4:45:4f:46:8d:ad:d1:35:ee:81:f0:
                    13:58:45:0b:04:b1:f8:fe:ab:62:62:26:a1:df:60:
                    48:7d:3a:42:9b:03:1c:2b:8b:ed:23:0c:60:87:26:
                    3e:76:d5:c6:d9:19:07:bc:dd:31:9c:34:08:5b:11:
                    44:71:f5:46:20:68:10:58:e6:f0:39:49:88:7b:7d:
                    0e:02:b6:d8:89:f5:a4:53:f2:5b:1d:97:4c:f6:04:
                    de:cf:7e:a8:fa:3b:7c:02:21:5e:98:55:8a:a4:62:
                    c4:63:5a:de:cd:82:12:b6:51:d8:34:14:d0:ab:d5:
                    ac:b6:5a:a5:16:a5:a3:58:e1:60:ac:ed:24:10:80:
                    73:07:a8:da:ed:57:84:75:27:3a:cc:71:a7:cb:24:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2F:25:78:C2:DA:4E:45:DA:04:26:A0:DF:A4:5B:D4:23:F0:A5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl

            X509v3 Authority Key Identifier:
                keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.26.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:80:a8:0d:d0:8c:a4:b9:18:77:c9:c1:8e:46:95:ea:52:
         53:eb:a2:58:56:84:1c:dd:f0:af:8d:ca:e4:4f:ff:13:da:3c:
         04:ef:62:b3:35:99:23:a2:3d:e8:1d:8b:81:4a:ff:b6:ae:6f:
         c1:3f:ed:c0:2e:25:88:22:8b:21:3d:0b:09:ca:2d:44:5d:48:
         b1:ba:31:25:16:08:7a:31:80:2d:91:d5:13:3a:c3:3e:0f:97:
         a1:4f:5e:8a:f2:76:b5:d9:4d:03:94:c2:3a:c2:81:52:36:92:
         03:bf:4c:76:b7:35:2b:f6:5b:1a:c1:07:db:05:03:7d:c4:23:
         54:25:c8:4b:cb:56:c8:b1:e3:2a:f3:57:76:4a:d2:77:36:bc:
         b7:3a:ff:48:7d:29:60:87:5b:a2:ab:34:fe:b5:5c:3f:ba:62:
         25:90:7b:d8:1c:88:07:17:11:fd:f1:e0:1c:f1:89:69:ec:d3:
         dc:a4:64:20:d1:c3:a4:8d:18:8f:ef:94:4b:26:fe:0c:93:a4:
         a0:62:b6:25:a0:3b:63:78:8d:dd:32:ec:bf:ad:fb:22:53:4c:
         28:cb:b2:77:49:bb:28:a7:5b:25:fe:e2:51:a1:df:3b:a3:31:
         ea:7c:56:ec:3c:81:7e:72:7f:05:f7:64:b4:dc:65:3e:aa:c9:
         ba:22:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org