Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa
File:                     89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa (raw, json)
Hash identifier:          smERF7i8mW5TIZI1AWCoEqILOrumiuNgTRhiQhnneMw=
Subject key identifier:   D4:BD:12:4B:0C:8E:CF:34:19:CA:38:89:95:0C:2E:F1:FD:15:E4:8B
Certificate issuer:       /CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
Certificate serial:       010D0C9F43285847299B1A52B6996176C6EF90C0
Authority key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     9009
IP address blocks:        64.43.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1a:52:b6:99:61:76:c6:ef:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=5ea9d225-d376-40c4-b528-1663141d8ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:11:3c:35:e0:94:e5:5e:87:92:70:89:8b:
                    95:7b:4e:e2:6e:9c:a8:f2:cb:27:2c:55:1c:76:84:
                    91:64:99:ac:3e:87:7c:8d:bd:4d:d6:ef:fa:df:78:
                    43:67:ea:ff:48:2d:b6:a4:82:86:fc:e6:28:e8:e4:
                    ce:43:d7:07:76:61:03:d2:83:e2:70:66:77:fa:cc:
                    6c:69:28:f0:c9:20:33:f7:9c:4c:dd:57:71:44:64:
                    34:30:fc:bf:f1:e2:fe:c2:a2:55:a1:a0:6c:3d:0e:
                    9d:51:e6:99:82:92:27:30:e8:65:0b:1d:e8:7c:54:
                    3b:db:47:ae:93:1e:cc:8c:16:f0:c0:8c:b2:26:5b:
                    ec:ba:ed:46:73:da:90:7b:66:79:94:dc:c0:40:41:
                    68:0b:73:7f:7e:9a:de:0d:9c:7c:11:77:f0:3e:1f:
                    57:ad:bf:66:fa:25:e3:51:57:1e:5f:2e:03:da:dc:
                    4e:ab:b3:3e:d5:f2:f3:8d:bf:91:0f:b9:c3:93:00:
                    8b:c1:6d:b6:87:31:75:eb:85:9f:5e:4c:d1:9e:75:
                    96:7d:53:ca:d3:e2:75:c6:b9:ea:93:f1:95:d6:86:
                    ec:ee:e7:07:0c:59:f1:ef:33:81:6e:42:ae:ae:5e:
                    b0:1e:73:38:b3:40:53:b5:12:4b:bd:d6:0e:38:89:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BD:12:4B:0C:8E:CF:34:19:CA:38:89:95:0C:2E:F1:FD:15:E4:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.43.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:1f:24:49:11:65:ed:b7:69:99:bf:da:93:26:90:4d:3b:
         1b:19:9d:f5:e1:f4:fc:e1:16:06:9c:0f:f2:4a:9d:90:02:3b:
         3c:f2:10:d7:94:e9:69:cb:0b:52:2b:f2:18:5e:ae:5a:29:87:
         4b:9c:f9:98:a1:84:d6:66:bc:66:69:ee:67:9f:80:66:c6:49:
         85:76:62:83:6f:7a:ab:3d:79:8b:98:09:b7:92:0f:92:ac:da:
         61:b6:ff:ea:1d:b0:4c:69:d3:eb:eb:b4:d9:44:c3:b7:a1:7b:
         e5:99:b2:f5:01:61:6b:1d:5a:36:2d:a5:ea:7d:c5:c0:5a:5a:
         0a:88:f8:f3:6c:a3:7c:6a:61:06:e7:a2:52:55:c7:7b:f8:08:
         11:4c:db:8c:6c:d4:d9:60:29:56:bc:80:27:c1:4f:3c:11:14:
         2e:03:ea:dc:b5:80:f6:8c:b8:32:dd:9f:70:aa:2c:1c:a5:78:
         f9:aa:71:53:7e:d1:27:02:d0:fd:39:e8:51:7a:59:09:ac:d1:
         41:98:ef:46:61:eb:01:22:5e:13:b5:ef:d4:27:88:5a:ea:62:
         25:e1:33:4e:0e:d8:65:8e:08:4c:fc:92:b0:e3:e0:96:05:8e:
         27:95:fc:ac:55:eb:6a:bc:4a:6f:d0:ff:6b:75:b5:f3:01:45:
         4c:15:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:46 2024 by rpki-client on console-ams.rpki-client.org