Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/63efd8ee-733d-32c0-9a5b-47c15abd254c.roa
File:                     63efd8ee-733d-32c0-9a5b-47c15abd254c.roa (raw, json)
Hash identifier:          6P7m7REqZHPts3qBjekXNriD2uqkktLxhBlXu/NmB1M=
Subject key identifier:   B2:9A:53:69:45:6F:79:05:95:6C:C4:0A:3A:76:80:0F:39:36:B7:AD
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F43285847792BAF65DDA2FF7ABDD62518
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/63efd8ee-733d-32c0-9a5b-47c15abd254c.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     11127
IP address blocks:        64.49.129.0/24 maxlen: 25
                          64.49.130.0/24 maxlen: 25
                          64.49.179.0/24 maxlen: 25
                          64.58.97.0/24 maxlen: 25
                          64.58.109.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:af:65:dd:a2:ff:7a:bd:d6:25:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=f85ba58b-b794-4257-8d35-79869ce74a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:3e:36:cc:b0:f6:6e:b8:f1:f8:54:67:ee:
                    a8:4a:90:31:80:4c:89:b1:7c:7e:23:38:f1:fd:91:
                    55:a5:89:50:c6:a8:05:b2:51:a2:0a:66:4a:f2:cb:
                    f8:4e:9a:5b:24:57:c0:08:20:53:95:b3:e5:0b:0b:
                    82:63:96:8f:9a:66:6c:a2:77:4e:05:9b:4a:f2:75:
                    76:c1:6e:6c:b8:4b:a3:ee:a9:41:59:08:9f:34:3d:
                    f3:87:8e:1b:60:24:02:10:1b:05:c8:92:4e:bc:dc:
                    cf:08:60:94:85:85:64:9c:15:6e:de:1c:61:de:39:
                    4f:21:f5:26:96:9b:2d:07:d8:88:aa:cd:5a:7d:bf:
                    c8:54:35:ce:d0:65:38:c8:d5:50:36:f1:cf:f4:17:
                    a5:25:6f:0f:d1:35:cd:40:51:88:97:e3:b4:ea:8d:
                    f8:01:43:48:dd:48:dd:5e:dc:ee:b8:9c:78:fd:72:
                    db:d8:1a:17:70:11:3c:ca:b1:5c:7a:83:e8:41:bc:
                    eb:6c:02:18:38:66:eb:cc:fb:d6:d3:dc:75:75:c5:
                    e0:2d:7d:10:41:a0:a3:92:7d:3c:a0:46:7b:ef:8a:
                    11:f7:41:53:c8:13:57:75:ea:3d:4a:b4:7a:29:0b:
                    a6:90:35:ad:92:be:0c:b1:4c:dd:d0:8a:57:fb:d1:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:53:69:45:6F:79:05:95:6C:C4:0A:3A:76:80:0F:39:36:B7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/63efd8ee-733d-32c0-9a5b-47c15abd254c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.129.0-64.49.130.255
                  64.49.179.0/24
                  64.58.97.0/24
                  64.58.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:50:7e:38:b9:54:5f:40:be:d3:3d:50:94:ac:73:a4:a4:b6:
         18:f4:03:19:3e:ba:63:84:5f:c4:d5:20:17:c4:1d:23:39:82:
         ec:12:fb:9d:7e:42:49:e1:a1:21:46:f3:dc:d8:7d:6c:1d:bf:
         86:bc:4b:9f:73:83:a4:75:d1:4f:66:11:c2:ef:e2:cd:71:53:
         30:63:2e:74:3f:03:83:19:d3:73:e2:fe:19:8e:94:1e:6e:35:
         a6:b0:2f:f5:8e:cf:5b:90:0b:9b:0c:55:ce:67:ad:ad:cc:81:
         c1:db:ba:38:3c:34:e1:85:9e:93:1e:55:a4:e1:0b:05:a7:07:
         03:c3:d5:97:dc:9c:fe:92:00:f7:b2:bf:52:6c:ba:cc:d6:6f:
         db:b6:61:8c:2e:39:bb:e9:c5:b0:a0:cc:5a:24:38:36:dd:db:
         9b:14:a9:ae:65:f1:cc:dc:82:e4:78:32:13:6a:7c:58:21:dd:
         a2:17:43:26:76:8f:5d:30:6a:a9:9a:91:b6:af:2e:85:29:f6:
         90:50:08:9d:89:97:83:67:f4:c1:41:1e:7a:08:26:01:a5:d6:
         f7:f0:c2:65:c7:7c:30:06:62:5d:3f:8b:22:6a:d0:99:0c:d9:
         11:fd:6b:6d:1f:43:95:3e:f1:80:58:86:0a:c0:57:82:37:63:
         0e:cb:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:31 2024 by rpki-client on console-ams.rpki-client.org