Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/4e0d19f2-b666-315c-808a-6e29ef7683ec.roa
File:                     4e0d19f2-b666-315c-808a-6e29ef7683ec.roa (raw, json)
Hash identifier:          XcWgr5+w2v8bAMsTxDbG1imVgcQmzLOVnKMnkf/WGzA=
Subject key identifier:   E3:D7:93:8D:5D:C6:A5:C3:1A:34:23:99:47:90:5B:99:40:A0:D0:40
Certificate issuer:       /CN=3923a777-f0da-4edf-8bcc-42b47f48310a
Certificate serial:       010D0C9F4328584726D0863392E7DA5B9382BF00
Authority key identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/4e0d19f2-b666-315c-808a-6e29ef7683ec.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        64.45.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:86:33:92:e7:da:5b:93:82:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3923a777-f0da-4edf-8bcc-42b47f48310a
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=f4381429-e833-472b-a977-d3db1fab0090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:20:4a:f5:48:e1:f4:f0:88:89:bd:ec:55:
                    da:3f:e4:5a:6a:4d:cc:41:1e:45:b8:f6:86:42:4d:
                    cb:d2:8c:fe:b8:43:0e:07:9a:c6:b3:dd:16:cb:f2:
                    5b:37:e8:44:48:d7:0b:7c:ed:18:de:f3:30:f3:4c:
                    23:b0:94:10:8b:5c:22:97:62:a4:93:1d:4b:9a:c7:
                    84:68:77:70:a8:80:8a:4b:8f:f8:01:95:91:02:3f:
                    a0:53:f5:78:8c:15:a7:62:45:19:02:c5:03:bf:ba:
                    12:05:52:b4:02:fd:1a:33:2a:6f:c8:36:b6:94:fd:
                    8b:81:62:b5:f3:08:36:4d:26:54:c6:a8:12:6d:a5:
                    c6:08:88:98:ad:f2:e1:e4:12:73:bb:b6:90:f4:d6:
                    76:2c:97:17:42:ed:0a:c3:b4:26:8e:4d:c3:03:6f:
                    75:88:1d:ab:3e:d4:f2:7f:b1:39:f1:ae:04:e8:b1:
                    d8:c7:6b:9e:ab:43:17:88:df:b3:56:35:34:bd:06:
                    79:ed:10:55:b1:55:85:0a:d4:96:f9:f1:99:ef:65:
                    8a:a6:b5:d1:f5:35:e4:ba:f7:2b:bb:d8:3d:27:35:
                    0b:c3:34:30:59:ec:86:82:11:fd:7d:cf:10:d0:53:
                    dd:b8:95:0a:06:28:a1:1b:da:74:81:00:33:1d:ca:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:93:8D:5D:C6:A5:C3:1A:34:23:99:47:90:5B:99:40:A0:D0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/4e0d19f2-b666-315c-808a-6e29ef7683ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:23:c0:8f:ed:f7:15:98:4b:fb:6a:a5:ae:d5:8c:07:35:62:
         12:0e:11:b0:4d:27:46:3d:58:66:90:a6:ae:9c:6c:b1:06:08:
         e7:69:50:c3:c8:eb:09:57:8f:43:b4:00:60:ad:61:f3:bd:9b:
         b7:4c:15:e5:8f:31:4c:bf:56:7c:a9:f7:dc:71:d4:8d:27:a9:
         30:6f:c6:96:7c:c5:53:54:7e:c3:3f:6b:54:55:f6:09:74:34:
         f5:7d:20:97:a0:ce:05:9a:72:f6:ba:79:05:c5:d0:d4:92:a5:
         90:93:75:3e:92:42:02:8e:78:96:d0:a4:e8:d8:2a:88:a4:b3:
         32:b5:82:2e:c5:3f:62:ea:dd:51:3f:19:48:38:67:51:c9:25:
         23:f1:5e:31:0b:84:cb:92:6c:5e:ae:61:df:74:0c:8c:80:97:
         02:71:ad:af:1e:85:f3:99:eb:f8:d0:62:95:8b:f7:f8:2a:a3:
         16:5e:ba:c8:84:28:7b:49:e4:52:56:ee:a5:6c:a7:5b:ac:38:
         f7:5d:88:4b:99:fe:f8:7c:95:1c:d3:3d:c5:f2:5f:b7:6a:b9:
         eb:98:25:f8:32:58:2b:fd:7d:36:b2:85:7e:d3:c1:22:22:4b:
         69:79:ba:be:07:29:cb:38:f8:01:e2:3f:13:0d:b2:fd:08:4b:
         3d:a3:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org