Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa
File:                     920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa (raw, json)
Hash identifier:          ZfoZ9mJljbTPE59vML7qJ6viBGOQc8FsjaD07GamhWU=
Subject key identifier:   BF:70:BF:CA:25:6A:78:AE:E7:C7:D7:FB:42:75:B7:1B:A2:C7:7D:D3
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F43285847DF2F55C8FC8224D08B14F200
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     14618
IP address blocks:        166.98.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:55:c8:fc:82:24:d0:8b:14:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=c0fab86f-2217-465a-bbe8-8d71aea54ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:d1:03:37:10:fb:4b:e7:38:a1:90:16:7c:
                    86:62:e0:d6:84:0c:9d:6c:78:b8:21:b8:c7:a5:b8:
                    b9:4e:3e:57:4b:62:f0:46:5d:68:fe:2e:7e:00:23:
                    b2:fc:f4:f7:9d:85:1e:23:7c:17:42:5a:0e:c1:2e:
                    70:e1:e7:5c:37:3d:84:a0:a8:e8:13:96:ee:ce:a1:
                    ed:e8:16:de:0a:85:a7:dd:df:ed:57:c0:2c:3f:05:
                    96:39:c6:b7:e9:68:69:5f:81:e6:7b:7e:ca:c4:03:
                    02:27:d5:90:e4:f8:2a:76:4e:d6:95:cd:13:e5:b9:
                    d2:bb:49:0b:9b:69:28:31:ca:3b:ec:ae:9d:68:bd:
                    1f:b7:59:3f:50:a6:18:5c:50:f3:2d:74:75:51:9e:
                    55:8b:5f:2b:2f:bb:75:0d:7a:d3:37:97:b8:38:1d:
                    57:8c:00:b9:49:14:8a:39:aa:2e:65:91:eb:f8:51:
                    3f:d4:86:96:73:e6:1c:e4:82:c8:f0:17:a8:a5:bc:
                    da:ad:57:5c:42:04:10:a1:0a:1e:d6:1a:7a:ab:12:
                    b4:d7:d6:91:b0:8e:5c:0c:c3:84:85:9a:85:b5:7b:
                    49:8d:87:97:f4:93:1f:cf:84:57:d1:45:bd:8e:25:
                    e4:f1:c4:32:68:a9:0c:c9:98:73:9c:d8:87:86:d8:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:70:BF:CA:25:6A:78:AE:E7:C7:D7:FB:42:75:B7:1B:A2:C7:7D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:9f:84:a1:5c:35:19:a2:5a:2a:9b:ef:c0:9f:79:ea:56:37:
         09:05:ef:bf:10:31:da:77:db:87:81:08:94:63:d8:8a:78:ee:
         e3:60:f1:6c:45:76:38:70:37:e2:28:4a:55:2d:37:69:9d:49:
         fe:8d:0f:de:ff:da:cc:cd:3d:ac:a2:d2:64:d5:55:81:8e:28:
         32:40:ed:a9:b6:c2:e6:72:78:97:cc:ab:08:0d:91:b1:6a:a8:
         12:c2:4a:19:27:ad:a7:8e:aa:f5:44:78:2e:14:1c:8e:90:9a:
         01:97:d9:88:5d:80:7d:29:3b:bc:ca:36:65:ca:43:ce:eb:4f:
         58:17:66:71:8c:b6:a3:c8:70:f5:2b:19:eb:85:8b:9c:a7:32:
         4a:63:73:71:ca:1e:10:44:2d:03:30:9c:84:4f:bf:e6:f9:b5:
         93:06:9b:65:ed:27:49:c7:af:98:5d:9d:6a:fc:5a:77:c4:d5:
         cb:6c:dc:42:64:f3:0f:70:32:3d:10:57:e4:1e:52:35:47:24:
         2e:8f:fb:5d:ff:99:79:db:de:dd:1d:e6:fa:7a:56:6f:b4:6b:
         2b:b1:d5:46:04:3f:6b:db:02:4d:3c:db:d4:d8:9c:01:a6:f3:
         d6:95:e1:57:c5:90:c9:1b:eb:dd:6e:bb:c6:94:ec:58:68:64:
         85:27:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:22 2024 by rpki-client on console-fra.rpki-client.org