Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
File:                     42c626f3-6616-371e-a23f-3647b3c8eb49.roa (raw, json)
Hash identifier:          5/EwssuJvhg7p1qdBYfLJt05gnB9JDYE/+mzscaQf3M=
Subject key identifier:   50:DE:5D:41:C9:3E:B9:35:98:2F:78:42:60:DB:3A:61:FF:80:63:8D
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F43285847D29F4D800C37276EA6B92C00
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     396032
IP address blocks:        64.38.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:4d:80:0c:37:27:6e:a6:b9:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=458a3ef0-48e5-4d05-b21b-f0b19945753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:79:6c:8b:3e:21:96:16:3d:cb:0d:e9:df:45:
                    35:8b:69:55:88:d6:e6:e0:f4:4b:7d:4e:9c:43:89:
                    25:e6:5e:0c:98:fb:20:62:c8:0e:8d:6e:05:ca:87:
                    e7:e1:b5:33:07:d6:c2:2a:40:78:48:d2:0b:69:c1:
                    91:67:92:87:05:fd:22:ff:df:d9:0f:4d:a1:2f:5d:
                    80:5a:77:12:35:e9:67:75:ae:ab:43:40:bf:93:49:
                    72:bd:55:60:2f:7e:cc:13:36:5d:b9:a5:61:61:37:
                    49:47:3c:40:03:8e:c3:56:dc:e6:08:23:23:f1:80:
                    03:d4:94:b3:21:81:7d:f7:eb:ff:1e:54:ca:81:7b:
                    ea:8c:65:ef:25:1e:f3:c5:e0:fa:e8:46:c7:af:9f:
                    d0:c8:80:16:86:2a:1b:46:ea:a3:3f:26:e2:79:d3:
                    fd:82:4e:d6:c5:7d:91:1a:8a:ba:a3:70:50:a2:81:
                    ff:12:bc:38:3c:b2:e3:55:c6:e8:0b:de:a6:d6:ff:
                    ec:d5:6a:f5:ab:ec:c0:84:0c:9d:0e:a9:34:c1:a8:
                    47:bd:a8:6e:73:f1:e5:73:65:3b:74:72:2a:56:4a:
                    7e:38:81:e5:4e:34:1d:9e:6e:40:ab:fc:86:4c:f9:
                    b8:c8:3d:d8:a7:95:16:f8:b5:d9:e4:68:eb:7c:d8:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DE:5D:41:C9:3E:B9:35:98:2F:78:42:60:DB:3A:61:FF:80:63:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:e4:44:db:28:51:da:06:fa:19:d8:ba:33:a5:61:ef:49:
         69:8b:73:60:23:02:17:2c:2b:9c:fb:48:ec:78:10:12:39:33:
         0d:ad:c1:e8:92:6a:d5:a4:75:d4:81:92:4b:ee:75:26:a4:e8:
         05:da:e7:2e:1f:c5:ad:74:3f:18:9a:30:b3:18:df:48:34:18:
         21:2b:1a:cb:cc:73:fe:a0:df:4b:08:ec:69:84:f4:c3:ea:0f:
         7a:9e:a8:d5:bb:d6:68:0e:79:27:7f:8a:26:d8:0e:e3:e6:cc:
         58:ac:13:7c:67:7e:6c:c0:34:54:83:29:01:57:8e:5c:c5:90:
         39:44:bd:24:e2:01:22:90:50:90:fd:0f:15:d0:31:b6:49:0f:
         a8:1a:8b:52:5e:c9:8e:f6:e5:a5:b5:e7:90:5e:d8:a3:70:78:
         ea:d7:0e:f8:7a:01:5e:c1:b4:5c:af:22:7a:25:9c:e7:0f:67:
         aa:76:0e:9a:8b:de:b9:9d:62:a5:4b:96:d8:51:4a:36:01:c0:
         af:07:6d:31:6f:ae:6d:ed:21:53:10:3d:0d:41:07:af:58:fb:
         49:2b:9d:28:c8:75:bf:b5:5e:2e:23:1d:24:df:5c:74:fd:98:
         3d:c3:00:7f:2e:f9:94:de:4e:f7:b7:57:18:44:23:ad:04:7b:
         c8:3c:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org