Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa
File:                     9e0430f2-a68a-3dcc-a04c-296c574cb422.roa (raw, json)
Hash identifier:          CFHpBj6U9Djqk4K4D40MRwwa2D+Lr7Z8tCItH/YceQY=
Subject key identifier:   EF:AE:1C:15:15:2F:D3:FB:69:E2:65:6E:EF:77:8D:A2:FA:DE:54:FB
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F43285847A30BF6581F193EC2B2FCB900
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     396032
IP address blocks:        64.38.173.0/24 maxlen: 24
                          64.38.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f6:58:1f:19:3e:c2:b2:fc:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=80f80e8a-1c70-43a5-b0d9-3b4b36930a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:8a:8b:15:b6:4c:1d:6e:e4:17:22:1a:01:
                    0f:0d:36:73:78:27:da:90:53:43:f1:e1:f6:e1:42:
                    98:e9:47:ee:d5:a8:e5:c0:fd:1f:d2:3b:ba:eb:b3:
                    1e:42:ac:0a:bc:1a:7a:4e:56:05:13:67:78:1f:e8:
                    d2:d9:e5:70:b3:4f:6a:56:51:61:0d:1a:24:b5:41:
                    57:9c:b0:91:c2:03:ed:ef:4b:fa:ec:f3:9b:15:52:
                    6a:22:af:3a:2d:94:7f:5d:0a:2a:2d:2f:d2:c7:1a:
                    ac:c6:f4:25:c5:d3:f0:16:cc:f7:39:61:b3:74:48:
                    86:3c:5b:98:92:8d:1b:cb:61:49:4c:7e:b1:8b:eb:
                    6f:09:53:8c:df:7d:46:02:2b:c2:5d:56:45:5f:84:
                    50:17:77:51:52:89:49:30:6d:bb:bb:80:b5:f0:e5:
                    ca:87:16:43:98:cb:e5:30:ce:45:42:24:16:6b:86:
                    43:64:d2:51:53:ab:6e:56:aa:a2:42:fd:97:89:16:
                    d9:d6:3c:f5:b2:77:b3:d6:d4:44:4d:92:54:bc:b6:
                    c9:99:b0:19:89:b3:98:bc:28:e7:37:20:0d:8b:de:
                    23:16:c0:ce:9a:62:cf:ee:14:0c:e6:09:5b:1d:20:
                    60:b6:ba:e9:fb:ad:eb:3e:be:98:a5:ae:90:68:44:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:1C:15:15:2F:D3:FB:69:E2:65:6E:EF:77:8D:A2:FA:DE:54:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.173.0/24
                  64.38.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:fb:de:fd:98:99:dd:2f:5b:20:20:30:e9:39:c8:19:4b:
         3a:3a:a4:54:43:0d:13:b8:55:63:ad:47:24:54:81:83:00:c1:
         df:64:dc:05:72:ca:c9:21:5f:ab:ef:2a:0c:97:51:1c:07:a2:
         a1:8a:4b:86:37:78:6f:a4:c5:f9:73:ce:e7:f8:c3:d7:19:58:
         59:82:0a:a2:54:b5:5c:d1:c8:01:da:e1:45:0f:39:00:8c:99:
         cc:a2:26:a3:ca:c8:a5:c0:68:37:ea:02:03:fa:a0:3f:00:a3:
         46:4d:17:49:90:f6:52:6f:89:a2:8e:4d:d1:78:c0:50:d9:f0:
         7d:5e:5f:95:3b:04:2d:c1:eb:f9:b3:4b:3e:64:3b:5b:2d:23:
         97:d9:27:17:d5:b1:82:b7:ad:73:e0:47:39:b0:d0:41:98:78:
         00:11:58:06:41:90:b7:f1:39:73:0c:c3:42:23:78:de:99:0c:
         85:f0:80:2b:6c:69:aa:30:c0:2b:9a:f5:a5:1b:29:0a:62:d6:
         91:79:e4:bf:7f:5b:7d:24:a1:23:51:02:7e:cc:62:dd:a9:5b:
         0a:4a:61:93:f5:c1:df:e6:5a:fb:e9:88:91:ed:7b:41:fe:b3:
         c0:06:12:3a:9f:79:3d:70:5b:bf:7d:fd:9d:50:d2:0e:2a:52:
         ad:ac:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org