Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b7ad2477-550e-313d-bac4-04672ab0fa60.roa
File:                     b7ad2477-550e-313d-bac4-04672ab0fa60.roa (raw, json)
Hash identifier:          zph/tTjZQ2MPqYi54naqfkj2LpNBfYVxH3oTO7g9DDA=
Subject key identifier:   FF:1A:70:00:D5:C5:04:95:15:DE:7E:A2:A9:DC:83:FB:4D:72:FD:D5
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584693F010F9D38DE833C4EFDB00
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b7ad2477-550e-313d-bac4-04672ab0fa60.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:93:f0:10:f9:d3:8d:e8:33:c4:ef:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=af4b743c-dc73-42c7-a4f7-4e68fd47441b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:a7:97:37:f2:ca:ed:d9:af:ab:5e:67:7b:
                    6d:8c:71:a3:60:b3:4c:21:27:5e:8a:43:94:2b:9e:
                    c6:ea:48:2e:95:74:02:b1:4b:2d:05:2c:b9:a4:bc:
                    91:4b:6b:7e:00:ca:8d:a8:7b:5a:45:5d:e1:0a:10:
                    9c:95:3e:dc:8c:e5:64:6b:6a:d9:19:7c:e8:87:38:
                    84:22:ff:b0:9e:ff:b0:ad:29:4b:90:ec:bb:17:a3:
                    6a:eb:fa:90:40:c6:69:66:94:94:e0:c8:d9:52:9a:
                    16:47:b4:bf:75:a8:92:1b:a1:55:7f:da:e2:a2:9b:
                    1d:fd:dc:2e:f7:7a:37:bd:70:24:69:b1:26:40:56:
                    d2:3b:35:de:eb:08:f9:85:ba:d4:cc:56:ee:80:bf:
                    42:c6:b2:d9:32:e1:68:4e:d2:bb:da:1a:f0:15:6a:
                    29:29:04:69:34:c2:9f:36:cb:43:8b:7e:e8:01:46:
                    c2:42:01:5d:92:c0:b3:11:6e:64:ff:4d:eb:09:8c:
                    92:98:19:82:81:43:18:79:2d:e8:19:0b:d6:d8:b6:
                    4a:df:c8:b6:e2:8f:17:80:27:c2:bb:c2:0a:86:1d:
                    ab:2b:43:cd:0c:8a:d6:37:e4:13:d1:33:47:5a:9d:
                    e1:a0:ac:27:ec:d5:01:e7:06:ba:07:e3:95:a3:91:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:70:00:D5:C5:04:95:15:DE:7E:A2:A9:DC:83:FB:4D:72:FD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b7ad2477-550e-313d-bac4-04672ab0fa60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:48:2a:99:85:59:6a:f9:1e:70:b6:12:9e:26:0c:fa:3c:
         f4:4e:19:37:aa:02:0e:fc:81:e1:58:0c:b1:bc:e1:b6:00:48:
         08:fc:ad:0a:b7:eb:c4:fd:d6:cb:96:60:dc:16:1d:40:b3:a4:
         66:3e:f6:1f:fe:da:53:b6:0b:4c:8b:fa:20:a5:c7:91:1f:21:
         ad:e1:81:9b:03:78:7f:72:ec:4c:42:2f:db:39:06:12:09:90:
         12:68:24:67:4d:56:93:c6:f3:0e:2b:ed:fb:3e:da:69:5c:30:
         c4:33:59:08:7e:65:0c:b1:a0:24:e1:f4:9b:aa:4a:eb:95:cc:
         44:fb:0b:b9:3d:e8:cf:d2:2a:93:21:0a:9c:09:ca:bc:31:97:
         b5:05:9e:f7:e6:ca:8b:54:b7:7d:e2:93:c6:54:be:b7:9f:2b:
         e1:1f:11:a7:94:fe:5f:85:87:c1:c0:cf:c7:1b:d1:e6:20:ad:
         ec:ee:1b:1a:83:c9:6e:a4:b0:57:85:bc:0d:be:99:3d:fe:82:
         70:49:07:2f:6c:27:9c:51:5e:f2:b5:f2:bc:72:33:72:21:a9:
         69:9f:f7:74:b6:30:0c:e7:02:67:0c:69:d5:ae:b7:87:f8:b2:
         c4:30:f2:df:bc:63:f9:fc:53:cc:21:a7:e2:94:65:e4:c1:02:
         cb:90:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:25 2025 by rpki-client