Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/586cd77f-ffd6-375a-9e7e-6574f6b2f295.roa
File:                     586cd77f-ffd6-375a-9e7e-6574f6b2f295.roa (raw, json)
Hash identifier:          y24BfdWgszUtG7hZNkp6hb+ytySxxlM8hdgwl/4egFk=
Subject key identifier:   90:F0:E2:AE:F9:B4:05:92:13:EE:B9:9E:CE:3B:4A:E9:FE:13:CE:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584777D4F0587189CCE8FCC7E510
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/586cd77f-ffd6-375a-9e7e-6574f6b2f295.roa
Signing time:             Tue 08 Oct 2024 01:30:11 +0000
ROA not before:           Tue 08 Oct 2024 01:30:11 +0000
ROA not after:            Mon 06 Jan 2025 02:30:11 +0000
asID:                     210805
IP address blocks:        64.62.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:d4:f0:58:71:89:cc:e8:fc:c7:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  8 01:30:11 2024 GMT
            Not After : Jan  6 02:30:11 2025 GMT
        Subject: CN=9f9d789b-0217-4501-867d-1c17185c6dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:21:e7:60:d5:07:90:45:42:48:4b:47:17:
                    45:4b:b6:20:37:77:6a:a2:88:63:c1:e2:93:51:95:
                    67:24:db:4b:fb:b4:1a:3e:c7:a9:14:1d:23:43:61:
                    7f:eb:0f:bc:11:6b:8d:51:d2:44:ca:0f:9f:30:9f:
                    46:80:08:14:7b:4b:0c:35:3b:44:dd:7e:58:cd:b8:
                    60:b6:fd:18:3d:f1:fa:0a:b1:ed:aa:83:6a:3a:4e:
                    07:a8:b7:25:94:68:55:04:51:fc:a1:c7:dc:1d:65:
                    2a:2b:e1:2a:72:25:77:d3:ea:73:40:67:4a:9b:9f:
                    67:94:c9:cb:62:7e:7d:4e:2c:32:b6:fe:f3:5c:1e:
                    a5:2f:b2:87:0d:3e:e0:8b:fa:ca:e4:1b:15:45:1d:
                    c0:e2:d5:dd:d6:c5:6f:76:88:3c:56:ed:c4:58:39:
                    2d:21:3f:84:fe:f2:9f:11:c3:e4:59:1d:89:2a:bc:
                    b8:e6:b5:83:d6:bd:93:86:fa:48:e1:73:ad:67:2c:
                    1f:4d:5b:63:ff:25:82:d0:3c:dd:58:de:c1:55:f7:
                    a8:b3:fa:48:d1:1c:62:90:81:e8:78:a0:54:7f:18:
                    89:36:79:45:38:53:d1:f1:61:c8:73:c4:0f:cd:2d:
                    d2:ee:34:a9:e6:0f:48:22:36:b1:90:be:c5:48:20:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F0:E2:AE:F9:B4:05:92:13:EE:B9:9E:CE:3B:4A:E9:FE:13:CE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/586cd77f-ffd6-375a-9e7e-6574f6b2f295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:3e:8b:c7:05:04:6a:e5:6b:2c:68:14:e5:2c:5c:e4:0e:
         66:7d:fa:60:cc:2e:2e:82:1a:3b:4a:85:7a:94:ef:e4:31:cc:
         28:99:68:18:8f:2a:78:18:c8:a9:6b:21:8c:e4:99:eb:12:7d:
         37:f7:dd:66:db:c7:4c:cc:19:ae:22:09:d9:6a:02:9d:3d:ac:
         95:5c:ed:c4:0f:1b:ef:8d:06:a1:ac:fd:82:8d:91:70:c5:f3:
         c3:fc:0d:8d:25:3f:a7:dc:6a:de:a3:43:5b:94:79:a7:88:9e:
         3e:43:f4:3b:3d:db:97:4e:58:62:c2:f6:96:df:57:a7:3c:f5:
         c3:e1:95:e8:11:d6:5b:af:9c:43:8c:d7:5a:b2:5c:53:aa:60:
         fc:b2:a5:27:33:2e:5d:31:1d:41:73:15:80:9d:79:2b:65:3c:
         11:13:cf:72:d6:12:4d:ac:3a:88:69:43:8d:fe:70:d6:bb:b0:
         02:d0:15:3f:54:b3:62:00:09:44:bc:01:8c:7b:ab:04:ef:af:
         44:6c:cb:9a:3b:e9:03:04:1c:5f:6f:cd:39:9a:4c:e2:d1:4f:
         5c:4e:4d:8f:11:ab:e6:b0:2b:e2:f8:df:02:a9:16:79:80:c4:
         b0:90:dd:bb:df:fd:b5:f7:c9:9a:f2:8e:ac:1a:bd:98:20:48:
         53:d2:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org