Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa
File:                     7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa (raw, json)
Hash identifier:          QgRt8BjxCa1LTFY57YRRfU/CeOLHMgWFnC5kjrVPj9g=
Subject key identifier:   E8:4E:F1:BA:04:6D:EB:7B:FF:DA:7F:DC:6D:6D:E9:03:CD:70:6E:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B3F8E4152AA21779F4880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     394996
IP address blocks:        64.71.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:3f:8e:41:52:aa:21:77:9f:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=47e3678f-f059-4088-a19e-2771d03c7a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:9b:0b:09:c2:6f:cf:22:2e:df:ec:1f:c5:
                    12:ff:bf:4c:2d:24:fc:a7:54:42:62:76:30:a0:d2:
                    80:b2:6c:6c:28:44:86:bc:8d:fc:3d:78:55:d5:5e:
                    90:93:b7:21:ff:9d:2d:7e:f5:49:ae:6e:b9:74:5b:
                    b9:04:40:f9:78:1c:7d:3a:15:c9:30:9f:be:4f:0c:
                    13:04:36:0a:3d:69:d8:bf:17:20:77:d4:27:1f:2b:
                    b4:c2:be:de:66:66:67:41:17:34:81:00:40:36:69:
                    72:dd:7c:3d:d4:98:8b:e2:17:11:0d:b2:ca:fe:5c:
                    0d:bc:51:b9:5a:d9:c9:3d:49:08:9f:99:97:9f:e3:
                    b6:2f:e2:f3:ee:04:9d:71:12:fc:99:dc:ff:7f:be:
                    6a:79:3d:16:33:c8:5d:6d:15:0a:6a:2b:8b:cd:b9:
                    26:63:4b:60:76:1f:e4:b0:26:a7:43:1f:61:1b:8c:
                    e0:23:33:ca:27:84:32:97:ab:56:3f:28:c2:6e:5f:
                    fa:b1:16:2f:02:af:88:31:1b:a4:84:14:f2:d6:e7:
                    30:5c:94:f4:c4:67:bf:4b:e4:00:ec:a3:2f:51:82:
                    a7:ea:7a:a7:5f:e1:52:7f:f7:4a:5a:c2:2b:90:86:
                    9d:4d:4b:a3:74:9b:5d:69:00:09:a4:37:22:aa:16:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:F1:BA:04:6D:EB:7B:FF:DA:7F:DC:6D:6D:E9:03:CD:70:6E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:af:9b:ca:79:94:e6:fd:5e:85:16:36:63:5b:0b:90:ff:
         1d:32:a2:3a:b2:d0:2c:eb:5b:89:f8:c4:1a:7d:9d:f2:1a:39:
         98:47:92:65:b4:1d:20:f5:8d:5a:60:d4:33:36:9a:bc:38:92:
         42:27:26:7a:78:2d:08:c9:8a:f7:2a:af:b8:2a:6e:65:09:91:
         20:1c:72:93:ac:6e:6d:1c:51:95:8a:7c:be:36:c0:83:38:c5:
         be:15:a4:d5:f8:2a:25:bb:5b:f1:70:7d:e5:00:fb:27:c5:d0:
         17:2a:2b:68:97:8c:1f:b8:16:09:3f:f6:af:37:eb:93:be:16:
         c4:32:e8:9a:03:36:53:e2:be:8a:2e:2d:79:5e:52:9e:3c:bb:
         1f:c6:33:e2:9a:4f:08:7b:08:d1:8b:b4:1a:0b:f3:aa:fb:73:
         c1:29:d5:66:c3:c3:79:8f:fc:26:73:69:33:2a:e1:69:93:94:
         3a:ca:df:8d:d2:da:9b:0a:3c:e2:51:85:90:e4:78:f5:31:3d:
         ad:77:64:77:30:44:9f:09:67:29:86:71:0a:5c:e2:25:86:ea:
         25:42:fc:08:dd:3c:95:e4:f1:c3:b7:f8:9c:4a:a8:2a:5a:a8:
         46:d4:5f:16:26:6d:c1:f5:8a:26:67:1f:0b:9e:d5:06:20:9e:
         54:8b:b0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org