Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/003ef55c-938c-39de-96e4-465693e66da1.roa
File:                     003ef55c-938c-39de-96e4-465693e66da1.roa (raw, json)
Hash identifier:          dvNo48uiUATuM9aZSuxDKSB9sXVNAf0CevCXA06VqXk=
Subject key identifier:   AD:97:24:38:4C:D1:08:15:32:7A:F2:06:11:D1:B8:52:3F:F3:BD:3E
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F43285847299B230E587C571668373280
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/003ef55c-938c-39de-96e4-465693e66da1.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     13807
IP address blocks:        64.64.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:23:0e:58:7c:57:16:68:37:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=1667838b-fd6a-4fb3-b5f5-97f859e4df47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:bf:17:21:be:75:b2:37:9f:dd:9d:f4:e4:
                    45:14:71:08:8e:98:a1:9c:54:cb:50:fb:ae:40:1c:
                    1c:9c:a7:b4:a1:72:75:a4:3b:4f:cd:ec:fd:d7:0d:
                    79:34:12:b2:63:00:b4:74:ec:0e:d4:ed:83:70:eb:
                    4e:19:66:64:0d:86:65:e7:eb:e2:56:6b:c8:a0:0d:
                    66:3a:f6:7c:a5:21:f3:71:54:fc:db:e3:99:cf:57:
                    12:d8:66:ac:1d:51:94:da:10:ce:ec:2c:3b:77:d5:
                    df:b4:eb:41:f0:60:bb:52:2d:7e:da:2f:76:ae:35:
                    a0:ba:6b:7b:52:42:5e:e4:13:e1:71:80:f8:b7:0f:
                    6c:b7:e9:ca:2d:6d:96:7e:51:36:24:b0:d3:e3:de:
                    1e:42:0c:2e:fb:f3:75:d2:d7:03:29:26:a3:68:c0:
                    f7:ba:53:03:d4:5e:9d:68:f3:b5:d2:ad:07:76:5b:
                    69:60:ec:7f:1c:99:f5:62:d9:e7:37:75:a7:58:04:
                    30:3e:ae:65:0a:31:ed:b5:70:6d:30:ac:5c:0c:8f:
                    7a:be:09:b1:8d:bb:6e:41:11:50:a9:c8:16:80:55:
                    88:1c:95:d8:85:b8:15:52:61:6d:5c:a3:34:ca:d7:
                    51:77:c7:ef:7a:97:8b:01:cc:51:a9:d3:47:28:af:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:97:24:38:4C:D1:08:15:32:7A:F2:06:11:D1:B8:52:3F:F3:BD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/003ef55c-938c-39de-96e4-465693e66da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a3:b2:45:9a:41:1f:7e:2f:28:65:3e:ee:0e:31:ec:83:78:
         5d:13:7b:88:25:db:b6:5b:3b:0d:9b:31:6c:3c:41:c6:b4:2c:
         99:52:c9:8b:19:40:05:3e:e3:0e:00:87:26:15:04:4c:57:f5:
         58:7d:ff:06:bc:53:50:ee:c6:88:50:c2:f8:8b:b2:d8:f3:38:
         25:18:6e:9d:86:5d:75:43:dc:7c:78:69:04:33:32:f5:2b:14:
         fd:bc:f4:f5:35:a1:2a:78:bf:b6:10:c2:35:0b:97:31:71:a0:
         4b:0f:d9:98:3b:45:86:e7:76:90:0d:37:85:c1:eb:a7:2f:6a:
         ad:c7:52:5c:d9:d3:e9:de:30:ca:1a:3b:14:2c:c5:9a:34:81:
         a4:a0:dc:b6:1d:f5:41:5e:0e:43:a5:1a:d7:5a:24:ff:d8:8e:
         13:87:0d:04:f6:83:b4:fa:5a:df:1a:24:ba:01:bc:ab:41:d2:
         af:55:7d:e5:8d:90:58:c7:59:88:ea:8c:62:3d:3a:d0:2c:8a:
         2c:71:cf:98:88:09:c0:83:4a:2a:4a:91:30:00:d4:78:b7:6a:
         e6:d2:ec:f7:de:e1:88:9c:8d:fe:ed:2c:09:9d:3c:17:01:35:
         22:a0:6f:12:3d:a3:1a:dc:18:4e:ad:1f:fa:ed:71:2a:ae:85:
         56:6c:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:40 2024 by rpki-client on console-ams.rpki-client.org