Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
File:                     a87435cf-a6f2-3201-8a93-631966f582c4.roa (raw, json)
Hash identifier:          G2wH6qPhHCNiEOYIaGPkhK/Xdk2+pLOOBAiwTOgP75c=
Subject key identifier:   48:A0:94:7D:02:9D:28:16:F4:C1:FA:01:F3:DE:48:5C:DD:9C:5F:F1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858473A5B7BD7D845C106AE25B7C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     16509
IP address blocks:        134.224.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7b:d7:d8:45:c1:06:ae:25:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b37d8e20-8ff9-4f5e-ac9a-0e5892830356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:c3:08:73:19:5e:79:64:e8:3d:80:fa:24:
                    ac:65:cb:1b:c6:8f:f9:db:91:93:35:1d:27:75:6d:
                    f0:84:46:ff:de:f7:1d:36:2e:0a:92:48:0d:32:77:
                    59:9f:69:12:5d:ba:1e:02:9d:9d:92:bc:d7:5d:aa:
                    ff:ab:e8:f6:1b:2c:0c:2f:50:70:b6:4d:fb:c7:16:
                    ee:a0:36:bc:88:34:7a:44:96:92:2d:c2:30:75:4d:
                    fe:ee:9f:64:72:82:ba:ed:b9:b5:d4:f0:7b:2c:a9:
                    8a:e2:a3:8b:01:47:c1:70:69:97:4d:07:27:ff:36:
                    c3:0a:ef:34:cd:0f:d1:34:24:ae:29:76:08:f2:e4:
                    40:e3:8a:fb:5e:c3:03:0d:86:f7:34:23:35:f2:65:
                    3c:6a:6c:2b:73:fe:82:a3:16:fd:03:c6:68:31:27:
                    a0:15:fc:51:9d:30:67:80:d5:c9:ea:66:e8:db:7a:
                    3a:f2:9a:b8:fc:e5:bb:6b:18:e5:71:d0:5f:5a:0b:
                    2d:59:ea:7f:5a:1e:02:72:f8:46:7a:10:4f:12:18:
                    9b:83:81:77:82:09:4b:73:c0:72:e4:a1:6e:56:f6:
                    c3:82:2e:d0:86:c8:f4:2c:55:07:81:7d:67:00:3d:
                    32:93:5c:da:3d:56:16:4e:1b:0e:54:c3:c5:d0:f7:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:94:7D:02:9D:28:16:F4:C1:FA:01:F3:DE:48:5C:DD:9C:5F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:e7:0a:7b:52:b6:6c:cb:c6:62:1e:f5:fe:e3:12:34:7b:
         fe:9d:ad:72:f6:4a:12:e5:68:f0:ad:ba:d3:ff:e8:e5:4d:4c:
         93:8c:e9:98:19:84:34:58:2f:16:89:5c:a6:ab:d1:a5:bf:a9:
         6f:a3:d0:c1:74:eb:f2:4b:91:9d:e9:5e:f4:8b:9d:c0:22:9c:
         8f:a5:4e:57:05:fa:95:c4:ad:66:8c:32:0e:c0:63:d1:17:ae:
         fe:98:c3:b1:df:e3:cd:a8:46:bf:32:7e:94:07:33:b2:b5:95:
         24:25:69:8e:ba:88:51:f0:5f:ab:06:31:31:75:79:ff:d4:dc:
         62:17:e3:a9:ad:56:78:29:b9:c0:b8:5a:20:01:2d:af:7c:1d:
         9f:64:96:74:b5:68:8c:32:63:a9:07:3a:94:fd:1a:f8:10:db:
         36:75:55:7b:f6:6e:49:af:94:16:45:e7:28:f9:bc:24:ec:95:
         56:77:30:24:46:f0:2e:92:d0:58:a4:a9:fd:4f:7a:32:48:cc:
         2c:4e:d9:ba:8f:aa:dc:4a:11:77:7f:a1:f6:13:0d:ae:fe:e6:
         46:98:e3:cc:09:d7:8b:36:a3:ff:13:c2:33:52:18:e5:14:43:
         33:9d:58:bc:7b:ee:c0:37:11:d0:37:12:95:21:58:1d:66:37:
         a2:2c:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:51 2024 by rpki-client on console-fra.rpki-client.org