Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a280e068-e28a-3c47-af21-133c66c16eab.roa
File:                     a280e068-e28a-3c47-af21-133c66c16eab.roa (raw, json)
Hash identifier:          Bz0gVlvqMUxUvYPcr3lCCBd3FcOy4MkA3PN/2HBlAIQ=
Subject key identifier:   61:60:90:97:DD:82:B0:BB:DF:20:59:62:B8:0F:3F:5C:66:2C:3D:66
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858450EEAD3F5B649DDAF6F236080
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a280e068-e28a-3c47-af21-133c66c16eab.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     36103
IP address blocks:        64.77.208.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d3:f5:b6:49:dd:af:6f:23:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=10528547-5c67-407c-8117-73ffa7d774f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:a6:b0:45:2d:8a:2e:21:08:b8:df:90:36:
                    a0:0e:71:af:43:c0:ad:ec:4f:c9:7b:fc:e3:8b:14:
                    41:9f:37:8d:79:5d:5f:87:45:4f:7a:bd:87:80:15:
                    be:bc:76:72:1a:e4:f6:99:18:17:f8:46:72:41:b5:
                    65:ac:ea:15:68:a1:36:16:5d:d4:46:6e:56:25:37:
                    99:ed:8f:98:af:08:d3:e0:21:bb:0e:e6:18:f1:1f:
                    82:33:8e:a7:36:a1:42:f6:d8:bb:5e:55:03:34:b6:
                    21:fe:2d:a0:e9:9f:c8:56:69:b2:84:bf:37:d5:79:
                    a7:0e:c0:39:c5:ab:2f:f2:a0:e2:50:d4:28:0b:0e:
                    2e:30:9f:85:e5:48:66:63:dd:80:03:d3:04:dc:6f:
                    71:da:78:7d:c0:e5:a6:e6:28:66:2c:8a:ac:e1:50:
                    9c:48:cc:48:c3:7b:43:b2:ce:9c:78:67:dc:c1:a0:
                    76:a6:95:72:c4:b3:40:bd:b1:80:8e:8e:c8:5a:84:
                    63:aa:c1:21:d6:e6:83:f5:c7:a1:5c:ae:81:98:b1:
                    64:3b:5e:fe:05:1e:28:8e:0c:9e:bb:c1:68:ef:94:
                    29:a7:89:41:c5:38:14:3d:e5:6c:bb:be:f6:c4:dd:
                    bd:1e:43:40:23:63:70:82:2f:8d:e0:1f:34:3e:1f:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:90:97:DD:82:B0:BB:DF:20:59:62:B8:0F:3F:5C:66:2C:3D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a280e068-e28a-3c47-af21-133c66c16eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:1e:c9:76:d6:72:12:b1:b1:80:b7:81:00:e8:f1:db:e2:
         1a:64:2e:c0:2e:11:22:9e:1b:09:2d:88:0b:5f:b3:b6:25:0a:
         58:90:4e:c7:02:6f:f6:da:d9:4b:47:14:17:4d:33:d0:ef:3b:
         03:b9:2a:e8:4d:0b:5b:cf:d2:49:ae:c2:e9:99:15:75:01:56:
         79:ca:bf:da:18:f6:7d:ef:91:cd:b7:80:9c:67:fa:01:78:67:
         65:6c:22:60:51:c6:6c:a1:c3:b0:40:33:56:55:b0:bc:3f:3a:
         d4:fe:a0:a4:e8:de:eb:fb:d0:01:26:34:2b:2c:d2:57:76:62:
         cc:9f:bc:92:63:af:e6:c5:e5:ce:1a:ab:22:c9:c7:e0:09:f1:
         66:59:15:92:14:97:94:ba:6e:8e:de:8e:67:49:65:61:e7:d8:
         cf:59:de:92:5a:e4:49:15:7b:96:ca:0a:02:b2:5b:e8:13:0c:
         f5:2c:e7:d8:c4:51:a2:92:3d:fe:a9:3d:22:e0:fe:c0:e9:42:
         ee:37:2b:23:94:8f:b8:35:09:c6:75:51:a8:c6:68:62:d8:00:
         89:8f:16:df:2c:f7:03:12:ef:a8:d9:af:bd:82:51:94:c7:4a:
         5a:b9:ae:ea:3a:4f:33:cf:64:46:26:e5:b1:a9:40:e6:71:db:
         26:d3:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:35 2024 by rpki-client on console-fra.rpki-client.org