Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
File:                     060afa88-c689-36bf-8da3-d16c2159ba5c.roa (raw, json)
Hash identifier:          c3dJLhSizGPbUqRmOoIC9sdzYnqD063J94J1ToOTJQs=
Subject key identifier:   39:38:8B:2A:B5:B3:9D:6F:D0:A4:DB:37:87:EA:D7:D9:30:27:5B:3C
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F43285844FE2AE5A25533D3F38CE42B80
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        64.6.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:e5:a2:55:33:d3:f3:8c:e4:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=4e961fd6-7197-40f3-9f05-e93c25f93fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:f4:d2:36:27:f7:a2:22:b9:14:b4:3b:eb:
                    56:a2:a3:e8:e2:c2:36:23:e0:f9:46:0e:2b:02:eb:
                    ca:e6:c5:8f:2d:50:66:66:83:b0:47:01:92:04:8f:
                    27:49:fa:ab:0d:f9:28:b9:8d:f9:db:35:da:af:1c:
                    01:ed:3e:26:22:71:a5:67:4c:fb:f4:53:b4:d2:f9:
                    cc:7f:ea:a7:9c:c3:6b:16:5b:62:56:18:b1:d9:3c:
                    e0:4c:fc:63:e1:8f:ea:2b:a9:1b:fd:f3:2a:09:82:
                    ff:c0:3e:78:ba:55:73:0d:96:0b:c2:0e:91:48:16:
                    0e:52:fc:28:af:32:d8:39:07:55:2c:8e:c2:23:b2:
                    5f:1d:af:0b:dd:56:29:37:a8:e4:04:89:fa:9e:73:
                    90:22:bc:48:a3:e8:5e:a2:aa:c2:d7:21:8f:4d:3a:
                    4c:fc:8e:b1:c1:4d:40:60:50:5b:50:53:43:75:81:
                    8c:64:1e:87:5b:d9:07:81:2f:93:60:a4:9f:fb:5c:
                    e2:e5:c0:1d:51:d1:27:d9:94:62:6a:4b:21:e9:8d:
                    27:b0:f6:fe:02:4d:88:e5:fc:74:bc:c2:17:1a:1f:
                    73:b6:2c:ee:43:3e:6b:2c:99:76:a6:b1:24:0f:f5:
                    2c:a4:3e:1b:46:f9:bf:a1:58:b7:d2:3a:79:76:08:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:8B:2A:B5:B3:9D:6F:D0:A4:DB:37:87:EA:D7:D9:30:27:5B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:02:8f:c4:17:12:f3:7f:2e:60:92:bd:4b:37:9e:f3:fc:
         93:50:c4:7e:de:e4:d8:62:f3:24:ec:31:c4:df:d6:7b:42:69:
         da:e6:78:3d:ad:6c:ce:a3:da:c2:00:19:4f:46:e9:e1:be:2f:
         44:03:1e:1b:78:66:04:9c:48:1e:92:4f:94:e4:c3:83:09:67:
         0b:81:5c:8f:07:d4:2e:86:01:a9:c4:ee:04:1b:da:6d:2f:b1:
         9a:f5:cd:55:75:01:20:11:3c:01:6c:8a:8e:49:8d:73:67:c4:
         4b:82:e9:75:ab:33:a6:9e:08:73:39:c1:d2:00:be:b9:6f:16:
         73:30:cb:a3:f8:30:44:3c:64:4a:34:b8:76:81:a6:91:30:3e:
         24:63:4e:f6:23:36:e4:79:be:43:12:9e:16:dd:bb:e6:9a:e5:
         32:13:35:85:01:62:36:68:36:fa:d3:cb:1f:57:80:42:a8:c6:
         a1:48:4f:ff:4b:30:3f:08:30:09:40:76:30:ab:65:64:53:d6:
         02:87:6e:af:eb:af:df:cd:89:b6:1c:30:19:80:f6:28:b1:de:
         ca:c6:f6:61:85:00:25:00:30:da:82:e8:e5:32:67:e8:e5:2e:
         81:7e:42:da:b6:4a:74:5c:5e:cd:d2:0b:81:43:29:76:dc:51:
         2f:5f:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:34 2024 by rpki-client on console-ams.rpki-client.org