Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/161260de-0c84-340c-9bc8-33243c954b2a.roa
File:                     161260de-0c84-340c-9bc8-33243c954b2a.roa (raw, json)
Hash identifier:          Sm1sDaKRZQkeVRsRybdjBjZqfAmAJvYh5EdrOeBg74g=
Subject key identifier:   5A:DB:D7:05:A7:D8:4B:71:65:1E:38:A6:AF:FD:77:29:86:55:2E:09
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584548FCED79C66738F69C589480
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/161260de-0c84-340c-9bc8-33243c954b2a.roa
Signing time:             Thu 21 Mar 2024 21:13:54 +0000
ROA not before:           Thu 21 Mar 2024 21:13:54 +0000
ROA not after:            Wed 19 Jun 2024 21:13:54 +0000
asID:                     61317
IP address blocks:        64.113.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:ed:79:c6:67:38:f6:9c:58:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Mar 21 21:13:54 2024 GMT
            Not After : Jun 19 21:13:54 2024 GMT
        Subject: CN=0bec2953-a9e6-4820-98c3-07a16cb43210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:aa:a9:5b:e3:ef:73:15:da:59:28:d2:ff:
                    db:a6:2e:e1:3b:dc:49:5d:05:54:c1:a7:3d:05:9f:
                    ec:5f:01:62:4f:72:76:69:09:b5:85:80:dc:8d:43:
                    4c:52:b5:92:a9:d1:50:94:aa:00:c2:3d:af:1c:12:
                    69:32:ab:f9:d7:ef:4c:ac:5c:96:29:45:d4:84:9e:
                    78:3e:2c:10:c7:f0:51:97:3f:b9:8e:82:b4:04:9a:
                    ab:3a:a8:ed:c7:72:04:7c:9c:25:fa:94:82:6e:1d:
                    1d:d8:63:bf:85:da:4d:a8:10:08:78:84:72:28:60:
                    f7:da:83:fc:c9:3a:e1:a9:d1:9e:32:f9:76:97:d3:
                    1f:77:b6:18:ce:c6:2e:4d:1a:3f:96:f7:6a:06:8a:
                    c6:b5:49:e8:dc:9a:4d:50:91:73:16:74:0d:11:1c:
                    80:c5:99:3f:e6:ee:14:d9:c1:7a:68:66:2d:2d:d3:
                    5f:8d:7e:43:9c:83:fc:3b:8d:30:40:7c:1d:af:7c:
                    32:0c:bd:b9:c3:8a:02:79:91:a2:ef:8e:16:19:4a:
                    0d:50:9c:18:e9:5e:d1:32:e4:2f:3e:23:90:83:c0:
                    d7:65:6e:02:f7:0c:7f:6d:aa:ae:a3:99:f5:79:be:
                    ea:56:19:47:7a:2d:8a:4e:d4:3d:2a:fc:00:5f:ba:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DB:D7:05:A7:D8:4B:71:65:1E:38:A6:AF:FD:77:29:86:55:2E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/161260de-0c84-340c-9bc8-33243c954b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:62:94:cd:cc:c1:e5:3f:c9:8c:a9:8d:90:0b:e0:fc:e6:
         4d:c0:3e:0e:09:63:b7:c9:20:b4:e0:d4:0a:cf:54:81:c3:a4:
         32:8b:4b:72:b1:02:a9:ef:f0:ac:f9:22:07:3e:8a:16:1e:bf:
         0a:38:69:7a:40:30:65:e8:82:ab:ca:91:40:29:d4:e0:29:e0:
         35:87:90:b3:c0:c8:72:ff:ac:79:a2:6f:ba:8f:e8:77:b2:c7:
         2e:4a:17:0a:65:7a:dd:6e:cf:29:32:b2:b0:34:c0:73:f4:03:
         ec:20:6c:79:c8:09:2a:41:1d:03:08:24:98:81:19:62:c6:93:
         05:18:11:f9:bf:b7:c7:26:9d:9e:d0:5a:66:02:02:fd:7f:02:
         a0:99:fe:25:87:9d:fc:24:96:d0:58:c0:d2:9f:e5:a9:8b:96:
         fa:a2:f5:08:82:f5:c3:46:f1:fd:38:a1:55:16:35:d5:77:c7:
         37:a1:2e:32:b9:37:2c:81:86:26:bd:84:78:4e:c2:f0:51:d3:
         4f:51:70:11:c3:8e:05:da:90:12:7b:d1:9c:85:18:d8:15:94:
         08:17:a8:48:95:a8:57:4e:c3:23:94:f9:91:80:6f:42:6a:e6:
         30:06:df:d1:06:1c:84:e5:4d:da:d7:04:43:c5:8b:71:6d:1f:
         ce:05:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:57:17 2024 by rpki-client on console-fra.rpki-client.org