Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa
File:                     f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa (raw, json)
Hash identifier:          OnbmTeO7g1hKF9YeWkBPN8/yJget6xbZuvDS2VddtlI=
Subject key identifier:   C2:C8:7F:97:F4:EA:EE:96:AB:0C:89:97:24:FC:87:E3:68:35:05:1E
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285845ADEE171BC6D45AA3B9E0F000
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     25645
IP address blocks:        64.92.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:17:1b:c6:d4:5a:a3:b9:e0:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=a4afce40-7828-4e6f-82ba-b38e7f6ba9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:5e:e2:ff:54:43:ee:81:c0:d6:71:81:ac:
                    93:c4:02:28:2b:b3:db:6b:ab:18:cd:4e:47:d8:f3:
                    ee:28:77:fb:be:91:13:bf:37:7e:05:57:c0:89:0a:
                    bf:67:37:d9:d3:db:3e:be:9b:e7:78:d8:3d:5b:ff:
                    58:d4:c2:e5:bb:e3:9f:2a:6f:77:66:40:51:ea:ed:
                    10:93:4b:85:72:18:58:ab:27:a7:e9:34:dd:26:e6:
                    d6:f1:2d:02:b3:fb:8a:48:98:16:7b:e2:1f:81:0a:
                    37:17:8c:40:10:da:a5:a1:43:72:dc:74:91:da:0b:
                    fb:e7:40:cb:b0:50:a0:bd:69:3c:bc:98:67:11:a5:
                    8f:a4:52:cb:8e:71:94:2b:59:c7:30:96:11:1b:89:
                    e3:ad:4a:48:84:f0:fc:3d:14:01:69:e8:b3:b2:ea:
                    f5:de:d9:6e:7d:26:9a:7e:52:cd:ce:7e:7f:bd:5a:
                    90:f9:2b:ab:8d:3b:34:b0:13:05:16:4d:30:eb:97:
                    32:e7:d5:30:e1:11:4a:2c:75:fe:d9:d5:93:70:00:
                    13:c0:34:7d:c1:ab:be:7c:0e:e5:6c:4c:3f:5e:ac:
                    ee:a3:95:df:d9:db:7c:fb:48:82:c8:0f:27:d5:80:
                    af:7e:4c:1a:f9:8f:0f:18:45:11:43:60:f6:c0:6f:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C8:7F:97:F4:EA:EE:96:AB:0C:89:97:24:FC:87:E3:68:35:05:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:f7:19:36:1e:69:3f:77:5e:f5:1a:98:51:8b:b4:56:81:
         2a:81:45:3d:92:86:ca:91:13:82:a8:43:c3:e2:c8:d7:6a:de:
         7f:48:5c:f6:96:2d:49:fb:8a:2f:ef:4d:c2:d0:d1:dc:6e:e2:
         03:37:c4:6a:31:4c:ea:69:ee:41:0e:b3:8f:04:19:a1:b2:0a:
         7a:90:19:7b:a1:77:f5:64:d4:9f:13:de:50:6b:7e:4f:21:03:
         a1:9f:a8:e2:93:9f:91:71:a7:d5:24:3a:c5:94:87:7a:05:e6:
         92:f9:19:99:0e:3f:1d:96:37:f8:dc:05:f7:c4:42:7e:93:c4:
         4c:65:72:a6:e7:9a:07:94:d8:57:c4:b6:ef:a0:41:cb:cb:e7:
         1a:82:c7:17:d6:33:6b:c0:58:9a:97:65:6f:06:9c:30:91:c1:
         02:ae:36:01:a7:eb:63:05:d6:8f:dc:ce:11:97:1f:05:93:2c:
         b8:9c:5b:cc:9a:ef:d7:8a:7a:2d:18:d4:59:b1:5b:8b:5b:a5:
         72:7b:d3:dc:3c:7f:ca:da:7a:d6:8d:e6:2d:fa:64:9e:b6:62:
         d6:a3:c5:db:5a:73:84:15:c0:e2:10:36:37:1a:81:72:4f:49:
         25:31:30:c9:68:6e:35:be:67:ef:d3:0d:da:58:bd:98:ec:97:
         b7:7d:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 14:57:01 2024 by rpki-client on console-ams.rpki-client.org