Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
File:                     d98b870b-d634-3a37-82c3-af55f7ef3032.roa (raw, json)
Hash identifier:          QaORhxxHRObG1KjfJPXV1BtIhultQk6pWfRCgIwN2lw=
Subject key identifier:   62:1A:66:D8:6A:30:E7:B4:29:EC:53:2D:C4:DE:2E:B2:3D:92:CC:D5
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285845DEC9467AD06689AF34476D80
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        64.95.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:46:7a:d0:66:89:af:34:47:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=39b70f53-8811-4526-b9c0-0d43871b0827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:4b:bc:38:17:87:02:b9:7d:b7:91:08:b0:
                    ff:64:c3:59:fa:60:2e:d3:5d:97:c5:06:d9:1a:6c:
                    f6:43:b4:6a:97:6b:a4:46:15:d3:6b:9a:cf:ba:a0:
                    42:95:40:90:43:f4:dc:dc:3b:07:91:8f:c4:9f:03:
                    d4:81:93:01:4d:18:38:5d:5d:3a:68:e8:7c:0a:02:
                    62:85:07:c7:8c:fd:b6:31:b8:63:b6:a7:b5:e7:58:
                    9f:3b:93:04:c8:3b:d0:76:a7:93:6d:c9:9a:7b:7e:
                    28:ab:40:de:66:04:7f:df:7d:24:d1:63:af:72:ed:
                    a0:72:5d:19:ff:ad:d1:c2:a3:b6:ce:8f:78:1f:40:
                    88:aa:eb:eb:e0:18:c7:2c:bd:88:38:9e:a3:9f:55:
                    f2:40:79:d1:cf:70:f3:83:9a:a7:f9:d1:e0:69:88:
                    03:3e:0f:45:1f:4d:73:09:e6:dc:17:d2:76:6b:b8:
                    c3:cd:75:fe:70:cb:9f:2a:c5:56:55:75:8f:de:8b:
                    ca:3b:45:c1:d5:25:c2:05:aa:28:3a:0b:20:3e:43:
                    82:54:fa:3b:39:47:64:5e:73:bc:df:42:2e:56:15:
                    2f:4d:92:bc:e0:b6:e3:46:79:15:64:87:d2:b5:6e:
                    a6:61:e8:86:f2:bd:13:ca:12:02:b2:29:ad:8e:8a:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1A:66:D8:6A:30:E7:B4:29:EC:53:2D:C4:DE:2E:B2:3D:92:CC:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:f5:ce:d0:1f:e6:47:76:d1:a8:a7:43:92:42:06:13:b5:
         31:1b:1d:83:6f:31:58:b7:c1:dc:db:3e:6d:48:93:ce:38:77:
         13:77:37:63:13:cc:0e:09:6f:55:66:e2:ee:f8:b6:7e:53:7f:
         f1:46:43:05:bb:49:fe:79:73:e4:a6:d8:1f:71:2f:b2:47:87:
         2e:e7:b9:79:57:a9:a2:4c:17:66:c6:d0:2e:24:d5:d6:05:b7:
         a2:08:2f:0c:bf:3e:e2:b3:bc:b6:2a:65:94:6e:c7:37:d7:c3:
         16:1f:49:cf:a6:ae:b3:f2:79:94:f0:7d:6a:91:92:4d:4d:fe:
         0a:6d:8d:8e:9c:1c:97:e5:17:d2:fc:c5:f6:de:de:40:4e:23:
         4a:13:f0:bf:23:ba:97:7e:7a:28:94:c4:4a:c7:47:d4:f2:ea:
         7f:1a:77:6d:52:0c:1a:e5:2e:04:71:ab:7e:10:ed:da:67:9a:
         41:ed:ab:0b:7a:67:68:71:d3:5f:38:a7:e2:4f:53:35:ac:61:
         9c:95:0d:d3:78:d7:73:05:f2:6f:fb:31:38:e3:d7:26:5f:4c:
         54:f5:6c:a7:46:a5:3f:b4:f6:07:f5:09:ca:78:3f:2e:aa:14:
         fd:4d:03:c7:b8:51:8f:54:92:25:c8:94:a1:f4:46:da:fd:e5:
         40:15:06:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:04 2024 by rpki-client on console-ams.rpki-client.org