Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf/ba2095aa-b8e8-383d-909b-9cfeae5f8ba0.roa
File:                     ba2095aa-b8e8-383d-909b-9cfeae5f8ba0.roa (raw, json)
Hash identifier:          HinjE/23iJh0h6OrZ3PR10LQeJLzsiQTw8XKoSrqYqI=
Subject key identifier:   09:99:C4:A6:57:3B:C3:0D:B8:6A:01:2F:36:89:44:24:96:88:2D:7A
Certificate issuer:       /CN=ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf
Certificate serial:       010D0C9F43285845C873984F0B9AC47B48226900
Authority key identifier: FD:16:F3:7E:75:58:41:35:11:89:43:EE:74:9C:D4:8C:07:7B:A3:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf/ba2095aa-b8e8-383d-909b-9cfeae5f8ba0.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        64.40.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:98:4f:0b:9a:c4:7b:48:22:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=e44bdf3c-ce5a-433d-ab5a-0a7f91b41a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:b6:43:ec:5d:75:c1:47:f7:17:1c:d6:dd:
                    29:22:82:fa:04:ff:66:59:d2:25:91:bf:08:5b:58:
                    72:60:02:69:f9:77:06:2b:7c:20:42:d6:1d:99:c0:
                    5f:9a:d2:5c:29:37:ea:49:ee:1a:51:07:b6:de:e4:
                    f8:fe:9f:c3:37:4e:c7:f9:fe:6d:b8:a0:45:49:b6:
                    e7:9d:c3:da:5d:62:89:0c:cc:46:86:cb:fc:fe:39:
                    37:81:e3:ca:cf:06:df:b8:d1:0a:01:aa:0b:c3:5b:
                    88:f5:a2:3d:6b:1d:fe:36:cd:a5:06:5a:fd:2e:60:
                    9f:57:24:6b:5b:57:6a:a7:0d:b7:1b:82:44:bd:91:
                    c4:0f:32:f2:dd:cb:80:65:c8:fd:31:19:25:4d:5f:
                    cf:83:01:9f:cf:26:21:56:c2:ce:9d:64:9d:f8:5e:
                    6a:1b:07:4d:7d:0f:c0:7a:05:4b:bc:cf:4b:75:d8:
                    ad:33:4a:de:45:40:be:03:2c:99:34:17:15:2a:21:
                    e9:47:97:d4:bd:aa:a1:25:5b:00:03:b8:aa:0e:06:
                    fc:15:85:6e:72:76:72:cc:77:63:7a:8b:47:67:21:
                    20:68:e5:c1:56:fc:1e:dd:98:22:71:0a:fc:f3:f6:
                    8e:d5:05:0c:2f:81:17:9b:6d:64:7c:6e:9e:7c:c2:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:99:C4:A6:57:3B:C3:0D:B8:6A:01:2F:36:89:44:24:96:88:2D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf/ba2095aa-b8e8-383d-909b-9cfeae5f8ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf.crl

            X509v3 Authority Key Identifier:
                keyid:FD:16:F3:7E:75:58:41:35:11:89:43:EE:74:9C:D4:8C:07:7B:A3:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0ac4d2-54a9-4fce-bdd2-187c4f0410bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:de:29:8e:bd:a8:96:55:58:77:84:a2:32:fe:d3:15:24:
         36:01:b2:9e:b5:de:78:fe:a8:01:06:28:94:47:68:12:9b:71:
         db:18:ed:b1:85:88:ee:43:d2:93:7f:32:70:e7:d5:b5:c1:55:
         ac:28:cd:25:5a:b2:d1:e7:10:fc:e4:0d:09:35:71:e4:6e:25:
         3b:72:28:f9:0a:dc:65:00:64:ee:62:41:bf:47:9c:16:a4:41:
         16:f9:ec:d5:dd:16:da:ff:bb:ed:c6:d0:47:f8:18:1a:3e:38:
         f9:fa:69:2b:8c:84:a0:79:4a:9f:df:5c:43:9c:9a:9e:a3:21:
         3f:eb:de:a6:9e:60:4c:fd:31:76:49:06:be:09:f9:3d:1e:46:
         37:35:a0:6d:0f:dd:45:c8:e1:8b:4b:45:fb:cb:5d:3c:85:5f:
         4b:88:60:c3:84:b9:4e:42:cd:a5:9c:76:bc:34:fe:5e:2d:86:
         1d:f6:3d:1a:3e:e6:21:8c:4e:ff:06:36:fd:42:ef:82:a2:d8:
         c3:5b:b5:bc:1b:84:de:d6:00:3b:d6:ee:c6:9b:c3:82:24:d8:
         84:c1:78:56:68:5b:68:79:62:45:a4:b9:8c:47:35:29:d5:1d:
         41:fb:38:6a:90:63:c9:cf:18:40:40:1f:f2:dd:84:03:35:be:
         f6:a5:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:03:00 2024 by rpki-client on console-ams.rpki-client.org