Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/008153be-ba18-36dc-affb-c3ea2686731f.roa
File:                     008153be-ba18-36dc-affb-c3ea2686731f.roa (raw, json)
Hash identifier:          u2MDOl2vjBfW4IC7t1O2E6RNIDZwy4lsP6Fn1ab6M8c=
Subject key identifier:   DC:74:B5:EE:C5:B3:E9:DC:E3:53:28:55:D1:89:C4:31:42:6F:16:E7
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285845490591BA015636E4870FAAC4
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/008153be-ba18-36dc-affb-c3ea2686731f.roa
Signing time:             Thu 21 Mar 2024 21:31:18 +0000
ROA not before:           Thu 21 Mar 2024 21:31:18 +0000
ROA not after:            Wed 19 Jun 2024 21:31:18 +0000
asID:                     36040
IP address blocks:        64.15.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:91:ba:01:56:36:e4:87:0f:aa:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 21 21:31:18 2024 GMT
            Not After : Jun 19 21:31:18 2024 GMT
        Subject: CN=c7e557d1-86e9-4464-bd9a-43da02245910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:ee:65:82:29:d1:89:08:ec:8e:36:6e:a9:
                    a0:a1:bf:55:8f:91:59:26:d6:3e:98:c2:75:b7:d9:
                    29:ff:43:48:e6:e1:74:a8:3e:a1:74:11:ef:3e:86:
                    71:11:7b:3e:66:c4:53:7a:2d:41:80:f6:de:67:8d:
                    62:ae:8a:1f:2b:ba:97:35:b0:a3:72:37:af:fb:b9:
                    cd:fb:3a:71:2f:3b:4d:07:9f:3a:ca:9f:d9:ee:01:
                    8b:27:74:c8:88:20:e1:5b:c4:cf:9f:56:39:24:5d:
                    2d:d8:a4:47:f0:f3:11:49:7f:54:87:56:b3:4f:54:
                    59:f5:78:d2:a8:1d:f4:c2:62:b0:61:07:60:2e:64:
                    7b:6a:20:62:b1:1f:55:0d:93:e4:93:67:c0:31:11:
                    95:17:0e:96:73:af:3e:43:0c:04:7e:84:df:49:c5:
                    42:26:0a:4a:38:bf:5b:1b:f5:6a:24:d6:71:b1:c4:
                    4e:db:a8:30:01:88:7b:5b:0b:61:79:45:f9:95:5b:
                    02:17:2b:bd:a6:b4:d2:5c:af:19:7e:78:57:f8:cd:
                    c3:1c:37:0a:e2:9d:0c:a0:6e:bc:c3:fa:17:69:a3:
                    b1:ca:6a:f8:5f:a5:01:42:42:5d:66:a0:b0:7d:e4:
                    99:14:c2:90:43:7c:96:d7:dc:97:fe:95:cc:77:d5:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:B5:EE:C5:B3:E9:DC:E3:53:28:55:D1:89:C4:31:42:6F:16:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/008153be-ba18-36dc-affb-c3ea2686731f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:32:b0:73:25:19:41:70:bb:8a:d6:c9:37:9c:71:66:24:22:
         b5:e7:f9:01:72:5a:f2:58:3c:25:08:33:be:03:d5:be:e7:43:
         e3:9f:df:1e:bb:7c:5f:91:af:23:43:98:5d:49:20:6d:99:15:
         14:27:bf:c5:a3:ad:f7:ae:f4:50:e6:c9:47:36:d6:28:48:a6:
         c2:7e:02:4b:77:f4:f5:38:e2:4a:ab:dc:ff:9a:a7:3b:2c:b2:
         e6:02:ca:97:c9:ac:4b:32:38:8d:9d:e4:85:f2:eb:44:8a:b7:
         49:fc:b5:49:bf:da:c1:a8:60:e2:70:20:0b:67:b9:f5:17:ce:
         c2:43:c7:0c:7b:40:51:93:19:47:e3:3a:64:70:6b:00:d6:ec:
         c6:0f:0a:53:54:3f:ce:db:4c:46:a9:43:83:05:38:59:a5:ab:
         3a:0f:3f:a8:27:17:08:54:a0:a3:db:7f:41:7e:77:be:b7:92:
         bd:87:2a:00:67:bb:cd:2f:9e:ac:5f:9d:b6:ae:66:51:64:75:
         af:1d:d4:e7:e6:81:2f:fd:de:53:1c:b3:8a:12:15:39:c7:13:
         f5:7c:b6:aa:0c:f8:a1:26:05:c2:e4:e7:32:c1:3f:80:d8:9b:
         5f:00:72:fd:f3:c6:c4:64:2c:41:ca:51:c1:c6:19:39:01:d2:
         68:ee:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 06:56:45 2024 by rpki-client on console-fra.rpki-client.org