Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa
File:                     ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa (raw, json)
Hash identifier:          QViL/iebHyl6URLoNPWxUAYPYr3xyKAaV52PQVqug10=
Subject key identifier:   41:99:F0:36:60:55:86:A4:33:88:CC:7E:70:A7:A0:10:00:14:09:C7
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285845CE0917C2A9C4BAC4723E1A00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     54858
IP address blocks:        64.85.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:17:c2:a9:c4:ba:c4:72:3e:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=1be3606b-553c-4b33-84d9-830c4a10e7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:f7:5b:f7:e8:7c:63:a6:3e:2e:91:ba:d0:
                    97:3b:5e:fb:bf:10:e7:30:52:67:be:07:36:a2:05:
                    06:f7:5d:a1:83:e7:5b:c1:7f:b9:58:e4:4b:00:fc:
                    af:e5:97:c4:49:40:15:03:16:ae:e8:49:80:9e:af:
                    3f:85:bd:7a:d2:59:00:29:c8:e4:fd:76:a0:5e:d8:
                    53:41:f1:47:ef:b9:c6:16:07:d4:8a:6a:1a:00:b2:
                    92:74:65:c2:b8:c9:26:e7:b3:97:79:28:02:3f:9b:
                    71:12:dd:86:e6:33:7e:38:57:50:b4:96:2e:76:01:
                    e3:c0:ef:b2:69:25:62:4d:a3:3c:86:aa:96:ef:74:
                    8e:50:dc:95:ef:bd:ee:69:f4:fc:a7:d6:68:91:9f:
                    ed:a7:54:83:f0:3e:62:f3:19:c1:76:26:17:74:5d:
                    87:7f:12:79:42:4e:7d:b0:d0:07:92:8e:1d:85:88:
                    ad:88:9d:77:b3:17:c3:68:21:cc:39:40:99:ca:21:
                    7e:2d:37:3e:20:e4:4a:c0:03:d0:f7:5a:f3:cc:75:
                    23:b7:80:cc:8c:6d:b2:cd:66:5f:8b:dd:63:32:3a:
                    cb:8e:b4:56:4b:8e:97:76:1c:4e:09:73:0c:c9:e6:
                    56:1a:ff:55:46:47:92:2f:8f:06:62:c3:4a:e1:fc:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:F0:36:60:55:86:A4:33:88:CC:7E:70:A7:A0:10:00:14:09:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:09:b4:f8:e7:58:ba:fe:3a:ac:1d:c6:c3:ec:a0:f2:74:
         5f:80:86:1c:03:e4:f9:b2:a3:65:4c:02:f1:a7:9d:a5:b8:fa:
         6e:ed:bc:3e:74:06:e0:8f:c4:48:31:a2:34:54:1c:28:61:86:
         66:88:7a:0f:17:9b:d7:58:4f:90:a4:65:b8:31:9c:24:8c:73:
         b9:1a:dd:ae:3b:d3:d6:45:35:ee:0a:2b:7c:cb:c0:d9:9f:88:
         24:15:33:90:df:33:e0:5c:2a:34:4e:14:43:5a:29:37:99:6f:
         e4:7e:1f:3e:89:67:bd:27:f9:d6:71:1a:05:6e:93:31:c0:18:
         f1:31:66:4d:62:c7:f1:f1:9c:8b:ac:95:7f:ce:a1:b8:88:81:
         65:94:0c:5c:69:35:07:e2:27:f0:08:58:a1:83:c3:1d:8b:a8:
         a1:2c:fc:45:fb:5a:a3:04:04:b8:c0:5e:12:3c:d6:c4:91:f3:
         6f:2e:b9:fe:08:61:55:33:75:a0:64:be:f7:84:78:bf:95:4e:
         c6:41:bf:af:2c:d8:a7:93:55:b9:ab:70:e6:d0:d8:a5:36:1e:
         6a:90:88:26:b2:41:8d:2c:c5:94:36:19:83:e5:f4:5a:91:a3:
         86:b1:f3:dd:34:5d:b7:b4:24:78:bc:7d:dd:d4:d9:11:c7:fe:
         a9:41:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:36 2024 by rpki-client on console-ams.rpki-client.org