Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa
File:                     8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa (raw, json)
Hash identifier:          xMDJXWt+u++MeS1HAoWuXAb+8//8mJBPj2NtSRBqNxs=
Subject key identifier:   46:5C:01:0F:EE:BF:C8:D7:A3:FA:04:89:AE:A1:B9:6D:3C:67:FA:0C
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F43285845D37CC9963D65DDB626C54880
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa
Signing time:             Fri 10 May 2024 11:53:04 +0000
ROA not before:           Fri 10 May 2024 11:53:04 +0000
ROA not after:            Thu 08 Aug 2024 11:53:04 +0000
asID:                     10835
IP address blocks:        64.74.184.0/23 maxlen: 24
                          64.74.186.0/24 maxlen: 24
                          69.25.218.0/24 maxlen: 24
                          63.251.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jul 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:7c:c9:96:3d:65:dd:b6:26:c5:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: May 10 11:53:04 2024 GMT
            Not After : Aug  8 11:53:04 2024 GMT
        Subject: CN=f4bb9234-9232-4a8e-8fde-c14a6e3e62fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:1d:7d:ea:fb:6f:f9:f7:bf:ef:0b:81:66:
                    b5:37:d9:fb:8f:02:cc:12:30:58:67:f5:7f:c1:1b:
                    8b:4a:72:de:90:3b:60:06:e8:d6:b1:b3:b8:fe:19:
                    e4:3a:92:0b:9c:a5:e9:0e:29:bb:64:5b:43:13:e0:
                    e5:f4:f2:cf:6c:6a:51:d1:cd:a0:60:6a:26:c4:df:
                    1d:e7:45:3f:b3:9b:7d:d0:36:60:26:77:21:4d:81:
                    dd:23:ef:e6:11:cd:e8:f4:c6:3f:c2:a9:05:28:49:
                    f2:9d:4d:55:81:b7:2c:23:07:fe:8f:3e:bf:56:17:
                    dc:e0:1a:b1:40:3c:21:18:f1:71:ba:b5:df:75:f3:
                    61:7c:82:13:a6:7a:a5:9c:10:f9:5d:16:3a:06:c8:
                    6f:f4:91:ae:1c:82:db:77:b5:7b:fd:57:75:6d:2e:
                    fe:1b:29:73:09:49:8e:55:74:0b:a4:cb:18:c4:76:
                    a9:75:9b:fe:e6:b8:da:c5:de:23:13:a6:63:59:f8:
                    62:00:c8:f8:58:85:31:5a:25:a9:53:8b:f7:fc:8f:
                    d2:53:ff:a2:f2:a9:70:ea:74:8c:f5:d6:55:2e:a1:
                    f7:cd:cc:57:fd:3d:c3:11:d1:4f:f0:fe:a4:73:18:
                    0c:19:03:a2:c4:21:0c:36:2d:1c:5f:ef:e4:52:cf:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:01:0F:EE:BF:C8:D7:A3:FA:04:89:AE:A1:B9:6D:3C:67:FA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/8ca8256e-1375-3c42-a8e4-c2ca2853188d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.251.186.0/23
                  64.74.184.0-64.74.186.255
                  69.25.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:ba:9b:22:f8:a6:c0:0a:e8:72:00:26:25:20:0e:7d:d3:
         be:5b:7b:6e:89:f1:1c:5e:ac:2e:df:a7:37:02:90:2e:cb:a4:
         0e:fd:1b:e3:3b:55:19:b5:3d:51:2d:2f:aa:bd:27:60:ac:b5:
         8c:6f:0a:6a:22:e2:4c:2d:99:7b:16:5f:52:9b:9e:11:d5:fd:
         23:a6:d0:d0:f2:8e:68:21:24:6c:c0:de:d5:5b:4e:df:32:6e:
         dd:a1:23:56:a0:aa:9c:e2:73:8b:50:a7:0e:bc:ad:d6:5d:a7:
         30:a4:0f:ff:96:4d:34:b5:ab:a3:46:a3:04:13:73:8b:a4:f4:
         e5:b9:d2:99:c8:90:8d:bf:3b:d5:5f:73:f1:9f:7e:90:99:40:
         77:b5:12:86:22:aa:e5:e9:65:bc:a4:b1:f2:4f:cb:99:40:9b:
         11:b9:e9:69:24:5b:5d:83:2f:84:e5:45:79:ae:fb:d2:db:d5:
         f0:81:b5:66:a8:d1:a5:8a:11:3b:ee:e9:70:42:d3:97:11:83:
         0e:fd:19:fb:1a:ad:d3:01:36:e5:f5:a6:67:a6:87:48:bb:b7:
         78:20:b2:67:fc:d3:ab:8b:fb:b2:d7:be:1e:09:62:30:69:47:
         f3:c5:db:15:a0:06:02:a5:5a:1b:2e:d6:dc:27:fd:be:ed:9a:
         e2:f1:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 18:52:59 2024 by rpki-client on console-fra.rpki-client.org