Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2efa6e0f-9c6a-3d12-8b83-4ad3a2c06a8f.roa
File:                     2efa6e0f-9c6a-3d12-8b83-4ad3a2c06a8f.roa (raw, json)
Hash identifier:          ma1wY86EzcTgU8kZq72ggVtclYaY5x6yMBxWR4IVFCk=
Subject key identifier:   19:00:CB:F9:FC:65:E2:9A:0C:F0:5E:E9:55:FC:85:C7:6A:01:31:24
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285845DEC927F720EFAC0CF34FB400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2efa6e0f-9c6a-3d12-8b83-4ad3a2c06a8f.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     397213
IP address blocks:        64.6.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:27:f7:20:ef:ac:0c:f3:4f:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=d4c9a76f-d2a3-42af-be84-caea92f2615f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:52:cf:f9:48:90:10:9b:27:f5:15:18:86:
                    8c:f5:c9:55:90:57:62:a7:47:ef:1b:dd:18:43:12:
                    03:17:d5:9d:04:80:21:c8:a4:42:6b:43:a6:28:20:
                    0e:ed:a3:56:59:3e:9c:48:eb:46:8d:30:6b:ff:0b:
                    ff:e8:d9:a5:23:fb:42:58:2a:4d:5a:a1:75:0d:21:
                    93:d2:56:7c:a8:ad:d7:8e:a4:ad:d5:17:ee:21:90:
                    5e:6f:3f:d2:0f:34:3e:30:e7:70:74:5f:3b:37:00:
                    67:5e:63:1c:cc:59:bc:92:83:5b:04:1f:fe:15:9f:
                    92:b7:9d:10:a6:3b:62:f7:6d:80:31:18:70:bf:d3:
                    ae:7b:94:d9:e2:eb:4b:b2:7c:04:ac:76:dc:d5:8e:
                    51:3c:1f:3f:46:19:27:71:73:0b:0f:b3:d9:25:38:
                    8b:49:b8:b8:9f:4e:7d:35:9d:13:9e:d8:e9:6f:68:
                    a0:5b:6f:26:f8:e9:f4:1f:77:71:a2:bd:a0:d6:ff:
                    d2:11:a3:b2:09:99:3e:92:07:40:bb:42:7b:45:32:
                    69:79:03:2f:ac:b9:42:7b:45:38:55:d8:6e:1e:0f:
                    f0:66:29:ba:27:5a:fd:e1:67:1a:6c:2e:fd:92:7c:
                    2c:9c:8e:e0:7e:ba:68:0a:6b:86:8a:74:3a:72:54:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:00:CB:F9:FC:65:E2:9A:0C:F0:5E:E9:55:FC:85:C7:6A:01:31:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2efa6e0f-9c6a-3d12-8b83-4ad3a2c06a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:fe:d6:d4:b4:c9:29:60:da:7a:e2:39:0c:3b:a3:0e:1d:
         4f:b1:38:30:67:8e:99:6d:c5:68:64:0b:7d:d9:53:75:0d:ae:
         6f:00:23:24:39:1b:ae:2c:ac:88:c0:45:8d:9b:81:86:8c:ab:
         11:2c:6a:a8:38:fc:8a:c9:2a:ac:5e:33:05:bc:6c:96:38:83:
         8e:e3:1e:8e:b8:f3:3e:26:43:77:27:d2:ee:8c:d1:d1:1c:ae:
         7c:3f:a5:be:b9:3c:89:ef:26:4a:03:e8:7f:90:2d:88:29:3b:
         e5:80:f1:4c:29:71:09:80:77:9e:8d:46:87:b9:22:a9:55:7f:
         de:f6:3e:90:cd:2e:9e:34:fb:48:99:6a:ea:0a:77:9d:81:ea:
         9c:cd:0b:92:b9:41:ab:e1:1d:46:4f:a3:3e:e8:45:f9:00:31:
         a2:cb:9d:5a:25:e4:92:39:d5:14:89:1d:51:e1:79:d2:74:4d:
         a0:71:da:7f:10:94:31:0d:80:d6:51:78:06:1d:36:96:68:c1:
         db:b4:f6:2b:cc:99:f8:75:a6:39:e5:73:a9:d9:6c:3d:c9:4c:
         03:a8:0a:51:fb:0f:81:65:38:43:83:28:03:34:d1:bb:e7:72:
         67:17:fd:27:c6:40:16:52:da:32:04:14:62:60:e9:3b:82:72:
         4e:66:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:04:36 2024 by rpki-client on console-ams.rpki-client.org