Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/65c3785e-e618-372d-b9cd-1000c2cffb66.roa
File:                     65c3785e-e618-372d-b9cd-1000c2cffb66.roa (raw, json)
Hash identifier:          cHA0pvXck3YzMDEOgbOujszD2soAHb86ncwLWPOca6g=
Subject key identifier:   CF:24:6C:C4:08:32:D9:B1:8C:49:59:0A:D7:0F:FB:19:80:D6:2D:0D
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F432858454D9D7E613664448BFB5F6900
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/65c3785e-e618-372d-b9cd-1000c2cffb66.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     29909
IP address blocks:        64.21.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7e:61:36:64:44:8b:fb:5f:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=ac2de7d7-2b17-42ee-80ed-5c216a12eafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:ec:f6:2a:32:da:62:43:b5:71:ca:b6:df:
                    66:ff:9b:e1:d8:fa:1a:a3:85:88:45:b0:52:28:08:
                    fc:31:43:b5:b4:85:6c:95:28:df:a4:b8:84:18:f0:
                    73:db:d8:8e:43:b6:a9:6a:09:c1:cc:cb:c5:04:7f:
                    eb:db:34:7d:cc:fc:8c:3c:d7:d5:25:cf:12:d4:0e:
                    e4:d3:72:63:b5:26:5b:28:c6:53:f9:8e:41:35:1b:
                    25:33:7e:86:37:32:06:d6:c0:07:42:14:3b:1c:19:
                    d1:d2:cc:9f:bf:00:f6:73:dd:53:4f:55:e4:f7:cc:
                    d0:6d:a7:ff:7d:76:26:ab:b7:0f:32:60:87:a3:84:
                    52:c6:e0:61:75:f4:ee:d3:82:40:b0:62:d4:84:81:
                    5c:4f:31:21:82:d2:b1:95:52:4c:c9:59:4c:47:3e:
                    95:69:44:a3:04:ed:c0:f6:96:c5:b6:e8:cf:7d:0a:
                    2e:5f:3e:64:78:ee:0a:ac:5f:4e:6d:11:cc:5e:b7:
                    2b:8d:43:94:cc:e4:f4:7f:39:a0:65:fe:d6:de:f5:
                    02:38:5b:eb:25:3b:99:15:44:6a:be:79:3c:6c:5f:
                    78:c6:06:80:e4:f0:fd:1e:33:19:40:da:47:b3:07:
                    e4:8c:b2:9e:d1:db:6e:66:45:6b:b6:e5:27:81:e8:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:6C:C4:08:32:D9:B1:8C:49:59:0A:D7:0F:FB:19:80:D6:2D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/65c3785e-e618-372d-b9cd-1000c2cffb66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:60:0b:ec:76:0e:85:1c:75:b9:db:e4:22:6f:55:28:19:
         21:2e:ce:d5:3d:10:f5:c0:1c:92:7c:2c:8b:08:28:15:64:96:
         3f:43:b8:44:c8:31:bb:8f:e6:01:31:42:42:2d:59:d7:cb:02:
         e3:0a:07:1e:ed:3b:5b:d4:60:28:03:ba:10:25:89:61:bd:6a:
         7e:f8:a7:52:9c:b2:f0:6a:2f:02:85:ad:ed:72:ed:39:0d:c7:
         95:4f:e2:a9:3b:2e:6e:fc:af:0f:10:f1:7f:93:2f:85:c7:24:
         15:62:3a:60:7b:8c:37:c2:29:95:9e:f2:67:ed:76:4a:52:8c:
         4f:4f:c2:ea:eb:84:3c:df:a4:ff:d0:b5:e0:d3:da:94:dc:46:
         04:b1:b3:4c:cc:7d:b4:07:65:41:64:6a:43:dd:3c:c4:78:82:
         94:b7:68:15:33:2c:0f:9d:4d:26:a6:1e:ed:e9:c9:14:de:00:
         52:ca:3f:c3:8a:83:eb:81:07:52:e6:14:c2:66:80:ac:39:30:
         97:d7:4d:f2:75:e1:07:d7:97:d4:d5:13:35:12:e3:a6:c2:df:
         1c:5d:60:a8:5e:2c:d1:8e:d5:5e:bb:99:60:78:b6:60:75:b7:
         8b:d7:17:d9:c4:55:04:70:f4:bd:f2:69:45:21:82:1a:49:45:
         6c:d7:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:09 2024 by rpki-client on console-fra.rpki-client.org