Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa
File:                     2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa (raw, json)
Hash identifier:          7QV9UzyovvopGYDycZAYEpPqaD1lcAJM7mt9H8BQF70=
Subject key identifier:   05:67:AD:16:E2:3C:DA:F8:4E:A4:D8:D0:6B:CE:9A:01:6A:B8:0A:F5
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F43285845708306D54102A4BFE76E3840
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     32402
IP address blocks:        64.251.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:06:d5:41:02:a4:bf:e7:6e:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=4a7419b9-dbbc-4bc5-b2d0-a2521635e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:c4:f1:1f:64:55:a6:0c:68:e9:1f:04:1d:
                    a5:e1:88:68:e1:1b:e9:e0:04:53:71:56:54:5e:52:
                    c9:e7:51:aa:0c:ea:99:7f:9e:87:45:18:dc:04:d1:
                    3f:57:e6:ed:12:65:62:0a:ad:46:6e:fa:c6:57:c2:
                    29:b6:f6:4e:e9:ba:e9:dd:bb:e3:2c:3d:8e:7b:8b:
                    7e:89:bd:26:2b:d7:2b:56:55:72:cb:c2:72:3a:7e:
                    70:7a:40:1e:c2:a8:3a:02:06:ec:86:55:3b:5f:37:
                    62:34:34:46:b2:c2:c6:ae:0b:b8:47:43:06:47:d4:
                    33:d9:99:b4:65:80:d3:01:eb:af:c9:ce:4a:5b:6c:
                    d7:61:ed:2b:cb:df:71:f4:8e:ca:77:c2:cf:4e:23:
                    98:3a:84:95:80:ba:92:06:c5:8b:9c:92:be:9d:4e:
                    ab:ff:48:23:68:e7:a3:ba:1d:b0:39:c4:0e:14:ed:
                    0d:76:bb:40:1c:3d:f4:a1:54:cb:f6:c7:21:35:46:
                    ef:45:5f:87:2b:cd:53:58:ff:b4:7d:b1:81:b6:ff:
                    29:02:24:b8:de:1c:bf:3e:13:2e:c1:ff:c7:48:72:
                    a4:7e:d9:97:ee:61:e6:63:e7:b7:e8:93:41:7f:e2:
                    2b:92:15:f2:3d:b2:f0:1c:99:77:dd:50:72:f3:a0:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:67:AD:16:E2:3C:DA:F8:4E:A4:D8:D0:6B:CE:9A:01:6A:B8:0A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:64:3f:55:1a:2d:88:2a:8b:c0:7f:b2:15:1a:ef:42:0b:7f:
         f8:29:44:6c:c1:a8:61:d2:4c:0b:f4:ab:58:1b:5b:73:13:b5:
         ee:35:d2:7d:a0:e8:ca:e7:78:8e:92:55:bb:a9:63:d9:83:95:
         79:a8:cf:40:d8:0b:7c:42:5a:c2:5a:fd:ba:95:ae:5e:71:47:
         31:8e:68:27:84:cb:2c:cb:12:0f:c9:a1:23:c3:c5:e0:c3:e1:
         08:af:7b:0b:5a:1f:b0:c2:a5:1b:e8:a8:24:a1:46:a9:d2:52:
         2e:9c:bf:9a:02:f1:99:a2:2d:9c:75:71:0c:44:11:7f:9d:0b:
         b9:a3:15:91:6b:dd:d6:42:5c:8d:95:25:35:4f:73:12:b3:19:
         86:7c:07:3c:4d:bc:52:66:74:12:12:a3:eb:de:de:0d:c7:af:
         34:90:7a:45:d1:d3:bc:3d:42:b2:91:7f:24:34:12:5d:60:b2:
         e1:2e:fd:d5:b1:6c:ae:dd:55:84:a2:a0:e3:c2:d0:df:ae:d2:
         ba:bf:65:67:55:da:de:78:9e:97:f6:ab:46:a3:69:d3:9a:49:
         fe:ef:78:7e:ed:d2:22:e9:93:b2:86:dd:f0:fd:a3:29:fa:f9:
         47:09:21:5d:cd:6c:20:54:11:d8:95:7d:bb:69:ee:64:08:f4:
         99:02:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:15 2024 by rpki-client on console-ams.rpki-client.org