Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa
File:                     499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa (raw, json)
Hash identifier:          k9Y95Vtvk/32MxRVbOihLmyEkrKv0zYS4ZCb+oT9xe4=
Subject key identifier:   F6:59:05:AA:16:2D:A2:06:A4:B6:C0:AD:9F:FB:42:D7:11:85:57:E3
Certificate issuer:       /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial:       010D0C9F43285845BD48E73F5A4C286430C71DA0
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        192.64.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e7:3f:5a:4c:28:64:30:c7:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=0886903d-c8ae-43ae-ae0d-993ea4cc21e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:1a:f2:e1:aa:a7:e2:c7:d7:d9:5b:55:2f:
                    1c:d2:f7:17:ed:62:81:60:96:b7:1e:f9:40:2b:a5:
                    64:be:e1:c4:b8:04:49:fc:8b:6e:89:ad:22:79:d5:
                    68:3b:3d:6c:77:a2:15:08:56:09:01:3a:1f:8b:0b:
                    ef:1f:52:ed:14:c3:15:2c:d4:64:d7:4f:88:5d:a9:
                    0b:6c:5e:5c:bd:25:f2:85:ed:2c:33:f3:d8:18:07:
                    cd:0d:8f:03:c6:70:44:18:9f:a8:4c:3c:e2:0b:23:
                    f2:71:b5:eb:62:41:20:00:33:90:b6:df:49:d2:1e:
                    e1:1d:2c:4c:98:9f:6a:fc:cf:d7:11:54:7f:00:25:
                    fb:2e:a5:ae:88:09:e2:d2:d1:df:5a:ed:ec:f1:f9:
                    bc:76:38:8e:11:b7:26:b1:c4:c1:f2:c9:15:41:7e:
                    91:38:3f:de:0e:63:1c:a4:ff:99:43:60:d4:41:08:
                    45:0f:f3:72:31:3c:fd:76:c8:1c:b9:35:aa:cf:6e:
                    88:1e:6e:ce:53:6b:68:80:eb:a2:16:ab:0c:22:49:
                    85:fb:22:45:1c:d1:6b:7d:74:03:74:64:b7:a4:d7:
                    47:5a:98:33:c8:61:f3:ad:a0:62:ae:df:08:b6:c1:
                    91:5e:70:3f:2e:45:2c:dd:62:b5:31:cd:2e:a0:a8:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:05:AA:16:2D:A2:06:A4:B6:C0:AD:9F:FB:42:D7:11:85:57:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl

            X509v3 Authority Key Identifier:
                keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:43:ad:27:40:6d:6b:65:f2:a3:26:4c:ea:17:8c:88:dc:f8:
         84:6d:2f:c7:74:79:6d:1d:e9:f9:e4:b5:6f:42:18:cf:44:18:
         44:59:28:a4:95:a6:85:75:81:e5:37:c1:79:22:86:09:1d:03:
         1a:7c:19:13:68:db:3a:65:20:35:8a:48:b7:34:36:be:27:a3:
         ac:c5:86:f3:3f:49:01:ed:74:0b:b6:3a:f8:44:a3:51:bb:d4:
         b3:9d:fd:01:3f:13:f4:d6:bd:fa:65:7d:38:d8:6f:7a:5e:bd:
         26:db:da:8d:e7:8c:89:1a:73:03:38:1d:1c:ec:f5:c7:31:a7:
         f3:70:27:7e:1a:57:e6:7f:a7:56:54:16:a4:6f:8b:cc:64:a7:
         c8:c5:50:17:4a:0e:42:6c:d0:7d:a2:e5:bd:f9:2b:25:ca:74:
         e9:36:4a:8d:ad:28:3a:a6:2a:9f:49:6e:0d:f8:4e:6c:36:2c:
         58:12:aa:14:a9:23:bc:84:e2:f3:63:fb:9f:52:d2:70:f9:5d:
         5e:71:f1:7b:60:15:34:b7:e5:44:4e:ad:7c:27:72:f7:86:b3:
         dd:84:d1:df:22:bb:be:87:30:f0:dc:33:c9:91:35:d3:1e:eb:
         8e:5a:3f:43:a5:d0:36:12:98:0a:f3:ef:f1:b7:ef:8e:da:fe:
         d9:78:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:17 2024 by rpki-client on console-fra.rpki-client.org