Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa
File:                     d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa (raw, json)
Hash identifier:          FCic/t5ZnEnRHxE5qOlHBVJ6aYLXB9ku4nhkWQYj5WE=
Subject key identifier:   95:E1:AE:04:A9:86:E2:83:EE:EF:4D:53:93:1E:6B:25:5C:51:A4:8D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845490C77061844551E808845C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa
Signing time:             Thu 21 Mar 2024 21:45:12 +0000
ROA not before:           Thu 21 Mar 2024 21:45:12 +0000
ROA not after:            Wed 19 Jun 2024 21:45:12 +0000
asID:                     15169
IP address blocks:        64.233.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0c:77:06:18:44:55:1e:80:88:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:45:12 2024 GMT
            Not After : Jun 19 21:45:12 2024 GMT
        Subject: CN=cb30d2cc-af66-448b-b263-29e91aa9eda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:9e:68:5d:33:5d:c5:26:9b:51:39:55:77:
                    5a:ee:db:3b:dc:3e:de:b0:0b:8d:8f:7b:93:d5:14:
                    25:5d:71:b6:52:ea:1b:f2:38:83:00:5c:38:77:96:
                    b2:01:4b:8b:0f:8c:20:fd:d0:c5:d8:f7:15:42:64:
                    86:27:6f:c1:a2:1d:27:b2:7c:15:3d:7d:c4:2f:0a:
                    e5:b3:4a:e6:da:9e:d0:9d:b9:96:58:26:32:6d:f7:
                    92:5f:d7:f7:55:24:4c:91:ee:83:1a:96:dc:a5:f7:
                    c7:6f:4d:1e:00:7f:2f:66:12:78:da:3f:70:39:97:
                    e2:24:82:8c:9e:88:35:55:75:75:36:89:4c:d3:a4:
                    5d:e8:20:4d:fb:65:6f:8a:54:33:41:5e:9a:5f:99:
                    8d:68:a6:52:5a:cb:ea:a4:79:eb:22:13:73:bc:0d:
                    14:1c:15:8c:63:fc:7d:de:42:49:97:2f:ff:c1:0b:
                    dd:bf:50:53:8c:72:d7:0d:9c:16:de:0c:1b:bb:47:
                    81:3a:2c:12:61:9c:d6:d6:d1:61:9f:c6:3d:12:63:
                    34:8f:5f:59:a2:36:9b:72:c4:15:f9:c7:d8:00:e5:
                    2d:38:5b:93:66:24:3f:34:6e:ed:b6:ef:22:8d:52:
                    0d:99:bc:fa:80:8a:1f:2b:c3:f9:7e:a0:52:5f:ab:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E1:AE:04:A9:86:E2:83:EE:EF:4D:53:93:1E:6B:25:5C:51:A4:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d1db2434-69a9-35fe-8c62-72431fa4b9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:ee:e7:57:ce:98:19:ba:55:db:1e:17:09:1a:f7:26:5d:
         d9:04:1f:52:cd:a0:60:2a:7a:77:6e:ea:40:2b:a7:e5:5f:26:
         79:d7:c4:2d:ea:c6:fc:e7:9b:f5:64:e8:98:6f:0e:69:54:5c:
         31:53:54:df:5c:65:d6:db:13:5f:f6:24:9e:c5:e7:e0:d3:fa:
         87:71:e3:cd:d4:60:d0:62:20:35:03:bd:7d:fc:b4:9e:ab:65:
         11:7b:47:8f:15:de:71:7d:71:7f:03:c5:d7:e8:fd:4c:e1:7e:
         df:8b:d1:eb:41:9e:1a:aa:1f:68:51:e4:f6:33:c2:96:d5:84:
         c4:4c:49:20:56:06:5a:90:64:fe:30:64:8b:a3:bb:15:28:e2:
         0f:59:08:c2:ad:06:de:76:6e:64:d1:f5:e1:85:85:21:3c:74:
         68:ab:f6:4d:42:cc:8e:5a:4e:fe:94:5b:5b:d4:11:0b:ea:f3:
         1d:f5:bb:66:49:55:35:08:e1:b9:65:2c:32:6a:e2:b3:d0:86:
         7a:c1:40:66:65:c1:20:ad:ef:f4:a6:2d:75:58:c2:32:0a:c0:
         0b:77:9a:b5:88:b2:a8:ab:d9:a1:5d:f1:6e:75:32:22:37:4b:
         b8:9d:5f:48:c1:b5:fb:07:51:ea:ee:d8:81:5c:bb:f8:0b:64:
         32:e4:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:32 2024 by rpki-client on console-fra.rpki-client.org