Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64411576-433b-38c0-85f1-1c8f9d14407d.roa
File:                     64411576-433b-38c0-85f1-1c8f9d14407d.roa (raw, json)
Hash identifier:          XQMJqxO0WzsaEVnvxqF8oY2Z/M4fiSsxkGIbw/Ma/3A=
Subject key identifier:   FB:9B:8D:2C:47:BB:C6:B1:94:23:9C:E4:2E:0E:CA:8A:07:A8:53:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933BFD8E6A0B42073E7A300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64411576-433b-38c0-85f1-1c8f9d14407d.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     394996
IP address blocks:        64.71.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:bf:d8:e6:a0:b4:20:73:e7:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=a07b65a6-8f22-482d-a492-5d4b9f7904cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:cd:35:9b:a3:59:5e:83:ce:84:51:87:38:
                    8a:8d:c4:c3:54:cf:96:9e:14:0f:d3:32:20:87:de:
                    73:41:7c:be:79:21:18:fc:03:a2:ae:aa:13:3a:fc:
                    9a:bb:cb:e0:a9:c2:e2:5d:6c:e5:2e:26:b0:2b:86:
                    6d:fb:b2:ec:dc:2c:82:e2:6c:d5:74:94:b0:44:61:
                    94:56:6a:08:42:9c:41:19:bd:58:2e:c4:ff:6c:ef:
                    f0:30:b8:f4:84:f4:2e:ad:1a:89:ae:6c:77:de:08:
                    b0:ea:91:c3:b0:5f:99:c3:c2:07:c0:1e:8a:81:a6:
                    40:df:1f:cf:6c:07:77:ea:c3:6d:ef:28:02:5e:50:
                    9d:15:4b:0d:bf:06:5c:52:10:e9:3d:93:cd:5a:15:
                    1f:f8:e1:5f:af:66:75:5a:a7:0c:eb:4b:87:de:70:
                    1b:41:49:fe:96:c3:df:d0:39:f7:9d:7b:40:8d:65:
                    5c:43:61:31:91:bc:79:71:f3:12:02:aa:93:98:73:
                    d2:ab:e9:dc:fc:d1:c7:76:94:d1:fb:b9:04:69:30:
                    a6:0a:e3:51:15:8c:2f:5c:23:82:8e:9a:06:c5:35:
                    ba:a6:f2:2a:2e:10:9d:f3:dc:5d:d5:3c:5f:52:25:
                    c1:e6:fc:f5:f6:35:95:6a:26:23:92:44:4d:1a:79:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:8D:2C:47:BB:C6:B1:94:23:9C:E4:2E:0E:CA:8A:07:A8:53:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64411576-433b-38c0-85f1-1c8f9d14407d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:01:23:c3:bc:0b:0f:84:ca:51:1e:18:70:1c:ad:be:5e:d2:
         c3:4b:cb:3b:d6:98:09:3a:0c:d6:8c:2e:cf:c3:7d:c2:6c:30:
         1e:dc:f2:28:81:fb:a6:06:be:0c:73:13:df:77:54:3c:48:03:
         40:8a:60:18:50:59:23:0d:63:95:a9:26:b7:9a:a6:4a:26:46:
         c6:07:cc:cd:63:7a:5c:46:9b:37:96:4f:b9:e8:c8:d8:22:51:
         fb:6b:7a:02:d5:42:31:2c:b0:93:38:af:2e:73:c8:55:64:14:
         84:07:16:97:f8:b5:1e:8a:a1:ef:02:50:ed:0f:34:b9:b7:ab:
         bd:db:17:35:dd:ae:24:92:e4:83:4a:aa:dd:5e:c1:45:c1:06:
         5f:7b:66:5f:fa:a0:15:df:48:87:8b:0d:64:a4:80:3b:83:4f:
         95:9b:6d:a4:2e:f5:48:a7:32:99:68:39:c8:e9:44:28:61:42:
         91:71:d4:55:b5:6b:14:d7:ce:c3:28:82:d9:5d:92:41:0e:52:
         4c:1e:27:67:cf:04:0f:fd:b2:c5:9e:0e:12:f7:5d:c0:b4:22:
         a3:77:59:f7:00:43:97:6e:32:e9:7c:a7:db:15:36:a5:ea:73:
         08:fd:c1:53:f1:77:3c:86:76:18:04:e5:67:bc:ca:b9:c0:d2:
         77:7d:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:45 2024 by rpki-client on console-fra.rpki-client.org