Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b00b957e-01c0-3c62-aac0-473d1efa56db.roa
File:                     b00b957e-01c0-3c62-aac0-473d1efa56db.roa (raw, json)
Hash identifier:          PYzE3iKpgLHulmPu3nsS5e/sjZ1zoSLi/IIzU6pn7BU=
Subject key identifier:   58:96:E1:C9:B8:20:2E:BB:6F:33:DB:87:70:38:09:7A:75:D9:85:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933C45FE74B785F23168C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b00b957e-01c0-3c62-aac0-473d1efa56db.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     63949
IP address blocks:        64.62.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:c4:5f:e7:4b:78:5f:23:16:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=78f5650b-bff2-4c84-ab2e-251dc8c62e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:48:4c:be:8f:59:ad:68:38:5c:73:9a:95:16:
                    5a:ff:82:8a:9d:be:d3:8f:d9:44:04:d6:55:3f:30:
                    d2:56:c9:47:c3:22:a6:da:48:60:9f:00:53:81:80:
                    ba:ec:9c:54:8d:6c:3f:76:7d:79:b1:16:83:50:04:
                    77:a7:8c:e6:2e:59:93:b6:b8:d7:ef:04:09:71:f6:
                    9a:e0:60:e6:a6:86:7c:06:83:50:ba:f5:0e:ad:ee:
                    f1:b5:92:bb:35:5c:6e:d2:39:75:28:be:11:80:d2:
                    87:5a:28:9e:52:2c:f5:5c:cd:ad:9f:e5:b5:6b:61:
                    32:c6:ea:2b:f8:68:42:bd:5f:52:f7:dc:e5:ce:ae:
                    49:1e:dd:79:a6:26:20:2c:90:dd:d2:fa:4d:ea:68:
                    18:92:1b:80:73:bc:c3:2d:be:b2:3f:13:21:a4:7b:
                    e2:4b:d6:4c:2d:2c:2f:97:43:40:71:f8:ce:41:7b:
                    b1:13:62:0d:13:34:0d:ab:80:ea:34:17:00:99:5a:
                    bc:47:65:95:0e:fd:79:a9:1d:6e:a6:11:e3:be:9f:
                    f1:6a:e7:0d:50:7d:35:14:ba:e3:3e:02:4d:19:52:
                    78:0b:91:bb:75:e1:1a:f3:62:81:10:5d:e1:62:be:
                    76:f0:51:19:dc:26:a5:df:d1:98:3e:69:4b:75:d5:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:E1:C9:B8:20:2E:BB:6F:33:DB:87:70:38:09:7A:75:D9:85:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b00b957e-01c0-3c62-aac0-473d1efa56db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:36:68:22:de:29:a7:16:c3:21:39:39:90:18:8d:eb:c4:18:
         77:b8:0d:29:be:10:74:54:06:44:18:13:dd:fe:56:65:d9:d2:
         63:69:e9:44:f5:71:bb:8a:ba:41:08:b3:f0:fc:31:2f:16:11:
         e8:90:fb:f8:07:4d:db:4a:aa:0d:4a:0a:ac:0b:66:6b:6a:87:
         a3:87:97:65:c5:18:a0:6a:e3:00:d8:3f:bc:e1:d3:fb:eb:e7:
         11:33:86:38:02:a1:ca:e9:a3:2a:3d:5a:1d:af:6e:d9:6d:8f:
         86:30:3d:1f:f3:1c:f3:23:ea:7d:09:43:42:cf:15:10:61:b0:
         d5:17:fc:c9:b0:6a:72:e3:d1:f9:6a:2c:50:c1:06:93:e0:2e:
         6f:5e:7f:3d:d1:fd:e6:b8:b4:ed:40:8f:11:02:08:57:eb:8c:
         76:7b:ed:06:ad:83:fc:ee:0e:ff:d3:1e:20:dc:f1:e4:73:14:
         ef:37:b5:5a:f5:07:c2:db:25:99:8a:3f:6f:72:f2:36:02:a9:
         90:18:5c:af:f2:b0:b5:12:fb:2a:86:3b:34:7e:e7:e2:88:27:
         65:01:1a:3f:00:c8:20:92:2d:c2:7c:c5:9f:e7:9e:a2:9a:e5:
         9e:b5:9a:39:66:c7:37:91:cf:a6:ce:27:ae:c4:1f:11:3b:c8:
         9f:25:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:19 2024 by rpki-client on console-ams.rpki-client.org