Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa
File:                     7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa (raw, json)
Hash identifier:          gPdvM8FX7cNqaxOwFlyWo8xwNPNZahdIKSQmoGtqgkA=
Subject key identifier:   36:1D:EF:E8:93:A9:9C:2F:C9:41:D4:E0:A4:1F:80:93:2B:5A:F2:25
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F43285845DEC90EBE29D0B9E1FA199B80
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     23274
IP address blocks:        64.6.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:0e:be:29:d0:b9:e1:fa:19:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=b28b5a9e-62ec-45f3-8c8d-c7eec2cb272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:d9:96:ba:7e:c4:9c:45:38:1c:32:43:37:
                    50:d7:46:cc:d8:a8:d1:6b:35:29:08:43:ae:20:a1:
                    e3:bd:53:63:86:ad:8c:f8:ff:a0:0a:62:80:f4:34:
                    cf:5c:90:e6:f5:ba:49:1e:20:c7:25:43:b3:07:a9:
                    21:ce:f7:4b:9e:71:6f:eb:0d:1e:8d:21:02:2d:c8:
                    6a:a4:70:53:27:9e:27:77:34:29:0b:10:09:eb:a7:
                    3d:35:27:e4:32:f9:8f:cf:05:be:26:94:01:c8:ca:
                    3b:38:47:47:18:38:5f:bd:a0:1f:0d:12:22:4f:38:
                    c1:1d:f0:a1:55:39:13:85:c3:25:3c:27:e6:d0:fc:
                    bc:02:68:f9:54:01:80:34:02:e5:16:57:23:ab:5d:
                    70:6d:ed:8f:9a:0a:27:8d:a9:89:b9:70:b2:14:36:
                    db:5e:40:7d:b5:78:8d:09:c6:d1:c6:8a:7e:92:9b:
                    84:39:2a:73:d4:75:ce:c5:c0:55:16:0c:49:54:9b:
                    51:80:d8:fa:1e:da:0a:02:7b:ef:be:d4:e9:0c:e8:
                    54:a0:a4:11:44:0b:3c:d4:55:dd:cf:1a:b1:1f:b0:
                    fe:2a:59:e5:6c:bd:c3:ff:2b:05:c6:b3:0a:2b:fe:
                    e9:34:2f:9d:9f:56:03:1c:0e:4e:2b:24:19:d8:b1:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1D:EF:E8:93:A9:9C:2F:C9:41:D4:E0:A4:1F:80:93:2B:5A:F2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/7b7a547d-8253-3de4-9bc6-b02a82562f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:29:a9:af:e3:be:1b:8a:96:aa:bf:6a:bc:ab:70:ce:d7:5e:
         48:75:d0:fe:e5:d1:05:22:61:02:38:d9:f8:8a:f1:b3:bb:16:
         8a:61:82:f1:80:c9:6e:93:51:33:3f:a1:25:94:ec:67:af:57:
         5d:83:67:6b:5c:6e:03:c9:43:f0:68:fb:1b:c1:5f:b4:f0:09:
         3c:ee:d6:fb:d2:a6:fa:cb:32:6b:3d:07:4c:a3:9c:9d:f6:87:
         54:ee:20:d6:f1:b0:6f:b7:7b:ee:93:99:87:76:56:25:7e:5c:
         17:be:2b:9b:3a:da:79:4a:c7:db:6e:00:c9:3f:df:32:ed:fb:
         b7:43:2e:26:99:cc:ae:e6:c8:89:22:cf:b3:3c:fb:32:89:f9:
         64:c0:e5:71:48:b6:29:79:67:06:85:84:dc:c7:c0:8c:8e:bc:
         76:a1:d4:4c:28:1d:73:c5:95:e6:59:32:9d:13:71:9b:6d:33:
         53:63:70:e7:a0:06:11:40:9e:59:dc:9a:10:a8:0e:eb:d1:d0:
         44:ed:ec:cf:77:ad:8b:5e:b4:5b:59:b1:1a:91:6d:72:09:d5:
         3b:01:67:ce:05:80:e1:ac:51:e3:f6:5e:57:3f:ce:4c:bf:2e:
         f9:c6:ea:f9:c6:6a:04:61:26:c3:d0:8f:83:bf:f2:53:4e:d4:
         b7:9a:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:20 2024 by rpki-client on console-fra.rpki-client.org