Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0ac3f40f-d494-357f-8b1d-988e04669504.roa
File:                     0ac3f40f-d494-357f-8b1d-988e04669504.roa (raw, json)
Hash identifier:          yp9gRZBbayP7AoNlXCOlNQLwgNhpNG+xl/7WzlB8OaQ=
Subject key identifier:   1D:22:3E:59:C8:97:B8:CC:21:68:31:90:78:1E:4B:24:9A:96:1D:D8
Certificate issuer:       /CN=926b4ddf-17df-417e-972b-c86cc410fed2
Certificate serial:       010D0C9F43285845131ADE360F2AD3E992740EA0
Authority key identifier: 10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0ac3f40f-d494-357f-8b1d-988e04669504.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        64.56.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:de:36:0f:2a:d3:e9:92:74:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b4ddf-17df-417e-972b-c86cc410fed2
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=48b33698-88f1-4f77-9634-0058601184d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:3a:f2:2f:46:96:64:4c:74:7c:6e:6f:43:
                    fb:19:ee:55:e7:54:03:d5:f3:ce:63:63:a5:ec:59:
                    d9:75:6d:1d:d6:5a:20:cd:3a:78:b2:7f:4e:2d:df:
                    28:cd:cd:d7:67:f6:61:a1:23:cc:bf:39:b7:6c:fb:
                    18:b6:6c:13:c3:44:86:71:17:1a:49:6f:07:f5:71:
                    d9:e0:51:2e:07:90:de:de:ff:6a:10:75:39:32:b0:
                    19:a7:38:16:96:1a:1c:c2:72:85:75:03:9e:65:0f:
                    7c:b1:95:fa:c6:1b:b9:bb:f5:e3:0a:27:dc:5f:dc:
                    eb:0f:90:0f:2f:98:b4:8c:58:ae:cd:a3:7a:05:46:
                    73:d3:66:02:cc:50:0f:09:b0:81:96:e1:8d:39:a0:
                    9b:5c:a9:0b:c6:f9:76:03:44:c2:37:22:ef:5d:38:
                    e5:c7:aa:11:f5:52:b2:3d:b6:37:73:f1:10:dd:60:
                    7b:0a:bd:b4:49:12:92:48:29:b0:c8:b8:56:9f:4b:
                    41:1a:46:f8:94:0a:88:a3:ea:c5:d5:b4:14:9c:19:
                    35:06:c7:7e:d5:c5:9d:a6:13:f7:e2:c8:d7:ee:99:
                    54:91:95:e9:e7:e9:b3:c3:29:b6:24:af:69:7e:c9:
                    41:3a:d6:c3:f8:1e:54:6b:6a:7f:50:d4:03:d7:4a:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:22:3E:59:C8:97:B8:CC:21:68:31:90:78:1E:4B:24:9A:96:1D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0ac3f40f-d494-357f-8b1d-988e04669504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl

            X509v3 Authority Key Identifier:
                keyid:10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:08:44:ee:4b:6a:b9:77:ef:42:bb:18:01:a5:e8:a2:2a:
         73:87:c0:24:00:26:13:d2:ec:78:85:b4:0a:51:b7:17:d1:64:
         df:68:d5:c2:aa:00:0b:1b:c4:8d:56:d7:e7:ba:23:47:7a:a9:
         1d:63:fd:6a:a0:98:ac:01:27:c7:47:04:a4:e0:7d:6a:5e:00:
         3b:21:59:b5:59:3e:32:82:1f:58:14:3a:07:18:82:d7:ef:5a:
         60:bc:a6:1c:c9:97:03:48:bb:a6:1a:7c:c9:39:85:65:a0:30:
         59:f5:dc:c4:72:05:48:2c:04:2b:b1:53:a5:10:36:94:1d:97:
         1e:5c:4a:13:5d:ee:d4:bb:f2:66:c7:1b:fc:f0:f5:17:ad:38:
         5b:2d:67:59:84:63:59:68:f2:56:3c:c4:9e:ac:f1:91:7c:52:
         fb:d5:73:ab:fe:eb:69:95:81:4c:ee:79:be:82:14:ae:45:23:
         05:5e:bc:0b:aa:c9:1b:10:cd:7f:7a:92:fa:66:af:7c:4c:c0:
         ed:45:86:38:27:51:86:8e:1f:67:fc:f0:33:96:71:e8:36:28:
         d4:af:75:85:7b:de:ed:9e:42:92:3c:bf:41:5d:c5:73:14:40:
         1b:fb:30:40:56:a3:c7:a2:4e:6f:65:0d:ed:df:fd:02:69:fc:
         25:d0:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:46:12 2024 by rpki-client on console-ams.rpki-client.org