Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa
File:                     80fdb0a9-6208-3f9e-a314-da6a439aac56.roa (raw, json)
Hash identifier:          uRxYX5yEDejJN064/CcevzNnBWU/mHcY+5spfsBIRdU=
Subject key identifier:   CB:AF:5B:52:CE:1F:72:DB:6F:73:D4:E2:78:67:34:59:0F:C6:FB:5F
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F432858455CF82B3315ED214FB8E7F300
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     393457
IP address blocks:        64.59.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2b:33:15:ed:21:4f:b8:e7:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=6ae420fc-f77d-468e-b452-6b4d660b2be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:55:de:31:bd:2c:45:00:3f:48:b3:7e:da:
                    5a:25:20:0d:ac:3d:3d:1a:07:15:09:0c:3e:73:b6:
                    07:2f:d2:9d:27:60:e5:bb:f4:a7:35:8d:e9:3d:f4:
                    94:f0:c3:69:12:ba:ec:3d:bc:02:18:31:d4:cc:fc:
                    49:77:a3:f0:bf:9d:eb:f6:81:4b:03:13:29:c6:75:
                    a0:be:2a:c9:e3:20:a0:29:af:74:fd:8a:76:2a:be:
                    53:46:65:34:81:26:aa:a5:0e:50:32:ee:e2:ed:b0:
                    46:5b:03:05:1c:ea:fa:6e:36:bd:9b:9b:9a:a9:f7:
                    79:67:77:a7:f8:38:10:07:5d:86:c1:a0:21:26:5b:
                    3b:4d:83:51:fc:5e:c6:f8:47:e4:99:e8:1b:0e:53:
                    aa:1c:d5:d6:75:c2:48:c5:ee:8a:1c:58:b6:4b:55:
                    9e:da:77:91:b6:c1:dc:c9:2a:33:26:66:93:04:9f:
                    43:f2:6c:13:e0:9a:d7:c2:10:49:33:94:70:92:65:
                    77:ac:fb:fc:1d:0c:20:c8:9b:2c:0e:34:95:83:64:
                    d3:78:32:96:a7:17:09:e9:ca:14:c2:81:f0:84:32:
                    d1:8f:3f:dc:b1:a4:56:1e:52:4f:45:c1:64:e4:5e:
                    b0:a6:9e:aa:13:ea:bc:3f:3f:85:a3:f0:72:14:2c:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AF:5B:52:CE:1F:72:DB:6F:73:D4:E2:78:67:34:59:0F:C6:FB:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/80fdb0a9-6208-3f9e-a314-da6a439aac56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.59.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3d:87:fb:a6:60:74:93:a9:a2:36:66:a1:05:44:4f:e8:ae:
         b8:eb:e8:e7:8e:19:21:04:42:66:d4:19:25:8d:6d:6d:12:48:
         cc:55:7e:eb:ab:c4:f9:14:ac:d8:99:8b:1c:a4:25:49:50:4b:
         ad:1a:e0:a3:be:39:ee:01:68:fd:67:47:56:45:54:58:1b:11:
         bc:78:14:29:5b:c7:cd:9d:a7:3c:9b:c7:10:e8:e4:a7:8b:d2:
         8a:46:d9:09:31:ee:7f:8e:c1:45:3d:cc:2a:50:c3:2f:bd:1a:
         61:17:cd:0b:18:52:15:db:6a:a2:7c:f8:9e:86:6a:fc:86:3d:
         12:cb:db:8d:cf:94:c4:49:ad:5d:29:1d:c6:95:bf:f2:e7:df:
         a8:ac:20:d4:c8:c2:d1:bb:6b:b4:b4:f1:92:c4:ec:9b:14:13:
         94:ed:2e:66:36:4d:4b:03:e1:da:e7:89:9a:5c:ac:3d:97:61:
         31:19:45:d1:bf:34:a3:b5:8b:9c:88:ef:05:a8:9c:b3:6a:8f:
         c7:91:d6:5e:08:5e:14:12:3b:d2:0b:51:cb:f5:50:a3:5e:3f:
         a3:50:b2:f5:21:b6:38:62:d0:6e:f7:37:35:06:53:60:06:a5:
         ab:27:96:59:5b:77:85:0b:d3:0d:82:8a:93:c2:b0:7e:32:78:
         c2:65:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:27:00 2024 by rpki-client on console-fra.rpki-client.org