Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa
File:                     fddd2413-252f-3060-ab9b-3fffedf3f396.roa (raw, json)
Hash identifier:          slZQ8sb8Y9nTDSWlWdhiXCXSz8NrhA0gye5fEwzmBIA=
Subject key identifier:   B4:12:CA:9C:1E:3A:E2:32:03:BE:4B:B5:8C:B4:65:69:55:37:A8:F9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845840DBF39D6E7840B7E54CE00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     40139
IP address blocks:        64.192.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:bf:39:d6:e7:84:0b:7e:54:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=d63941da-9d90-4f00-8929-a89c023d649c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:7e:35:7d:99:cc:f3:24:54:25:dc:83:c5:
                    0d:47:ff:6d:87:6c:3e:fd:bc:eb:35:c2:ee:5a:39:
                    e2:c6:60:ed:bb:5b:a3:1a:20:58:c2:18:a6:f3:db:
                    39:22:c5:b2:b4:c3:b5:ee:c3:38:e9:33:99:dd:9a:
                    a1:81:7d:d7:ad:f5:5e:ff:0f:4d:83:e4:d9:94:7b:
                    97:64:3c:1d:e7:ac:a9:5f:8b:dc:0e:d1:82:c3:19:
                    98:65:bd:44:6b:9e:ff:22:94:cb:36:a8:80:6e:d3:
                    46:71:af:aa:38:1c:42:81:58:45:00:17:f6:96:1a:
                    47:95:88:85:4c:1e:bd:3c:77:c1:90:0c:89:59:a3:
                    b3:73:08:e0:39:89:5f:b5:95:f9:e8:a3:28:a4:df:
                    5a:f3:33:d5:b6:cd:0d:a0:04:2d:cf:59:87:5e:17:
                    cf:83:1d:a2:0b:b6:38:7a:6a:7e:36:05:cb:98:e4:
                    51:e5:e5:1d:52:72:3a:5c:a4:25:ca:44:81:dc:56:
                    09:87:af:2d:f4:ca:96:21:2c:5d:eb:d7:c9:83:42:
                    c2:44:ef:7b:cf:1b:b0:2b:bc:24:23:c6:61:06:ce:
                    60:c3:70:e9:45:2f:ec:5c:ff:8f:e4:b2:56:40:8f:
                    e0:80:26:c9:e8:fc:12:d6:c0:1f:d7:c6:27:4b:b0:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:CA:9C:1E:3A:E2:32:03:BE:4B:B5:8C:B4:65:69:55:37:A8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.192.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1e:27:70:45:b5:e5:d3:28:a3:06:91:15:21:dc:76:00:05:
         b7:3f:30:f3:85:e9:8d:6a:26:91:b2:49:1d:4d:bb:cf:66:dc:
         11:17:3c:84:2b:ee:ab:6b:ab:9f:94:11:f3:70:2b:fc:e2:f4:
         2b:88:99:a3:e9:65:16:c1:fd:6b:4e:61:5c:ca:f7:9c:85:5a:
         78:02:7d:3e:62:2f:20:b4:4c:fe:24:31:85:d9:0c:23:fe:09:
         08:14:29:b0:40:de:3d:6b:b6:4d:64:7c:8e:6f:23:f3:82:f5:
         82:1c:13:a2:f3:13:95:44:c4:83:40:45:ea:0f:b9:30:cf:ab:
         22:75:4f:ae:f4:99:43:9a:62:a5:52:8d:90:4e:f0:02:41:d2:
         f9:25:67:0b:27:2e:09:94:82:63:4b:22:23:3a:61:16:f8:be:
         b7:b1:21:e1:7a:73:6a:8c:f0:63:03:e6:9e:ae:c2:e9:e7:74:
         f3:cd:40:17:61:51:51:c7:41:52:8b:08:12:61:92:47:1c:f3:
         f4:1e:4a:73:4d:50:4d:21:68:e6:ce:f6:c7:97:06:b6:13:af:
         37:9a:49:b5:8d:20:7c:36:cb:19:6a:49:98:1f:35:f9:25:85:
         e5:0f:b6:09:9b:6a:05:ae:c9:95:03:a3:84:dc:41:7e:31:60:
         45:d3:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org