Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa
File:                     27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa (raw, json)
Hash identifier:          LRmybk/73NI4kSKK3a5o3lveeSdjH2zfnFffsrKGm4w=
Subject key identifier:   1B:50:B9:F4:FA:78:49:3B:F8:17:D3:F3:49:03:77:E3:D6:73:A6:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FADB9FC2DC5E97CFD436080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7725
IP address blocks:        64.139.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:b9:fc:2d:c5:e9:7c:fd:43:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4832a898-bb43-4df4-a010-db36bd574e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:81:9f:9a:fa:f8:6c:b1:5a:0c:d9:4e:6a:
                    08:ed:40:db:95:cf:66:10:76:8f:c6:66:05:17:7f:
                    5c:33:38:e9:25:cf:31:c0:87:78:ca:25:4d:91:c4:
                    ca:54:7d:e2:fb:ba:34:ab:99:76:6e:1b:69:ef:bd:
                    92:4c:dc:27:74:9c:84:85:05:c0:c2:18:87:a1:0d:
                    c5:c0:0a:cc:b7:a8:9f:2c:1b:10:52:9b:2f:0b:10:
                    80:30:dd:b8:f0:cc:ef:62:48:d8:c9:46:31:cd:b2:
                    52:70:10:d1:4a:99:56:77:00:f9:5c:fe:4f:53:e8:
                    07:0c:12:46:b2:6a:a3:5e:0e:f5:80:44:2a:e8:89:
                    74:fa:77:c4:90:e6:db:5a:fa:d1:ac:0a:e4:c9:13:
                    94:4e:21:4b:d1:e6:b2:6e:47:fb:96:02:8c:0f:37:
                    98:f7:73:5b:6b:09:e9:ef:e3:fd:ec:d9:d6:18:79:
                    82:ea:3b:9a:5d:2b:64:5a:91:a1:76:1d:75:f2:85:
                    c0:6d:d8:dd:40:7d:f9:bb:8c:0f:17:28:dc:54:b0:
                    47:42:e5:bf:48:50:e4:44:06:4a:85:9f:93:58:c4:
                    55:54:6a:87:ab:62:ca:6d:76:1f:e9:58:5c:59:7a:
                    ce:22:46:64:0e:e3:28:80:64:24:63:95:56:5f:e1:
                    76:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:50:B9:F4:FA:78:49:3B:F8:17:D3:F3:49:03:77:E3:D6:73:A6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:50:be:49:d9:22:a3:e3:18:2c:cf:ad:9b:55:7a:6f:85:31:
         7b:ae:36:4e:80:14:28:7e:44:b0:3f:69:b6:a8:b8:bc:46:c6:
         43:d2:3c:c8:bd:bd:8b:06:ab:46:13:60:4b:4c:89:00:c7:79:
         91:7a:7e:f5:dc:c0:8a:f3:1c:3d:fb:f6:73:0d:68:5a:9d:d7:
         f9:fb:7f:8d:73:f3:2d:2e:e9:33:eb:46:e6:90:f1:77:aa:f6:
         a4:1b:bf:b1:32:e9:e2:c2:02:53:95:0d:98:0d:73:ac:3c:f5:
         d2:1c:39:e3:0a:27:f1:d6:d4:b9:49:8b:e0:bb:64:d9:62:c9:
         33:04:6a:e2:b8:fe:f0:93:34:2f:04:5a:37:25:fa:fc:aa:9f:
         b0:77:26:a3:33:cb:38:9a:39:9b:83:fa:1f:49:62:89:ca:88:
         2f:1a:5a:e5:bc:3b:c5:04:78:dc:ca:17:60:11:87:9f:0c:17:
         01:b5:24:99:3d:98:fb:c5:0b:59:23:1c:57:65:38:14:77:87:
         2c:6a:a5:6b:64:84:20:15:77:6f:de:01:f1:79:90:be:e1:41:
         9d:bd:e4:e7:51:a2:11:52:2c:9a:64:4d:2f:af:90:18:4c:89:
         df:fd:49:1f:7b:00:19:34:62:4b:e4:07:ff:5d:60:4a:91:71:
         5e:fc:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:25:18 2024 by rpki-client on console-fra.rpki-client.org