Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
File:                     b5ad165a-44f2-3c04-842b-0842c295e9b6.roa (raw, json)
Hash identifier:          zeFcfHd30MZgQA08JQSKZOYul83VH2X7dyIPhkP2gII=
Subject key identifier:   44:1E:30:DF:65:E7:6F:25:48:B8:54:ED:F3:E7:B3:1A:1F:A5:AF:C5
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F30C545C8F04FA6E239080
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11537
IP address blocks:        64.57.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0c:54:5c:8f:04:fa:6e:23:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=ebba25d8-560e-4bf6-9321-1be5a317b21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:f7:9e:d7:c4:82:32:d7:58:79:8b:3a:06:
                    16:c8:fe:8a:79:65:5f:97:4b:96:ab:b8:18:e9:d5:
                    92:54:45:37:11:72:c3:61:34:1e:6d:b4:fb:68:e0:
                    63:d6:7a:54:43:df:3e:30:b2:21:c7:cb:9f:13:dd:
                    59:95:32:f4:95:15:ae:ad:4a:5e:6a:07:c9:f5:69:
                    96:4a:27:32:62:02:66:3d:26:42:27:74:80:da:0a:
                    d9:ef:9d:97:50:f4:c0:1e:fe:e0:95:78:5d:be:03:
                    05:2b:4e:1a:9e:57:57:da:eb:e8:63:b2:7f:e5:77:
                    64:42:ad:34:12:97:89:2a:d6:75:1a:5e:7d:e2:9b:
                    f1:82:b6:ae:db:41:f2:f9:d3:3f:33:6f:e1:ae:28:
                    7f:4f:6b:31:a5:07:6d:40:61:43:29:8d:0e:c3:8d:
                    bd:c9:81:ae:51:b4:ac:82:80:99:1f:18:d9:db:01:
                    13:fd:af:10:fe:eb:d5:a3:9b:0a:38:7c:de:4c:52:
                    9a:bc:e8:43:fd:f7:be:70:fb:d6:bb:8d:b8:27:44:
                    c8:aa:81:df:4b:0a:cc:83:ad:00:0d:7c:d1:19:2e:
                    4e:30:9b:8b:a4:4d:ab:e1:02:4d:bc:4b:da:2c:e7:
                    31:d0:b9:32:26:20:98:bb:a9:1a:51:e9:b2:3e:14:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1E:30:DF:65:E7:6F:25:48:B8:54:ED:F3:E7:B3:1A:1F:A5:AF:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:93:c1:f1:8c:45:ca:6a:96:01:a4:fb:6b:ba:91:1e:76:7b:
         dd:e7:8e:2a:68:af:bc:58:dc:30:c1:37:43:d2:22:a2:af:38:
         4b:28:ed:87:03:d8:0c:b2:72:fd:ce:74:1f:b0:da:45:41:b2:
         e2:6d:a4:94:1c:bf:f3:9b:fc:9f:83:e4:24:49:0d:85:0f:e9:
         47:f3:7e:28:cc:a7:e1:f5:59:58:a8:15:c4:58:92:0b:92:65:
         79:8a:d8:f8:5b:fd:10:d3:a1:93:42:65:61:5d:8d:26:7a:3e:
         29:e2:1b:f2:c0:7b:2f:9c:73:19:b4:de:fc:bc:74:4d:c4:05:
         b1:7a:11:90:fe:93:5b:71:1c:33:44:4a:42:38:65:b8:cb:04:
         e9:af:af:fe:53:97:ab:4e:89:49:91:de:a6:0a:70:1b:58:fe:
         eb:b5:95:1e:76:1a:2d:a6:14:43:75:11:cb:04:5f:05:23:37:
         b8:cd:8a:66:41:35:18:55:20:87:27:37:11:1a:c3:2f:cd:de:
         78:80:83:63:cb:fe:9c:b4:67:85:c3:38:78:92:3b:ba:1c:3c:
         9d:d2:68:76:6f:8d:75:14:c2:8f:ef:cf:d2:73:07:79:4b:52:
         81:2e:4d:0b:2c:39:30:45:e8:84:54:f4:7e:3a:7b:0a:3b:fb:
         78:8a:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:47:20 2024 by rpki-client on console-fra.rpki-client.org