Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
File:                     4e6253b3-d831-3192-8372-3f91ef10aa0f.roa (raw, json)
Hash identifier:          B7NMN8EE3DD4Rt0+hUaQAhF3a7/t0uKVotYF6/txCw8=
Subject key identifier:   4D:5D:62:38:60:10:54:D3:AF:63:76:7D:08:6E:28:15:4E:1A:4F:2F
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F4328584563F30E72748EB18B4B22F9C0
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     15213
IP address blocks:        64.57.8.0/21 maxlen: 21
                          64.57.3.0/24 maxlen: 24
                          64.57.10.0/24 maxlen: 24
                          64.57.15.0/24 maxlen: 24
                          64.57.12.0/24 maxlen: 24
                          64.57.11.0/24 maxlen: 24
                          64.57.8.0/24 maxlen: 24
                          64.57.6.0/24 maxlen: 24
                          64.57.1.0/24 maxlen: 24
                          64.57.0.0/21 maxlen: 21
                          64.57.5.0/24 maxlen: 24
                          64.57.0.0/20 maxlen: 20
                          64.57.4.0/24 maxlen: 24
                          64.57.14.0/24 maxlen: 24
                          64.57.13.0/24 maxlen: 24
                          64.57.9.0/24 maxlen: 24
                          64.57.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0e:72:74:8e:b1:8b:4b:22:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=a4d419ad-ffc9-4bbc-8c05-75d41ee98cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:bf:64:c5:04:fd:70:51:0f:53:41:2f:f2:
                    89:47:a7:3b:ec:ae:8c:ab:87:43:6d:45:d7:24:ce:
                    9e:9a:79:a3:f5:dc:a6:da:1c:3b:16:99:6e:71:56:
                    45:6b:f0:cb:29:8a:71:59:be:83:9a:d6:21:95:8b:
                    d4:d2:0d:ef:18:e2:fd:15:d1:92:fd:46:ef:66:14:
                    52:07:cb:28:4b:0c:48:68:36:a4:17:52:c0:fa:16:
                    45:83:2b:de:3d:7a:47:3a:55:4d:4c:10:7b:0a:4b:
                    c0:5c:5b:a1:29:56:7b:6c:f7:45:c0:72:37:5c:b4:
                    6c:6c:b8:80:1f:0d:4c:d6:76:2c:0e:c8:3d:72:83:
                    d5:0d:7a:3a:88:fa:1d:34:bc:50:62:35:8a:51:f0:
                    be:72:3a:54:0c:f5:ea:6e:5a:c9:f9:38:a4:db:d5:
                    44:33:2d:5e:69:56:b1:2a:48:10:d7:0c:f0:ec:e5:
                    aa:8f:36:98:fe:fe:ef:33:ae:c8:c4:3c:88:7a:a5:
                    88:04:3d:38:55:5c:34:b4:84:53:74:95:60:be:b5:
                    fe:ae:43:59:33:95:69:cf:a7:87:af:bd:83:23:47:
                    c5:aa:7b:97:f0:0c:58:e9:04:6f:cc:cf:67:e0:e7:
                    db:96:6c:c9:6a:f7:30:c4:23:73:0b:18:17:ec:a4:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:62:38:60:10:54:D3:AF:63:76:7D:08:6E:28:15:4E:1A:4F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:00:32:ab:07:25:4d:49:99:d4:0f:55:7a:8a:10:4e:b8:
         6a:4c:c7:d0:9e:5f:51:04:0c:65:cc:4c:ac:ab:9e:fb:c5:7c:
         3c:c3:1a:5d:45:f1:02:22:51:44:d6:dd:5f:70:0c:2d:fc:f3:
         4c:ad:b1:69:94:5f:90:0a:59:30:bc:28:29:3b:37:f7:08:d3:
         8f:58:5d:ce:f1:4e:fa:55:d5:39:86:96:a7:23:d6:54:6c:52:
         67:e7:a9:f2:f3:62:b2:de:59:92:3c:4c:dd:39:18:0c:71:a2:
         28:ed:b1:6f:d0:ab:61:c0:20:97:e8:51:7a:a6:94:2c:fb:83:
         3c:8e:76:fb:90:87:56:70:2c:3d:eb:3a:e8:53:ab:af:0b:fb:
         b5:6a:b2:b7:37:c4:75:44:bc:8d:d8:d0:79:93:d9:f1:19:cb:
         91:9e:f2:2a:2c:3b:87:a4:1a:e7:d5:e1:15:45:58:90:3a:df:
         64:ba:bf:0a:56:89:04:dc:20:89:2d:06:97:53:70:c4:31:d3:
         e2:16:8c:2e:9c:96:b4:f5:07:27:75:c7:10:db:d9:e9:14:77:
         03:39:a9:bb:24:3b:b2:54:12:08:5c:ff:f7:a0:d0:1e:15:30:
         be:8c:7e:a3:62:f8:fc:1b:f5:2b:97:d9:4d:7e:93:d1:be:41:
         25:66:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:51:06 2024 by rpki-client on console-fra.rpki-client.org