Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa
File:                     48d0fc30-2a27-38a2-8e44-7a14c574b839.roa (raw, json)
Hash identifier:          BH1XJqw6KFriiSOQJLxDvflpyQ2DOsdwCG5IyB6fiX0=
Subject key identifier:   43:BA:68:5B:F4:6E:FF:E0:91:74:83:04:66:31:B8:11:5B:ED:FA:3B
Certificate issuer:       /CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7
Certificate serial:       010D0C9F43285845330951C85D90B7E61E3DB780
Authority key identifier: F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa
Signing time:             Thu 14 Mar 2024 00:31:05 +0000
ROA not before:           Thu 14 Mar 2024 00:31:05 +0000
ROA not after:            Wed 12 Jun 2024 00:31:05 +0000
asID:                     64238
IP address blocks:        64.191.0.0/23 maxlen: 24
                          2620:ff:c000::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:09:51:c8:5d:90:b7:e6:1e:3d:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7
        Validity
            Not Before: Mar 14 00:31:05 2024 GMT
            Not After : Jun 12 00:31:05 2024 GMT
        Subject: CN=7572bf03-7f44-40f3-afda-8b8c9ef9d1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:30:84:30:2f:cb:aa:e4:23:6b:dd:5e:3a:
                    71:a7:8d:e3:cf:e0:79:a5:a6:30:4e:d1:29:76:fc:
                    79:61:a3:98:98:bf:35:ec:fd:ab:a4:68:e1:87:4b:
                    a2:56:d6:5d:3c:cf:7c:9d:2e:5f:e2:9d:93:57:aa:
                    42:9a:72:2a:01:47:87:c6:a0:9e:10:e2:9c:43:63:
                    71:19:60:9b:14:38:7e:2a:4a:68:3e:19:17:98:2c:
                    54:fc:a9:af:3c:ca:cf:6f:67:a7:15:a0:6d:70:14:
                    05:68:97:b9:fe:e2:ec:24:78:22:b1:4e:49:59:33:
                    55:f9:b6:62:b6:14:b7:97:db:7d:64:e4:9a:f4:d6:
                    c1:08:ea:f4:5c:5e:3d:2e:46:21:a6:10:8e:d3:7d:
                    4a:33:e8:ce:5c:b1:e5:7c:c5:9f:3f:ad:ac:53:e9:
                    ea:41:7f:fd:d8:58:1b:ea:2b:77:d4:96:82:89:16:
                    59:9f:4d:49:45:b2:db:13:90:ae:38:0f:2e:09:bd:
                    45:62:c4:40:ba:d3:6e:d0:af:65:ba:fc:de:2d:1e:
                    f4:79:aa:3d:3c:5b:3c:e6:a0:95:6e:7e:b6:9d:b8:
                    b3:87:e8:68:fd:96:f7:8c:7e:1a:1d:ca:d3:53:55:
                    ae:86:92:83:1e:ec:dd:0a:4f:9a:c9:d6:b3:fd:ad:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:68:5B:F4:6E:FF:E0:91:74:83:04:66:31:B8:11:5B:ED:FA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.0.0/23
                IPv6:
                  2620:ff:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:cf:96:4c:e2:39:95:0d:88:6a:bc:01:6c:8f:d6:a7:f0:
         24:0a:32:29:ff:2c:ad:36:2a:ee:b3:f0:b6:9a:68:23:a1:43:
         67:cb:8a:8d:21:8f:5b:81:4d:55:c0:a6:89:40:2b:63:99:2f:
         3a:27:17:74:56:b2:83:d3:34:1f:24:42:eb:fe:64:ef:d9:cf:
         26:30:7e:e1:72:ff:9d:12:79:c8:c7:b8:56:32:2e:93:67:22:
         c0:99:99:2e:90:c9:ca:55:a0:d0:00:59:28:a5:80:d7:93:38:
         7f:22:94:28:24:93:a2:12:79:f4:2a:cb:45:ff:78:3e:70:f0:
         8f:69:19:c0:6e:85:a8:11:86:85:4a:24:6f:8e:f2:5d:b4:ce:
         99:bf:35:23:71:77:13:e0:71:a9:af:4b:53:f3:37:6e:03:44:
         fb:2a:0a:ea:67:8b:ef:6e:23:67:90:b6:dd:c4:eb:d8:f1:41:
         08:bd:09:70:4a:99:9c:5d:3a:72:1b:83:b6:cb:04:31:be:07:
         65:1c:4a:c0:b8:89:4f:83:0d:b5:e7:bf:43:28:2b:83:4e:28:
         c8:e6:5c:6f:44:2d:1a:62:f2:7c:cc:b3:74:74:56:6d:f7:cc:
         46:fd:04:5b:bb:c8:9b:84:35:e2:a6:83:a0:97:65:ec:8d:6e:
         17:9b:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:44:02 2024 by rpki-client on console-fra.rpki-client.org