Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/6dbd232f-690e-3215-b880-148975cd85db.roa
File:                     6dbd232f-690e-3215-b880-148975cd85db.roa (raw, json)
Hash identifier:          5TdOHY6PUNGmQIpuNmh7EGvp9FqYMf7u9mM7kMATsbM=
Subject key identifier:   EF:23:0F:22:18:D1:75:A0:54:78:86:22:10:6D:40:85:D1:09:30:B0
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285845BA7E30EB23CAF9D364698F80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/6dbd232f-690e-3215-b880-148975cd85db.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     18594
IP address blocks:        64.57.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:30:eb:23:ca:f9:d3:64:69:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=11beabdf-a162-46ed-9301-cad7fdaa73ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:95:4e:14:55:d5:0c:3a:a2:bd:3f:b3:97:
                    9a:2d:2e:fe:d6:7f:d2:3e:9a:1c:e9:23:03:be:1a:
                    1d:3e:f0:ae:c8:16:ca:e5:a1:f4:0d:ff:0a:48:ef:
                    7f:2e:7f:f9:e0:57:13:d1:6e:17:78:e8:0d:2a:09:
                    ac:08:d3:18:82:c2:2e:ac:be:99:15:05:96:20:f8:
                    b9:19:09:80:ef:b0:b5:f6:6c:74:91:51:dd:20:38:
                    5b:51:b1:ab:bd:04:9f:5d:2b:d1:07:99:69:bf:92:
                    ce:a4:2c:59:f0:17:9e:82:8d:ec:d9:04:f6:6c:92:
                    b6:2c:9f:2e:d2:54:a8:ba:8b:1f:50:4a:95:5b:50:
                    5f:dc:36:59:1c:37:e0:1c:73:ec:90:6a:70:74:30:
                    ff:13:ce:81:17:75:a9:ec:61:ec:d9:fc:da:44:03:
                    a7:9d:ef:1a:cd:d5:6b:a8:88:5e:a4:86:97:e1:ca:
                    01:1c:b6:90:78:aa:1e:50:26:3f:56:2f:e5:56:84:
                    27:8a:26:31:43:c2:67:06:df:1c:58:cd:54:8e:c1:
                    e8:ad:63:93:55:1a:82:9d:f4:44:08:f9:ed:01:77:
                    a0:bb:da:04:38:00:af:b4:b4:47:84:59:17:1e:bc:
                    7c:c8:09:90:1c:32:2a:d4:8b:b4:fc:9e:86:9a:27:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:23:0F:22:18:D1:75:A0:54:78:86:22:10:6D:40:85:D1:09:30:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/6dbd232f-690e-3215-b880-148975cd85db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:d5:67:32:54:fd:16:42:38:ec:d9:4e:61:9a:64:19:61:
         6d:4a:87:84:fd:e8:c0:7c:d8:e7:ce:be:4e:18:e1:1a:ca:0b:
         29:2a:68:23:f9:84:fb:40:cf:54:6d:74:04:c3:09:42:2f:9a:
         64:51:d1:3f:02:ff:64:db:59:60:db:b7:80:b4:92:2a:b3:7e:
         56:e4:43:ee:26:d3:02:72:a2:f9:98:d8:a5:72:e9:59:dc:44:
         9d:18:82:75:32:51:1e:5e:a8:e2:f4:36:c8:41:ee:5a:ab:cf:
         42:86:3e:a6:f6:11:59:d0:55:1c:45:3b:b1:0b:74:b9:2e:b0:
         98:b0:2f:44:26:54:7b:15:d9:d2:e8:1d:89:95:38:e9:bc:e9:
         4a:36:89:db:b1:db:50:7d:63:2b:e8:60:10:f4:75:1e:aa:a3:
         c5:4d:47:07:71:59:57:76:0f:70:14:f4:6e:08:43:f2:b7:88:
         aa:26:97:63:1a:35:fb:c7:71:f6:5b:51:05:4f:19:c4:c4:5b:
         4f:84:0b:d0:0e:1b:fb:09:ff:c4:6e:65:24:dc:ea:a4:fa:92:
         b6:d5:cf:6d:91:0e:74:98:9a:9e:cd:8f:27:9e:10:1d:e4:90:
         79:ba:da:15:c1:62:85:cc:d3:eb:bf:97:ba:a9:c0:ae:83:82:
         21:93:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:22 2024 by rpki-client on console-fra.rpki-client.org