Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/95bb7487-10b7-365a-87f7-90df03656ea4.roa
File:                     95bb7487-10b7-365a-87f7-90df03656ea4.roa (raw, json)
Hash identifier:          QhTPA6DNrMFtZWI7hTjOy/dn/w8ur6Pca4gBFvfmeqg=
Subject key identifier:   B5:30:EB:E8:40:B6:75:7A:98:FA:86:C2:68:0B:DB:7A:43:FC:10:75
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845CB3E4310ACB7E010B609CE80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/95bb7487-10b7-365a-87f7-90df03656ea4.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     13414
IP address blocks:        64.63.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:43:10:ac:b7:e0:10:b6:09:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=5fcb77df-6fc9-40a7-b70c-f5367c2d67b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:9e:c7:6b:7c:46:a5:07:cf:0b:10:4b:c4:
                    dd:ac:07:b7:06:d8:a4:29:4f:ab:89:68:b3:fe:27:
                    57:22:2e:08:11:b7:74:7d:ae:6c:bf:d8:38:ce:c7:
                    1d:96:73:07:61:87:68:d9:f5:54:c0:1e:6a:b3:34:
                    0d:e2:da:6d:43:81:ff:50:91:29:e8:28:40:3f:11:
                    76:c1:13:cd:be:ee:99:3d:68:ac:c3:ca:c4:e0:4f:
                    9a:28:e9:ae:50:ec:19:c3:fb:95:3f:40:a1:38:1f:
                    cb:12:da:66:bd:b6:dd:2f:8f:f2:5b:31:83:c9:26:
                    82:b6:2a:93:1c:a2:f1:7b:26:56:db:2f:b3:8f:a5:
                    84:5d:d9:b9:a4:28:a0:6a:ea:bc:f0:18:05:9f:cf:
                    d3:96:de:64:f3:38:1a:97:cd:c1:81:fd:57:18:31:
                    cd:6d:93:d6:d9:39:1c:12:c5:99:d7:5a:84:0b:22:
                    2e:96:d8:25:2b:22:81:0c:b5:2a:ac:f1:a5:ba:da:
                    ff:b2:16:74:fb:8b:92:b5:f4:f6:99:7e:1e:f4:f9:
                    50:c0:08:72:6b:78:2b:1a:08:63:33:5b:48:4d:9c:
                    3c:60:b1:cf:ab:d8:08:ec:c5:50:a8:a6:7f:9c:3e:
                    76:d0:97:5f:40:d3:a8:66:95:3b:77:99:eb:19:51:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:30:EB:E8:40:B6:75:7A:98:FA:86:C2:68:0B:DB:7A:43:FC:10:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/95bb7487-10b7-365a-87f7-90df03656ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:57:e3:84:a7:58:2c:2d:61:b0:fd:b9:c2:13:c7:72:77:ac:
         f5:56:e4:90:97:e4:d4:25:4c:05:c4:58:4e:7f:71:62:92:f7:
         c0:07:48:49:ef:c8:fe:67:9f:44:d8:5e:91:99:45:00:42:9d:
         d2:fb:a2:94:57:37:98:b9:98:65:07:ba:b4:da:2a:df:91:7b:
         13:78:b3:b4:ed:e8:6d:41:6a:1a:9e:67:96:3a:27:58:a8:6c:
         da:de:36:ef:21:4c:8c:33:00:4a:11:fe:34:53:30:65:cb:81:
         87:2e:83:95:0c:d8:d7:b4:ae:e8:28:cd:c8:95:45:b2:df:7d:
         12:ca:96:e2:2a:9c:fa:4f:41:68:f6:ae:4a:40:b0:69:1f:cd:
         dc:a8:94:e6:dd:6e:4c:1e:c9:a1:47:40:b4:4c:e0:f9:5e:7b:
         79:5c:c9:a2:26:c7:14:11:c8:73:e8:d3:3e:7f:88:2a:eb:c7:
         2c:6c:78:d4:35:38:1e:01:e4:c3:52:2f:e7:1e:2c:a8:4f:5c:
         2f:61:9a:e1:57:c0:1c:77:ca:33:8b:62:89:68:3f:82:06:aa:
         36:c8:51:5b:85:24:ed:92:6a:3b:1b:a6:37:ee:26:8f:ed:49:
         23:b8:b3:bb:d3:0e:65:0f:d3:6e:80:8f:dd:34:df:ac:50:61:
         5f:e1:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 04:37:00 2024 by rpki-client on console-fra.rpki-client.org