Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
File:                     32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa (raw, json)
Hash identifier:          KPDfKhzT+Bk2LBKqz2NHvnF6yTfWugnHQ/falqD18oI=
Subject key identifier:   A7:23:4F:F0:F9:C4:86:3F:11:D2:3C:F4:71:5A:1A:6D:04:95:C0:E1
Certificate issuer:       /CN=79af2149-f711-4230-b22d-36786f0219ac
Certificate serial:       010D0C9F43285844CA8518619ABAD5BE77693FC0
Authority key identifier: 57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
Signing time:             Mon 05 Feb 2024 14:00:31 +0000
ROA not before:           Mon 05 Feb 2024 14:00:31 +0000
ROA not after:            Sun 05 May 2024 13:00:31 +0000
asID:                     398182
IP address blocks:        64.186.10.0/24 maxlen: 24
                          198.135.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ca:85:18:61:9a:ba:d5:be:77:69:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79af2149-f711-4230-b22d-36786f0219ac
        Validity
            Not Before: Feb  5 14:00:31 2024 GMT
            Not After : May  5 13:00:31 2024 GMT
        Subject: CN=2389c908-415c-415b-adf7-fa3228c2ecce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:8f:ec:9b:f0:18:36:9c:fe:4c:a1:1c:66:
                    e9:3e:7f:2d:2c:6a:17:66:35:97:45:89:31:a6:14:
                    c9:55:30:42:27:fd:36:25:89:c0:60:bf:8d:eb:e4:
                    1d:77:55:e2:df:db:8c:4b:0b:2d:3f:d4:43:2e:64:
                    29:cd:f4:a8:62:d2:f0:21:0d:e7:05:27:68:b8:bd:
                    89:52:e4:be:59:a9:bb:ec:44:57:01:60:67:53:e8:
                    56:80:ec:93:5d:ea:1c:ce:16:85:dc:bf:47:b9:c1:
                    25:06:51:29:19:3d:ca:a1:4b:82:70:ed:31:95:82:
                    6b:7e:86:b7:85:88:2e:b8:79:bd:5e:c6:83:da:c0:
                    a6:d3:7f:04:ac:b9:99:52:99:44:6a:20:93:03:f4:
                    e3:38:bc:ef:42:d2:28:7d:43:b2:3b:4c:9f:1a:86:
                    c1:ca:86:82:8f:36:b0:3b:e2:8f:67:99:16:e6:71:
                    05:91:ae:46:21:2d:41:f9:d1:8d:f1:de:b1:89:af:
                    01:1f:cb:8f:9e:ff:dc:0f:c8:c5:54:60:65:35:8e:
                    9e:f1:2f:95:ac:73:63:24:47:a3:02:9d:34:e8:94:
                    f1:e5:6e:bc:e8:3e:54:0d:65:a5:06:b4:6e:67:76:
                    5f:4d:d0:b1:23:3e:41:89:5f:a9:d0:d2:9c:94:fe:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:23:4F:F0:F9:C4:86:3F:11:D2:3C:F4:71:5A:1A:6D:04:95:C0:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl

            X509v3 Authority Key Identifier:
                keyid:57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.10.0/24
                  198.135.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:15:5d:68:6a:0c:cb:a9:95:e0:33:0e:a9:e3:c8:6e:a2:
         59:c6:8d:40:1c:98:ca:01:ac:f3:9c:3f:be:a5:86:7a:3a:de:
         b8:5b:e7:63:0c:93:b6:d0:27:be:95:87:43:11:b1:3e:e8:bc:
         25:d8:a9:bd:a6:c8:89:41:62:0d:37:0e:a4:92:49:23:19:10:
         96:c1:c0:13:54:f1:06:2c:06:e7:69:15:20:1f:40:66:79:a2:
         71:fa:53:6c:d8:5c:db:40:ba:3f:b7:7c:0c:9b:0a:dd:b1:3c:
         12:19:3b:a6:90:87:af:ba:48:f2:33:ff:ac:a2:8d:ff:f5:95:
         95:e0:ab:ba:6a:73:a2:f0:93:1c:dc:5b:28:2c:63:38:9e:09:
         11:18:42:12:17:de:7c:37:e6:b0:ac:4c:f0:3f:a0:d9:d7:55:
         5d:c8:42:23:74:08:36:82:2d:aa:ed:f3:3f:25:e3:b9:af:03:
         e6:f1:5a:39:78:f9:c8:8b:2a:f5:2c:83:ca:45:e5:ec:08:b1:
         31:c2:ba:56:c0:50:ea:1e:21:a3:6e:1e:37:ad:4e:98:93:76:
         ec:c1:ab:bd:66:84:52:28:8a:63:a8:33:d6:82:57:34:b2:88:
         55:4d:4f:6d:59:45:6e:4f:59:3e:17:48:d8:2e:94:17:9d:bf:
         15:f2:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:44:44 2024 by rpki-client on console-ams.rpki-client.org