Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa
File:                     ccea40b6-6b8b-3260-8acb-11e182c16519.roa (raw, json)
Hash identifier:          yHXK9FvqRhOiI6hCLvfNWxgyv8qR6EH3NfkdwX1/pXA=
Subject key identifier:   6C:33:B6:F0:4E:0D:D2:A3:44:D6:29:90:8C:CE:FC:56:E3:3D:4C:70
Certificate issuer:       /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Certificate serial:       010D0C9F43285845883DE14DF34395BB201DF680
Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     21657
IP address blocks:        64.147.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e1:4d:f3:43:95:bb:20:1d:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=3971ac56-066e-40aa-997e-51c2c3821868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:77:ec:2a:d5:7a:0b:3a:9e:91:46:1f:a5:
                    f8:42:56:fa:77:6a:98:fe:28:31:bd:7c:65:65:c7:
                    de:39:aa:18:33:2b:36:79:f1:51:eb:b2:65:65:39:
                    14:28:62:04:69:e5:92:28:fe:0f:63:8a:44:0b:30:
                    85:0b:13:75:06:e9:96:ca:9c:c6:e6:d5:c5:a4:97:
                    6c:0f:7a:87:b9:70:b1:d9:b7:82:9c:ec:6b:1b:30:
                    f2:c1:cd:39:dd:4c:b9:57:28:a9:d6:15:0d:b1:57:
                    17:a1:0d:9b:38:ae:ae:8b:45:63:bb:d9:1f:52:1e:
                    91:09:24:7a:95:53:50:c9:91:7a:68:a7:ce:a6:70:
                    2a:b0:2c:1a:76:bc:32:c2:ab:10:8b:da:26:e7:9e:
                    49:2d:17:43:2b:20:96:bb:2d:db:66:27:4b:9f:6f:
                    a4:91:74:9f:95:78:ce:a7:14:40:f9:41:f7:f5:70:
                    57:3e:76:b7:7a:08:cb:f1:d9:ec:6c:c9:cb:bb:f5:
                    bf:c3:fa:78:72:16:55:31:c3:b1:d5:4d:ce:79:df:
                    c3:4a:cc:f5:06:40:03:f2:56:af:ea:41:09:6d:fb:
                    cc:2f:05:a0:c1:dc:0c:79:dd:b0:df:fc:ef:dd:49:
                    e8:ee:3e:9a:d9:d3:73:51:26:e9:46:f6:f7:11:ef:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:B6:F0:4E:0D:D2:A3:44:D6:29:90:8C:CE:FC:56:E3:3D:4C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.147.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:71:47:38:27:25:18:12:7b:18:7e:48:63:7e:c1:f7:a6:f2:
         d6:91:08:b8:5c:9e:33:bf:ff:7f:de:e8:93:9b:5a:b5:db:4c:
         5f:57:61:8a:56:02:c6:10:01:38:07:fa:61:0a:a9:47:1a:71:
         ce:df:58:20:2e:38:88:95:77:71:d0:e6:88:eb:8b:e1:9f:67:
         f6:16:50:f2:2a:b5:c4:44:92:40:72:bd:15:92:7a:f6:c3:79:
         f4:49:99:02:66:b5:9a:26:54:34:08:53:65:a4:8b:b8:21:29:
         75:7a:88:dd:d4:fe:f7:83:73:e7:9d:3c:3d:c1:ce:54:be:c2:
         29:97:58:1a:8b:f1:60:d3:78:34:a1:30:bd:e9:e5:e7:8d:ad:
         0b:05:86:c1:15:50:4a:1d:7e:b7:ba:d1:91:00:49:93:2a:35:
         af:8b:25:b3:7e:35:13:f4:30:68:c5:64:2a:e4:67:0a:15:4f:
         58:67:d6:37:29:86:55:93:6e:f3:04:88:a0:40:fd:d6:19:24:
         b0:6d:69:c7:c6:6a:4d:6e:8a:d5:03:e7:85:2b:7f:a1:b6:1b:
         3f:2a:15:7c:86:82:0c:54:be:02:a3:84:30:90:a2:e0:00:83:
         38:2d:23:d8:d8:ea:74:c1:61:c6:07:a4:1a:ab:67:e9:5d:6a:
         88:a7:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:52:30 2024 by rpki-client on console-fra.rpki-client.org