Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa
File:                     842ecda0-182f-3843-adab-4bdda84d6875.roa (raw, json)
Hash identifier:          cz4zpU1G/c0c5IiWMAmF98lyoshhFS57NLItroIdQPE=
Subject key identifier:   08:5F:FF:33:B3:78:1F:61:60:7C:AA:11:C4:57:2F:45:FA:DC:3F:AB
Certificate issuer:       /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
Certificate serial:       010D0C9F43285844F52F6B1B3B316AB6F308F080
Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa
Signing time:             Tue 20 Feb 2024 20:47:43 +0000
ROA not before:           Tue 20 Feb 2024 20:47:43 +0000
ROA not after:            Mon 20 May 2024 19:47:43 +0000
asID:                     14618
IP address blocks:        64.57.33.0/24 maxlen: 24
                          64.57.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:2f:6b:1b:3b:31:6a:b6:f3:08:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
        Validity
            Not Before: Feb 20 20:47:43 2024 GMT
            Not After : May 20 19:47:43 2024 GMT
        Subject: CN=e443bae3-13f1-45b3-8dea-a584fd81da05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:52:9b:18:ed:de:d8:01:60:44:97:33:83:
                    14:61:eb:c9:5b:e9:8a:6d:be:92:b8:71:70:5f:a3:
                    ba:a0:6c:ba:3f:e1:5b:d5:d1:f7:b4:d9:70:0e:1c:
                    be:fe:df:be:d4:ce:7e:97:01:ec:74:24:f1:b7:3d:
                    4e:c5:79:85:f9:07:f1:a3:3c:82:6d:7b:d6:95:a4:
                    9e:ab:30:ae:dc:6d:72:ac:80:83:92:cf:9c:b6:2a:
                    c0:8b:a8:fb:e9:78:cc:3c:43:fb:f9:d1:78:9d:13:
                    b4:18:fb:6e:7d:3f:da:d9:cf:68:f3:42:15:8d:1b:
                    36:35:07:14:10:2b:ba:81:db:62:54:48:84:76:8b:
                    8f:cc:bc:e4:43:2a:3c:65:4e:cd:a2:31:a3:c6:20:
                    61:28:23:14:b6:68:d5:52:dc:3e:ea:1f:f0:0b:bd:
                    59:91:65:dc:c8:35:db:dd:fa:b2:c9:a1:6c:7d:48:
                    39:e5:f3:d3:3f:65:12:e7:3d:05:45:0e:f9:d5:90:
                    76:95:02:c9:ba:94:d0:0c:7d:ca:57:4b:f9:9c:c0:
                    2e:8f:59:11:6e:44:a2:b1:11:b0:09:32:c4:1e:1e:
                    42:c5:37:cf:1a:4c:f5:af:d0:fd:f6:d1:4f:c6:61:
                    22:06:82:d2:bb:08:c0:ab:c7:d5:fd:65:36:6e:5c:
                    7c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5F:FF:33:B3:78:1F:61:60:7C:AA:11:C4:57:2F:45:FA:DC:3F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl

            X509v3 Authority Key Identifier:
                keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.33.0-64.57.34.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:c5:2f:43:92:1a:7d:d4:5f:22:ac:b0:df:d4:7b:33:93:
         d3:77:f6:01:9b:5e:ff:aa:5f:2a:f5:ec:95:8a:b2:37:f3:37:
         b6:14:14:cd:13:84:e5:db:18:16:9d:b3:bc:07:3e:fd:64:7a:
         23:5a:d3:7b:fc:4a:46:db:03:7b:29:a5:a4:08:07:30:66:fc:
         6e:9a:de:cf:8a:a1:ba:2c:40:61:2b:3a:4b:96:2b:5c:2a:b5:
         35:16:71:1e:dd:e3:57:ae:92:71:d7:c9:18:a7:01:c9:37:ed:
         29:01:a5:35:0a:44:94:95:2a:91:f9:b0:12:0b:9e:b7:0a:38:
         3e:e3:2f:21:ef:f7:a4:b0:6f:cd:8c:b1:23:57:95:8e:ea:4f:
         6f:be:aa:48:d9:fa:f1:e6:f6:3a:f8:a9:39:f4:08:8d:95:2b:
         6d:36:02:5f:c4:0e:ec:df:e9:ba:8d:59:ee:6c:03:48:0c:66:
         c8:f3:ec:98:cd:40:9f:fc:d4:6f:a3:f8:cf:d7:da:62:99:c1:
         ae:6d:92:bd:4e:b0:03:d6:e3:e1:16:6f:aa:26:ed:c4:81:76:
         f1:14:0c:0a:59:d4:de:4f:c2:1f:86:f1:5c:d2:a4:53:23:cc:
         75:dc:2d:1d:55:3c:d2:e8:f6:50:5c:9d:9e:37:57:f1:cf:86:
         6b:de:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:24:58 2024 by rpki-client on console-fra.rpki-client.org