Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa
File:                     4571e95a-de62-38cd-b7f3-2899cf91497b.roa (raw, json)
Hash identifier:          bzbrpMm8K2KJzoSpzfUQMeEYg/knr1nl7qc+mjW/XKU=
Subject key identifier:   DD:8B:32:97:30:F8:B4:90:05:5B:A5:46:91:C7:6B:AB:D1:E1:44:65
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F43285845B21E190D806F594659661000
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16686
IP address blocks:        64.68.195.0/24 maxlen: 24
                          64.68.198.0/24 maxlen: 24
                          64.68.199.0/24 maxlen: 24
                          64.68.196.0/24 maxlen: 24
                          64.68.197.0/24 maxlen: 24
                          64.68.193.0/24 maxlen: 24
                          64.68.192.0/20 maxlen: 24
                          64.68.192.0/24 maxlen: 24
                          64.68.207.0/24 maxlen: 24
                          64.68.194.0/24 maxlen: 24
                          64.68.205.0/24 maxlen: 24
                          64.68.206.0/24 maxlen: 24
                          64.68.202.0/24 maxlen: 24
                          64.68.203.0/24 maxlen: 24
                          64.68.200.0/24 maxlen: 24
                          64.68.201.0/24 maxlen: 24
                          64.68.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:19:0d:80:6f:59:46:59:66:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=3e6da5c6-c092-4ea0-873d-9ceed91bc6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c2:f1:30:95:0c:d6:01:99:de:15:84:17:e3:
                    b3:44:78:f7:59:af:c9:df:49:d5:a0:92:a3:4d:f7:
                    79:81:c3:48:4c:8e:a2:da:e1:e0:85:d9:4b:28:86:
                    ea:22:1e:a0:7f:3a:fa:b6:54:9d:df:43:2f:5c:49:
                    b5:b3:ef:db:58:e4:74:9c:d2:d6:fe:c9:5a:c4:8b:
                    b8:72:94:26:75:82:59:6b:ce:09:6c:4f:4f:a0:9a:
                    78:b0:5f:90:26:00:9e:1f:7d:03:47:06:21:74:14:
                    97:bc:d1:ce:17:45:0d:cd:05:c9:5a:56:bb:15:97:
                    37:30:03:e0:ed:ae:02:41:3f:b7:d9:fb:b2:52:79:
                    62:c7:85:64:87:5d:37:e3:40:af:de:bc:18:82:4d:
                    58:34:7a:c0:d2:09:98:2c:6a:63:61:a1:4c:0f:e4:
                    7c:27:8a:0d:00:af:67:18:5f:c6:b6:04:ed:8f:a2:
                    a3:b7:53:de:2c:04:6c:8f:f6:aa:7e:43:ba:97:0c:
                    eb:fb:09:a8:ed:da:f0:ca:43:0e:4f:0c:84:8a:ed:
                    ad:46:09:63:2f:87:6c:78:66:c5:ef:cc:f9:76:ed:
                    bb:da:20:71:76:ef:c7:f7:58:ed:ad:73:8d:2f:e9:
                    d4:dc:da:7b:b3:eb:87:5a:7c:ae:d4:c0:80:a7:f5:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8B:32:97:30:F8:B4:90:05:5B:A5:46:91:C7:6B:AB:D1:E1:44:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1a:4a:69:17:10:e8:47:b5:2e:aa:bf:db:eb:da:61:11:4f:
         61:b4:13:3e:32:83:71:21:3d:01:c6:81:ca:b0:07:59:bc:fb:
         20:29:ba:0e:cc:1e:ed:ef:e5:9c:0a:3d:38:84:48:a9:50:ae:
         f8:70:af:eb:99:be:9d:eb:6e:88:96:c6:42:74:2f:e0:48:fa:
         7f:3f:17:fd:7e:6b:8a:df:65:ac:25:03:76:16:e4:12:e3:54:
         18:ad:77:60:41:d4:59:ac:bd:7a:bd:d9:5c:d8:d4:16:76:f7:
         62:1e:ab:b9:81:b3:54:aa:0e:f8:98:e7:8b:b2:4b:89:7d:81:
         11:33:b9:7d:2c:51:7f:86:23:2d:90:e4:19:3e:1a:d2:f3:f9:
         08:c2:09:55:98:e7:3f:ae:b3:28:13:8c:a3:c8:1b:b4:46:24:
         b8:0e:ae:28:a7:f5:64:36:02:3a:23:6c:35:69:e1:a0:72:36:
         69:59:2e:1f:47:fe:34:9f:42:da:a3:68:39:70:66:d2:6a:c0:
         3e:4c:01:de:86:88:ba:d9:72:a3:49:ff:86:7e:a5:4b:d5:b7:
         08:cb:46:6a:4b:bc:35:07:d3:8a:90:eb:0c:8a:89:63:2d:15:
         d1:33:d9:cb:16:48:1d:df:89:f4:22:e7:49:cf:5c:ed:86:ac:
         08:34:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:55:30 2024 by rpki-client on console-ams.rpki-client.org