Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/95750541-b582-3e09-a593-2da62f77ba08.roa
File:                     95750541-b582-3e09-a593-2da62f77ba08.roa (raw, json)
Hash identifier:          Taxl+JFIW6Ffvipjr9J5+fzazU2OenrRv6xQ7lsMOBA=
Subject key identifier:   D6:B5:55:50:98:0A:C4:87:49:94:1A:49:48:4F:C3:30:0E:80:DA:0C
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F432858451B83C0FAF171B54296333C80
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/95750541-b582-3e09-a593-2da62f77ba08.roa
Signing time:             Tue 05 Mar 2024 14:18:22 +0000
ROA not before:           Tue 05 Mar 2024 14:18:22 +0000
ROA not after:            Mon 03 Jun 2024 13:18:22 +0000
asID:                     64227
IP address blocks:        148.64.62.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:83:c0:fa:f1:71:b5:42:96:33:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: Mar  5 14:18:22 2024 GMT
            Not After : Jun  3 13:18:22 2024 GMT
        Subject: CN=e0f8de7c-7981-4a21-9f70-2e9846d1c82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:be:6a:73:ad:fa:c4:d2:af:ef:8b:b1:99:b9:
                    0a:9c:0d:af:9f:d4:b6:13:b5:ee:69:49:44:e3:b0:
                    ee:40:6c:2b:27:cc:df:9a:ca:69:28:bf:69:17:56:
                    1c:f9:d3:30:b3:0e:67:43:de:61:0e:33:23:22:eb:
                    a8:d6:a7:b7:88:dc:bf:98:af:00:33:b8:08:44:8b:
                    c6:0f:79:e9:25:32:13:16:7f:25:f8:fa:f9:ef:35:
                    c1:67:1f:87:03:62:f9:d8:12:9b:3e:ae:24:8c:87:
                    2f:e3:60:94:26:8f:c9:e1:bf:da:0b:34:fe:e1:ad:
                    e1:e1:31:46:ab:ed:1d:69:42:4f:36:56:c8:3f:5b:
                    4b:b5:46:2c:bc:41:b4:8e:46:12:64:d8:ff:cc:f2:
                    eb:9c:87:c2:80:33:52:99:8b:73:af:46:e8:f3:53:
                    1a:15:8a:1a:c3:db:90:69:50:b5:44:a1:44:c1:46:
                    6e:d4:03:b2:ea:b7:09:18:b0:b1:ee:ee:3f:a0:83:
                    04:50:45:49:06:76:25:b2:a9:21:2a:57:f3:c5:5a:
                    3b:c2:f4:26:6b:60:12:be:41:39:be:b8:e8:1e:d1:
                    24:a9:f8:48:b0:f1:4c:b8:79:be:4e:8b:85:9d:f6:
                    5b:74:a2:af:3b:02:de:1f:c6:ee:3d:62:e5:17:05:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B5:55:50:98:0A:C4:87:49:94:1A:49:48:4F:C3:30:0E:80:DA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/95750541-b582-3e09-a593-2da62f77ba08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.64.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:4a:1e:21:34:62:3a:60:65:9d:cd:f5:ec:18:34:94:0a:
         e3:8b:e5:55:ee:8e:ce:27:7d:cc:3d:22:db:6a:d1:9c:5f:ad:
         00:2c:24:e0:ed:78:9b:1f:d1:bb:7d:8c:50:7b:89:e5:54:2e:
         8f:58:09:80:57:9f:f0:39:5f:74:93:f9:a5:82:c2:a2:e5:a1:
         f9:23:97:4a:6c:c6:73:14:da:a1:9f:80:ce:71:dc:7f:8a:ac:
         56:b9:38:f2:43:c6:02:08:9d:c3:0e:79:db:d3:fd:b0:36:3b:
         22:0d:eb:fa:00:e5:e4:96:eb:d6:ec:60:3d:47:94:95:54:71:
         96:52:c0:d9:5e:d0:c4:ac:31:d2:b9:6d:d9:59:25:ed:4e:23:
         68:21:83:b3:ea:d6:7a:27:d8:7f:d5:f4:4c:4a:f6:76:c6:36:
         5b:af:fb:3d:0a:c5:94:da:1e:b8:c9:85:d0:af:63:ca:3a:e3:
         c7:73:df:2b:ce:1d:6a:50:3e:34:e3:10:28:c1:37:42:6e:36:
         2f:40:aa:6d:64:86:9c:ec:50:9e:cd:0d:3a:3e:fa:09:b5:8c:
         8b:a8:eb:95:15:4b:49:f0:c5:28:55:5b:b8:e7:d4:d5:9a:e8:
         16:30:32:2f:8b:f1:b3:54:b8:99:11:d5:a0:b2:89:47:30:f2:
         97:9e:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:28 2024 by rpki-client on console-ams.rpki-client.org