Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/a0424019-5a12-33b9-9869-c574d5de0cd9.roa
File:                     a0424019-5a12-33b9-9869-c574d5de0cd9.roa (raw, json)
Hash identifier:          rGfAgDgptWhXboqPpcoh2+sWLy/gyyhaUMcT+FwC+Ds=
Subject key identifier:   C3:03:21:D9:1A:E3:F1:68:61:B0:C7:08:0C:17:FA:AE:05:CB:F9:58
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285844FF9014EB91415B1BD3DE3700
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/a0424019-5a12-33b9-9869-c574d5de0cd9.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        64.7.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:14:eb:91:41:5b:1b:d3:de:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=fd3b2861-26b2-4377-8637-b51956b60c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:ae:7c:87:5a:a9:7b:68:46:3d:c5:03:1b:
                    d1:51:07:da:e3:06:6b:e7:e0:ae:5a:30:29:99:26:
                    87:e1:44:b8:cd:96:58:b5:7d:97:db:17:75:37:8c:
                    e1:3b:7a:4a:d6:37:60:a3:23:9c:39:19:e9:0b:fb:
                    87:a2:69:a6:be:43:c4:f1:c9:65:1f:43:27:da:24:
                    37:5e:7b:ce:38:d0:13:39:c3:31:d4:29:22:46:0d:
                    1b:ea:5c:e4:09:d1:69:b8:c5:f5:78:58:d4:2a:c5:
                    45:18:d2:6e:78:f0:f8:89:68:d4:34:ff:39:ca:be:
                    36:61:e0:af:21:2e:ef:b8:dd:f4:64:ab:82:92:6d:
                    c5:4f:d2:b8:6a:73:e6:e6:76:18:01:c9:12:12:cd:
                    c7:ea:8b:be:b7:03:8b:d5:f8:5f:78:b8:94:e2:c6:
                    e4:18:81:12:14:d8:d0:3d:cc:9d:a9:03:d4:bb:bd:
                    bc:a1:05:19:db:e9:25:fb:96:42:6f:0d:af:a0:49:
                    ab:ad:80:d3:64:be:ac:7e:58:8e:45:ae:fa:7c:f6:
                    09:a8:9d:ac:60:09:0e:c8:f7:0d:23:92:78:7e:65:
                    1e:77:10:1f:ea:a4:59:aa:9a:13:7a:2e:2a:9a:07:
                    07:9c:68:c3:b9:05:b5:5d:26:42:41:d2:16:6e:e2:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:21:D9:1A:E3:F1:68:61:B0:C7:08:0C:17:FA:AE:05:CB:F9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/a0424019-5a12-33b9-9869-c574d5de0cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:59:4a:ca:33:67:6b:04:e5:4e:d0:41:ce:55:cd:63:d2:
         d9:52:64:e7:30:72:3d:b2:64:01:ef:f7:63:87:f8:a5:c2:4b:
         14:b0:3f:12:29:c6:6c:81:81:54:60:78:ad:49:8b:20:a8:c9:
         dd:10:0a:1a:f0:43:d1:bf:3a:6e:c9:25:aa:27:aa:a6:a2:b3:
         f1:93:93:88:1e:be:10:9d:42:ac:58:82:7f:86:3a:80:52:4c:
         07:b0:58:f9:00:c1:73:39:30:46:b8:ae:a8:a7:d5:cc:3a:37:
         26:e4:de:fb:6b:e2:ce:c9:f4:fc:24:60:0d:dd:8f:b8:95:1c:
         e5:11:e3:8e:14:78:aa:10:1e:36:22:f7:07:84:9a:dc:c1:06:
         4a:6b:ab:e4:39:ed:e4:9b:2d:07:98:9b:e6:72:d3:46:61:1a:
         eb:cd:35:46:00:4b:ca:dc:66:27:e2:6f:44:b1:e3:05:44:a6:
         d1:c8:c0:05:25:5b:1b:ab:e1:2b:8e:fb:40:e1:f0:8b:7e:06:
         ad:1c:ba:4a:2c:6a:32:96:11:c8:4a:48:f6:f9:95:ca:e5:30:
         e7:13:89:29:c8:c5:0e:17:eb:ee:51:47:64:47:b3:9e:d7:50:
         ae:e5:74:55:5c:ac:e4:57:75:fc:37:fe:75:42:ea:72:b2:ad:
         fe:37:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:19:21 2024 by rpki-client on console-ams.rpki-client.org