Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
File:                     d98b870b-d634-3a37-82c3-af55f7ef3032.roa (raw, json)
Hash identifier:          8zTCQaEHMLgNMVriS185JR7CwnGMTIwBpYdLjgkKTNU=
Subject key identifier:   6F:C6:D6:BA:D8:24:41:01:9F:F4:33:82:A0:12:25:A4:AB:BA:6E:92
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285844FF9015084F4EE643B8134C00
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        64.95.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:15:08:4f:4e:e6:43:b8:13:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=39e393c1-0cc2-43de-8814-42bb2c57fbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:40:c4:9c:7d:3e:23:6f:65:2e:84:96:66:
                    01:70:e3:85:b7:47:a1:2d:97:af:6b:b9:83:76:55:
                    b3:43:ce:17:80:8e:5d:ac:0c:ac:f9:11:a2:36:29:
                    99:b6:c9:14:a1:fb:67:a7:c1:e6:39:ca:5e:d2:9c:
                    03:ba:77:14:69:d7:fc:50:08:b2:34:59:bc:e5:da:
                    d0:9a:85:90:c0:0f:93:0b:f1:cf:bb:84:db:6e:d2:
                    bc:f3:4c:30:82:3c:b3:c8:e5:30:95:65:5d:59:cd:
                    52:d9:29:ca:cc:b1:20:06:d6:8f:a2:d0:a8:47:18:
                    74:de:78:53:29:47:10:10:26:64:eb:1a:83:0a:3d:
                    02:83:d8:22:2d:dd:ce:53:19:82:7e:99:13:46:cb:
                    b3:c0:95:e5:bd:97:8c:7e:92:75:64:86:aa:4a:bc:
                    b3:c0:a9:a9:4d:6d:26:d6:21:6f:5a:5d:ce:0c:37:
                    46:e5:69:89:ab:0f:78:ec:27:8e:43:60:c6:29:4d:
                    ae:3c:f4:47:15:bd:8b:e4:f4:3d:04:3e:9c:bf:90:
                    f1:31:e3:2f:8c:df:cc:db:c8:44:58:35:c2:a2:9c:
                    bf:cc:95:60:7b:7b:7e:f3:ac:63:eb:2b:a5:d8:7a:
                    7b:6d:52:fd:64:3a:fa:1e:5a:37:67:f6:9f:e7:cf:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C6:D6:BA:D8:24:41:01:9F:F4:33:82:A0:12:25:A4:AB:BA:6E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:f6:64:ef:f8:a6:6c:2f:79:80:da:e5:67:15:54:a7:9e:
         eb:a4:30:96:c1:e0:a0:49:97:0a:07:00:ce:2e:30:04:ae:34:
         76:cf:76:40:f8:79:62:83:da:2b:cc:67:b8:c1:a2:4b:20:1e:
         9f:53:92:ca:d6:cb:44:a9:7a:35:80:10:c8:d0:f3:f0:38:bb:
         88:e2:8c:77:69:10:d0:70:8a:ee:35:f2:49:74:f1:00:11:e7:
         ab:b9:1b:a9:ec:14:d2:e2:34:c0:19:65:b3:b3:89:9d:0c:e7:
         11:81:69:5e:53:e5:78:19:1a:23:5f:a0:66:65:de:b1:e0:87:
         d8:a5:69:31:90:25:43:60:4d:5a:90:3b:12:c3:28:f0:b3:1f:
         c8:8a:c8:45:b9:50:1d:07:cf:4e:d7:a2:6f:1b:eb:4f:92:6a:
         00:ea:13:ad:08:19:5a:d2:45:85:ad:b8:7c:02:0c:30:49:7d:
         0b:56:bd:59:1a:c9:0c:fe:bb:28:8f:9e:2e:e3:46:98:ab:a1:
         69:18:17:6b:c5:c7:da:85:01:d8:5b:b3:25:0a:4a:8c:f5:d9:
         f0:a8:3e:04:d5:ce:a7:54:e8:47:a4:74:cd:6a:aa:a1:e2:a2:
         86:1d:b5:26:3f:99:fc:a0:0f:41:b8:9c:b6:4e:33:19:1a:01:
         b9:51:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:03 2024 by rpki-client on console-ams.rpki-client.org