Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa
File:                     2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa (raw, json)
Hash identifier:          3kCkBxcy+m0emN2zEHgx2k4goS5PVbOV+ZhYENSTJt4=
Subject key identifier:   5C:2A:DF:6B:DE:B7:1D:34:9F:CC:C2:88:62:CA:69:90:82:97:1B:87
Certificate issuer:       /CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
Certificate serial:       010D0C9F43285845963364DB3EA26B9DAFC15480
Authority key identifier: 76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     40551
IP address blocks:        64.111.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:64:db:3e:a2:6b:9d:af:c1:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=f0e3798b-702a-4482-b781-faf65b9fa68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:08:8c:43:e9:2b:71:0f:d0:a3:b4:39:42:9b:
                    44:db:29:9d:c9:ad:2e:51:0e:72:fb:34:52:42:14:
                    bb:39:88:c9:85:e2:18:49:65:14:6b:ac:30:7c:f2:
                    37:16:bc:8e:8f:87:b6:1e:a2:ab:0a:59:d7:b4:ce:
                    b7:a1:93:59:53:98:4c:81:dd:72:c8:00:95:d4:e2:
                    3c:ed:e8:8e:1e:ec:55:7c:67:90:dc:07:2a:bd:6a:
                    2e:f0:c3:66:c3:fd:b1:68:33:09:00:3f:85:26:63:
                    4b:4e:99:a4:89:ac:8e:12:fd:2e:54:b3:5c:3e:8a:
                    c1:27:9b:e6:36:b9:fb:ed:9d:12:4e:bc:1f:17:26:
                    b7:85:c5:2d:34:ac:14:6f:9f:0c:98:64:f3:f2:68:
                    89:08:af:36:3e:1c:c2:dc:5f:09:7f:5f:27:50:9e:
                    5e:e3:ac:a9:b7:95:3c:7e:fc:92:f6:d6:58:38:d8:
                    a7:eb:ef:ca:fa:58:f3:19:b0:67:d0:3e:42:11:b4:
                    e2:af:c4:ad:27:db:be:40:9e:f0:61:e3:d7:6f:99:
                    75:4e:2e:51:c7:dd:a7:eb:10:77:7e:e1:c9:59:7d:
                    55:ff:d9:df:0a:59:bb:97:29:e4:8d:47:8f:b5:67:
                    a4:a1:ed:08:56:7f:ad:a1:b6:7b:2d:b5:96:08:f5:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2A:DF:6B:DE:B7:1D:34:9F:CC:C2:88:62:CA:69:90:82:97:1B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl

            X509v3 Authority Key Identifier:
                keyid:76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7a:c3:bb:53:e2:2a:a6:61:cf:39:07:05:40:39:34:24:3a:
         c4:ea:7a:3c:0a:67:0b:a9:ef:b4:b1:17:72:c2:f6:7b:e5:63:
         c7:e4:2f:b6:16:0a:0c:fa:fb:ff:1a:2b:34:44:06:30:9d:fe:
         01:c1:94:4b:07:4f:14:b6:11:9c:73:a7:d0:b1:64:7b:ff:83:
         6d:76:7b:de:e0:6b:68:d8:f3:05:c2:6c:db:1b:c8:97:67:d3:
         7f:25:b9:ad:f3:fe:e3:7a:f1:11:39:bb:f5:e1:8d:e7:5f:37:
         af:5f:bd:d1:af:cc:ac:24:1d:44:ab:53:96:ce:28:5c:b1:53:
         59:7a:7a:1c:84:7b:3b:e2:e8:e9:a2:b7:ac:39:75:ab:c9:b1:
         dc:3a:a8:f8:f1:3a:15:c8:1c:ff:1a:d4:8c:ab:67:c1:1f:46:
         81:92:b6:3a:e3:d7:71:20:4f:75:fa:99:82:af:f8:60:6f:6b:
         21:f1:5c:e0:3e:d5:c7:28:e7:f2:5b:8c:f1:55:91:8c:a1:eb:
         23:61:1f:9d:1c:f3:ed:5e:09:ed:8b:72:d5:e3:12:a8:d5:db:
         90:6a:c7:40:fb:2b:a1:03:83:ab:b9:67:44:be:75:02:91:bb:
         df:5b:bb:0d:b1:0f:09:c6:8f:bb:b3:2a:5f:09:dc:59:5e:e5:
         8f:58:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:27:12 2024 by rpki-client on console-fra.rpki-client.org