Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa
File:                     154594e0-ee8d-31de-8d13-6d107201791f.roa (raw, json)
Hash identifier:          eOTehNqOScXfi2SJ19nb9GMKFRK5HHJs0uyyyuupH18=
Subject key identifier:   E6:56:1D:F6:A5:D0:0B:F1:34:AD:B7:B3:E3:36:3C:53:69:4E:C3:B8
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F43285845CB3E49C69720045F023BCA40
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     393885
IP address blocks:        64.71.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:49:c6:97:20:04:5f:02:3b:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=e944623b-5f8a-47e5-89a4-071b676757f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:66:33:44:ac:5b:34:7c:e1:eb:ba:77:3d:
                    ac:84:82:7b:d7:7c:25:50:0a:5b:11:78:83:34:f6:
                    ff:4e:82:d7:f7:0a:f8:7f:62:ba:fd:80:4d:c5:c5:
                    17:46:91:29:a8:9b:0e:a2:f0:15:d3:aa:ad:e0:48:
                    16:29:19:91:ce:70:76:98:26:62:89:ed:9b:0f:c8:
                    58:40:d9:cd:7f:1d:f6:40:1e:2e:b7:ca:05:c4:92:
                    7e:0f:0e:bd:33:94:6f:71:6c:91:cf:69:da:4a:8f:
                    ed:ab:80:95:ea:b5:84:df:e6:5d:f1:f5:7a:d5:72:
                    6b:4c:fa:bd:56:1e:c8:63:52:0e:c6:44:61:10:dc:
                    e2:f1:90:76:ec:e1:69:e0:91:a2:bd:7e:e7:69:ca:
                    fb:fa:4b:86:91:91:d4:a1:00:ae:68:d0:88:61:bd:
                    3a:be:38:c2:55:a0:76:51:6b:09:e2:7e:30:ee:50:
                    b5:6c:a3:9c:c6:3c:80:db:fe:f8:04:46:ca:84:92:
                    ad:f9:6b:00:87:e2:16:b2:04:07:0f:9d:17:99:f3:
                    a6:86:46:69:1d:72:de:fd:19:54:cd:12:ce:5e:82:
                    5c:88:c2:5e:bb:f3:aa:06:9e:78:57:01:0e:d9:a4:
                    29:d3:de:dd:2c:32:a5:9e:ff:cb:03:53:63:58:11:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:56:1D:F6:A5:D0:0B:F1:34:AD:B7:B3:E3:36:3C:53:69:4E:C3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:76:e5:99:77:b3:df:40:9d:34:4f:8b:44:81:38:27:7d:2b:
         4d:03:e1:63:e3:9e:95:13:e6:6b:96:84:17:94:48:4f:41:5e:
         29:d0:0c:d5:0c:7d:33:7c:55:92:c3:13:08:a5:43:b7:2e:7d:
         89:20:b1:c5:23:9c:64:08:78:38:eb:5d:97:67:b1:f7:00:b3:
         54:52:08:f8:0b:6f:38:4f:38:f9:98:a4:96:35:91:ab:69:63:
         34:83:02:88:61:09:91:a9:88:95:2b:26:2c:cf:54:3a:89:da:
         76:16:54:ca:ed:04:fe:89:97:10:27:2f:be:7c:65:db:15:8b:
         9e:03:80:7b:24:af:7c:f7:64:a6:d8:e9:dc:f0:ac:f2:ba:7e:
         fb:17:4c:74:d8:6b:c2:26:86:27:47:46:d7:53:f5:17:b7:27:
         6a:4c:75:00:a0:ac:c8:6b:af:ad:e7:d2:2f:33:73:5a:00:a9:
         52:ba:7e:91:45:d2:7d:81:82:94:f2:20:4a:e9:c3:9d:1d:4b:
         37:1a:07:eb:35:bd:35:10:de:cd:0d:d3:99:a6:7c:17:1b:51:
         ee:7c:99:75:de:dd:cd:2d:fc:57:9b:a5:fc:58:91:1d:63:dd:
         87:7e:18:15:32:e6:2c:cf:13:ea:c9:bf:ec:e6:a9:42:8e:01:
         d4:1b:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:37 2024 by rpki-client on console-fra.rpki-client.org