Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa
File:                     811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa (raw, json)
Hash identifier:          qBmWeUigDlABVSA0JLTOmyU8rpI1i3BaPyote4v1doA=
Subject key identifier:   01:A7:42:64:45:33:F5:CA:07:F8:40:31:A3:0D:60:F2:8B:F7:0F:C0
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584582A88E45F5FF1AD1A0E1C000
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     25899
IP address blocks:        67.59.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8e:45:f5:ff:1a:d1:a0:e1:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=7fdc8737-0008-4932-be6e-172bb9b71989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:ef:ba:6d:b9:ec:42:48:75:85:a3:18:8c:
                    cd:8b:25:9c:77:7c:6f:fe:57:f9:20:59:60:c9:0c:
                    cd:f8:5d:5b:39:85:4c:8e:27:e0:c5:de:8f:1a:ac:
                    1a:c6:b8:e3:59:7a:d6:50:11:73:e2:e7:cc:b8:39:
                    db:85:44:fb:55:41:b1:75:4f:c9:40:03:b5:b8:49:
                    db:37:2a:65:b2:c6:d9:0c:03:d3:0f:f0:fe:11:9b:
                    2c:42:fc:19:fa:bd:02:40:4a:ea:70:06:1f:6f:2f:
                    bc:43:f8:3a:55:70:c6:60:46:cd:88:b2:5a:9a:e2:
                    5d:90:1f:34:04:00:f5:3d:6b:2c:86:58:9e:61:95:
                    74:53:34:ed:d8:dc:67:81:7a:fb:b1:81:65:76:18:
                    d8:da:93:bc:21:ac:60:25:9b:32:23:25:5e:78:d1:
                    ac:12:50:fe:68:1e:e2:bd:f2:44:d4:a7:79:de:a5:
                    2b:6b:39:d9:02:e8:ce:c5:42:7c:1f:97:15:88:dc:
                    ee:26:66:07:f9:63:38:cb:fc:c2:fc:7e:a3:5c:82:
                    a0:4b:29:86:dc:0c:90:dd:56:e1:dd:88:38:99:7f:
                    b7:6b:13:22:6b:99:de:8c:1c:cd:bd:10:6b:c1:33:
                    e0:48:9a:f9:6d:7f:97:d1:a6:43:f3:a4:22:97:1f:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A7:42:64:45:33:F5:CA:07:F8:40:31:A3:0D:60:F2:8B:F7:0F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/811d7a8a-d9cd-3d1a-983f-287703d2d62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:9c:2b:f7:b1:54:6c:8b:27:14:cc:11:2c:e8:57:f5:7f:
         77:16:fd:34:28:76:6e:cb:18:9d:32:bd:10:5d:8d:9a:81:38:
         dc:80:e6:27:06:b0:da:a2:5d:74:9b:09:e9:5f:39:06:55:7c:
         fe:1f:89:4a:08:47:ad:19:a6:e5:23:b0:e9:e9:c7:a1:66:2e:
         50:64:ad:bd:6c:0f:6b:f0:2b:de:00:c8:01:ed:aa:a6:2b:03:
         81:66:53:2f:96:c8:a4:3b:4c:b1:ea:7c:8a:93:53:3e:b9:b5:
         43:50:db:eb:ea:de:5b:04:ac:82:c6:16:e5:57:af:89:cf:09:
         db:11:5f:48:c0:3c:38:bf:0a:91:11:06:8d:ac:9e:8a:28:20:
         2d:49:e3:5e:15:ab:38:9a:4a:d3:f1:6b:8f:8a:d0:d8:42:f3:
         6d:0e:30:df:d9:6c:ca:fd:e4:25:28:23:ac:17:6d:c3:f0:ff:
         43:c2:50:dd:e1:aa:9b:f8:37:73:bd:c3:e0:0c:74:0c:48:be:
         30:00:95:34:b1:c1:ef:a6:a7:50:4c:29:0e:27:47:55:03:ec:
         9c:c0:c7:39:21:02:cc:c8:6e:13:07:d4:2a:2a:48:1b:36:2d:
         68:75:f8:63:00:3e:0c:ad:aa:54:9a:e9:ca:0d:d2:bb:ae:a0:
         78:96:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:16:53 2024 by rpki-client on console-ams.rpki-client.org