Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
File:                     2253824c-087b-31f9-b1ec-ba694703e8de.roa (raw, json)
Hash identifier:          lcEw2J43P4neBhanFPtWpNo6c0r7OFfIM0FRj5nPJ58=
Subject key identifier:   98:DD:0B:E4:D2:B2:95:E7:8D:4E:6A:5A:92:D7:57:3E:9F:88:9F:83
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285845734DB627B3F7D226198655A0
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     11650
IP address blocks:        65.255.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b6:27:b3:f7:d2:26:19:86:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=a7805cc6-9215-4bbf-bc32-510ffdd06e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:bf:cd:9f:c3:69:8d:a9:ba:a3:75:f8:18:
                    98:90:f1:af:70:21:88:f4:67:d1:a1:dd:d4:02:78:
                    7e:6c:b2:0d:34:d2:ce:5f:f1:7d:17:23:b9:b9:d6:
                    35:a2:cc:09:31:9d:07:ec:4e:e1:3f:8a:bb:80:e3:
                    9a:62:d8:28:2e:72:16:0c:4f:ee:30:37:31:05:b0:
                    86:38:93:4f:7e:c3:3b:24:5c:2f:18:c8:9c:38:36:
                    f7:80:03:e5:75:a2:fc:fc:bb:23:40:41:f8:cb:d6:
                    42:04:88:3c:ca:7a:c3:21:fc:32:bc:6d:93:e4:4a:
                    ec:70:8c:e8:ae:5b:d3:e0:1f:5f:19:36:75:30:bf:
                    ed:d9:70:13:cf:67:7b:59:ef:2a:04:bd:f7:60:5c:
                    4c:af:39:d2:28:79:78:b4:43:d0:f3:6b:03:85:38:
                    30:2a:85:8f:4c:b3:5f:bf:e1:b0:3f:e5:cc:e3:32:
                    3a:2a:3b:55:26:43:d6:fd:5f:82:59:96:30:ff:22:
                    7c:93:a2:bd:86:fb:03:97:73:e8:ae:5d:27:fd:1b:
                    96:17:6b:e6:c2:df:fc:8f:8e:b4:15:37:4d:ce:70:
                    59:ca:e1:70:03:57:2b:4f:43:db:22:b5:ca:83:93:
                    d2:29:dc:1f:4c:ef:d6:9b:ff:69:e6:56:f7:38:7c:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:0B:E4:D2:B2:95:E7:8D:4E:6A:5A:92:D7:57:3E:9F:88:9F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.255.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:68:41:b1:64:c7:c4:72:bf:e2:60:ba:c2:5e:9c:a0:7b:
         ca:51:c4:d2:fb:dd:f1:7f:0b:5f:2d:08:ae:e3:81:18:d4:b3:
         22:5d:9a:64:5d:f7:29:5f:94:7c:d3:b4:92:05:ed:2f:97:d0:
         ef:3d:29:33:67:f2:6f:a6:4f:44:7e:42:79:fe:fa:8c:6a:39:
         a8:1c:de:f4:3b:a6:00:0a:67:90:00:33:50:b5:1d:86:5a:c7:
         00:9b:ea:e0:4f:52:87:c0:f5:73:14:17:cb:b9:12:ea:e5:95:
         fa:78:c2:2c:dd:6b:44:17:15:bf:71:ee:1f:ce:bb:2c:f7:7b:
         8e:df:4c:3e:43:eb:99:58:8c:57:ec:a0:05:f2:58:38:f6:3e:
         b3:17:84:08:44:e6:db:d0:1a:12:84:97:6e:37:d2:6b:ad:55:
         5d:f0:24:0c:e0:9f:bc:95:48:be:43:17:f5:6f:6f:06:08:50:
         91:ea:e8:b5:5f:3c:cf:13:c5:af:4b:18:74:b7:a5:c3:56:2c:
         0c:e7:f7:f1:ff:31:72:88:ad:32:f0:8f:71:de:e3:c4:1b:63:
         97:18:ca:9b:95:41:6e:af:f8:66:14:79:5a:2e:fd:33:8e:52:
         17:04:6f:cc:fc:6b:20:3c:2f:fd:32:e4:1e:37:69:9c:56:41:
         2d:e5:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:49 2024 by rpki-client on console-fra.rpki-client.org