Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
File:                     d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa (raw, json)
Hash identifier:          F+mJrL8fei7Evh0TVNJRurpiS4/KV//xy8GNAnF3RDI=
Subject key identifier:   40:91:44:C9:D9:0C:E3:AF:C6:56:A1:04:65:76:A3:97:70:90:74:BC
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285845734DB60DAF58B263B3C89C80
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     11650
IP address blocks:        64.250.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b6:0d:af:58:b2:63:b3:c8:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=71fde0a9-230e-4816-b286-8119ac318c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:ae:e0:18:d8:3f:2f:74:7e:e0:95:fd:67:
                    c1:8a:f3:cc:7e:29:c2:07:3b:4e:1d:7d:7e:28:d6:
                    35:34:aa:dc:08:ee:7d:11:dc:65:b4:ae:d9:55:3f:
                    c9:a2:f8:3f:e0:2b:02:a3:1f:d6:0e:e7:94:a4:cd:
                    a0:17:c8:14:87:47:0f:5c:b4:72:91:7e:96:11:4f:
                    66:b2:d7:4e:c8:d8:a1:ce:54:9c:e8:84:17:d9:32:
                    6c:98:17:9e:16:d9:51:c7:48:ee:a9:58:58:4a:8c:
                    af:ae:9d:05:fa:64:10:55:b7:19:74:8f:45:10:1a:
                    55:68:e9:71:1c:11:a5:89:a9:dd:17:4e:f2:9b:8c:
                    de:15:61:97:05:3e:8b:29:55:b4:fb:20:f0:53:35:
                    44:c8:05:96:9f:22:9f:12:60:16:4b:de:43:a9:40:
                    ce:e0:c3:ee:21:d3:59:59:dc:4d:69:70:da:b7:28:
                    a7:0d:44:6d:d2:82:45:a9:02:97:a1:cf:42:ed:fb:
                    7b:88:fe:08:a0:5e:98:b7:f9:41:9e:98:8c:1c:c3:
                    a5:c4:40:b8:6f:67:03:9a:b2:29:a8:09:1a:71:5a:
                    f8:6e:63:85:8b:c1:4d:45:f6:41:74:60:f0:42:2f:
                    e9:37:93:5a:cc:f1:33:f6:ed:42:5d:81:38:8a:a6:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:91:44:C9:D9:0C:E3:AF:C6:56:A1:04:65:76:A3:97:70:90:74:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:aa:44:3d:bf:2d:a9:44:c2:8d:19:57:84:0d:07:df:18:ad:
         28:08:d9:d5:70:74:bc:cf:36:17:48:de:3c:f1:eb:f4:6d:2b:
         d7:60:ca:ce:6d:02:2d:ab:01:47:93:d6:64:c1:28:26:7f:ee:
         90:c5:ee:90:11:bf:ea:8e:39:bf:a9:1f:93:7e:61:63:4a:8d:
         3f:f2:c3:da:66:f8:93:c8:37:1f:d3:89:cd:26:9e:52:a1:d7:
         33:07:ec:8f:1c:9c:1a:1f:ac:50:48:ed:bc:5b:c5:a6:2d:2d:
         25:65:0d:03:bb:4c:50:6a:35:13:ba:c9:c5:cb:95:49:fc:82:
         07:5d:80:3a:3a:39:32:f4:df:c2:7e:a1:55:1b:c6:39:cb:ef:
         54:c1:5f:d4:bd:be:61:60:52:c0:da:bf:0a:3b:89:c1:46:35:
         b8:af:58:cc:fc:9d:15:bc:58:14:a3:9a:cb:88:43:c7:b6:7d:
         c8:fc:fa:f6:38:4c:e7:58:45:a9:02:9b:3e:21:a6:3e:a5:4d:
         cd:cd:03:cf:23:05:6c:56:cb:b6:d9:1a:b9:31:ca:2c:49:46:
         dc:84:35:c4:df:e2:ad:e8:0e:db:55:49:c6:f0:0b:05:91:45:
         25:ca:d7:08:7e:02:99:76:cd:b1:dc:6c:d6:e3:72:5e:88:bf:
         1c:01:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:49 2024 by rpki-client on console-fra.rpki-client.org