Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa
File:                     3253d608-779d-3d49-9ec9-04e34cf6f872.roa (raw, json)
Hash identifier:          77hYo6mNHfU1F0Uw8Qql06PlnGC0Wu8yApQ/LoqGKdw=
Subject key identifier:   5C:F7:29:96:17:6D:6B:B7:74:47:D8:C8:DE:7B:09:D4:B7:14:D3:D3
Certificate issuer:       /CN=0432b247-64bf-4a12-bc99-32dbce58a455
Certificate serial:       010D0C9F43285845883DD4BC9240AC785F406E40
Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        64.110.138.0/24 maxlen: 24
                          2620:104:2040::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:d4:bc:92:40:ac:78:5f:40:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=640981c1-31a1-4811-832d-b88b31c7abcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:19:e2:45:75:e0:54:8e:58:01:c2:4a:2f:
                    b3:b7:14:09:ba:c2:d2:fe:09:fe:fd:91:ff:67:17:
                    3d:8e:80:89:fe:24:9b:7c:42:32:01:ba:32:76:a7:
                    10:72:86:e0:b9:d0:a2:c8:91:f8:1e:fd:f1:3f:31:
                    60:3b:16:28:4c:da:47:dd:78:9a:32:ff:e9:28:54:
                    fa:bb:7f:ea:6c:84:f3:50:8a:0d:08:1b:ae:cc:5d:
                    f8:0c:94:62:c0:6a:82:fe:82:e6:de:f9:47:6f:db:
                    fc:d0:98:f7:90:e3:34:54:8e:d8:29:17:46:52:c9:
                    4b:58:f1:de:5c:3c:99:ae:88:f2:e0:d8:1e:0f:ed:
                    5e:35:c4:d9:1a:6a:3e:9b:2c:17:91:1f:1e:2c:8f:
                    bb:9d:e3:04:c7:11:e3:fb:2a:33:25:e1:50:e2:88:
                    77:52:bb:dc:0a:ba:d5:93:33:ba:26:ff:fd:f4:55:
                    56:ee:ec:77:28:7f:aa:58:65:8d:c0:4c:34:6f:ca:
                    a7:c3:8e:ea:ef:5a:18:40:79:85:0e:1e:41:a7:e9:
                    60:24:e0:97:71:1b:f0:8f:45:13:99:07:37:d7:4e:
                    bd:29:d5:cb:96:84:42:72:10:1b:96:d6:6d:1f:eb:
                    94:f8:b1:3a:2b:23:db:95:4b:cf:2a:dc:b0:80:68:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F7:29:96:17:6D:6B:B7:74:47:D8:C8:DE:7B:09:D4:B7:14:D3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl

            X509v3 Authority Key Identifier:
                keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.138.0/24
                IPv6:
                  2620:104:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:62:86:d9:11:05:7c:85:07:65:19:4a:1d:99:6c:86:54:e8:
         59:ba:86:99:fc:51:c5:85:33:d4:28:a7:1b:17:7f:03:90:fb:
         3e:1a:d2:ca:fd:35:d2:35:f6:25:e2:ca:89:ab:d6:ba:f8:33:
         83:80:5a:47:36:2f:5b:95:3d:ac:75:f2:6c:9d:97:bf:8e:17:
         e7:ac:2a:62:ee:14:bf:04:2c:84:2f:59:f7:70:4d:d6:54:4b:
         48:8a:ed:85:42:87:7e:7d:ee:9a:e6:21:67:6e:51:cc:0d:26:
         c1:a7:75:31:6a:2f:37:4c:7d:1d:52:47:9b:fd:27:44:76:24:
         49:5e:d0:62:a3:ff:de:5b:f6:97:ef:d6:ab:8d:f2:3d:6d:bc:
         ef:98:00:b1:13:e3:bf:12:fb:8b:2b:73:92:3b:39:a6:28:c1:
         8a:81:e5:1a:2e:67:36:96:d0:f3:2b:93:64:e5:2a:48:e1:dc:
         a2:c7:ee:ed:48:49:bd:d2:b5:39:19:c7:7a:12:51:db:03:1d:
         14:14:03:da:13:07:bc:e2:c0:71:51:b8:b8:45:f9:8b:3a:a5:
         e6:5c:02:0f:16:ac:9f:4b:c5:c0:44:5a:55:28:51:b4:1e:1d:
         fa:07:bf:79:26:0f:8b:2a:59:04:8a:13:62:6e:a5:2e:09:35:
         53:03:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:39 2024 by rpki-client on console-fra.rpki-client.org