Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/f50dc21a-bc4d-3d03-971a-36e90f3a2fd7.roa
File:                     f50dc21a-bc4d-3d03-971a-36e90f3a2fd7.roa (raw, json)
Hash identifier:          LYEYyK4rzz8staysxqVA4wZt0Vd1CJwbLpNd03iJ2VM=
Subject key identifier:   7E:AD:44:B7:C5:D8:E9:6C:F5:30:E1:47:1F:87:4A:DA:8D:23:BE:FD
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F43285845B38364107CD08F09BE060F80
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/f50dc21a-bc4d-3d03-971a-36e90f3a2fd7.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     32298
IP address blocks:        64.255.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:64:10:7c:d0:8f:09:be:06:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=e123f687-7b5b-47e4-b7a2-6b0e91d67189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:56:a6:7d:6b:4f:33:ad:16:1e:10:c1:8d:
                    10:d2:ec:10:7d:ff:c2:82:d5:24:11:8d:64:1d:54:
                    42:01:8b:d3:6c:2d:c8:f9:36:27:4b:67:b8:3c:ae:
                    27:41:f4:7c:7a:5f:44:dc:68:81:74:e4:0e:08:61:
                    eb:5a:0c:fe:7f:db:b4:90:ba:80:32:2f:50:32:41:
                    9d:4e:76:df:ee:42:d5:04:bf:50:16:02:68:b7:1c:
                    f9:f6:40:96:46:44:53:82:d6:1b:15:48:fe:82:b3:
                    5f:c5:02:65:c1:0e:2e:8d:9a:3d:67:ca:91:da:16:
                    55:d7:46:34:b4:01:12:6e:8d:f1:1f:c3:6a:72:e3:
                    97:88:85:bb:e0:e5:26:61:de:b7:87:41:1c:6f:c9:
                    46:1f:c6:af:45:e5:ae:f2:f6:23:93:8b:f5:48:0e:
                    82:4d:d7:22:b1:46:d0:c6:ab:11:e3:87:17:63:66:
                    cf:2a:89:de:a7:af:0a:e5:1c:14:39:6f:fc:66:6d:
                    7a:b2:b3:f6:ff:6d:43:65:04:7d:65:7e:0d:25:b7:
                    55:4b:b9:33:fe:17:82:0e:e3:64:04:fa:a1:c1:98:
                    4f:76:c3:8f:58:d7:1f:4b:d3:d1:27:db:e6:55:30:
                    85:9f:c6:b8:1b:73:59:f8:e8:e0:e0:7f:ae:8f:49:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:44:B7:C5:D8:E9:6C:F5:30:E1:47:1F:87:4A:DA:8D:23:BE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/f50dc21a-bc4d-3d03-971a-36e90f3a2fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b7:52:50:3f:78:e1:b0:30:84:cb:a8:e7:17:90:8f:63:7d:
         09:24:a6:d0:50:ec:4f:bc:0f:29:25:8b:03:06:bd:fd:dc:df:
         fb:b9:fb:87:4d:41:34:87:2f:61:be:d3:7c:f8:55:77:f1:04:
         25:17:16:3b:ba:0f:2c:37:93:99:42:56:fc:3c:f4:60:99:bc:
         a5:54:80:d5:e3:55:2e:eb:8b:5d:30:09:9c:b8:d0:ff:1a:d7:
         c6:d3:e6:2b:b9:4b:9f:c5:72:cb:2e:fd:e2:04:97:3e:89:74:
         4d:d5:51:8e:4f:a5:3b:e0:28:af:6b:55:d8:e7:80:1f:8c:73:
         61:6e:07:cf:02:84:56:7e:4b:c6:74:16:89:e2:ed:cd:1e:bf:
         4c:43:c0:c1:f5:93:08:da:bb:28:2b:4d:ae:49:45:15:58:39:
         49:bb:70:41:de:66:13:e5:7e:93:b8:36:b8:6d:71:34:71:af:
         09:67:c6:7a:fb:8e:7a:d8:29:79:71:65:22:c2:98:fb:bc:14:
         17:d2:fe:06:56:fd:cc:37:6d:2d:5d:42:98:e7:86:e3:87:16:
         09:78:3d:c5:e5:2f:b4:b6:2c:41:de:15:2d:b2:6d:57:6c:91:
         c2:a4:62:b7:a0:ab:f1:94:f9:49:2d:8a:66:56:08:37:0d:58:
         82:1c:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:11:51 2024 by rpki-client on console-fra.rpki-client.org