Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cc2a6906-06d1-375b-bea9-e18c56b467ca.roa
File:                     cc2a6906-06d1-375b-bea9-e18c56b467ca.roa (raw, json)
Hash identifier:          2Kr2io5X7spjX+c9RohftNPYQxi8nIr7Q0tqtxVvWJ4=
Subject key identifier:   FA:E2:0D:A8:FE:42:6E:56:97:77:FF:DD:1D:2B:03:B4:A0:8F:45:C2
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845734DB196622F46F70BE7F7E0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cc2a6906-06d1-375b-bea9-e18c56b467ca.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     6453
IP address blocks:        64.86.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b1:96:62:2f:46:f7:0b:e7:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=4a0a946b-969f-4f7e-8bb1-2d17a050a599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:3c:a4:70:e1:b4:e1:91:48:6a:5c:96:e8:
                    63:8b:6d:32:98:2b:22:17:ed:ea:9d:4d:4f:30:fd:
                    15:56:20:14:fa:28:32:dc:d4:8e:f6:03:f7:60:3f:
                    3c:30:56:9e:a1:57:fc:9e:0e:cc:03:fc:85:3a:c2:
                    f9:32:55:b7:71:8a:e2:e1:b4:23:69:ff:19:6e:9a:
                    8f:94:ee:cc:98:82:79:61:b2:8f:8b:e9:2f:5c:3e:
                    2d:71:f1:ef:a7:f9:0e:d9:22:98:da:ad:d0:fe:6d:
                    cc:a1:f2:73:56:e5:ce:f2:78:7d:c3:d2:6e:85:ee:
                    f5:6a:9d:2b:ab:7b:01:23:72:51:20:ec:98:a9:ca:
                    64:90:31:88:65:c7:cf:4b:8c:0b:ee:30:08:a8:a1:
                    5a:8c:7d:91:f2:76:a6:63:f6:31:f7:65:7e:c1:bb:
                    bc:e3:94:16:59:4d:b5:bd:5a:a1:66:f2:77:d1:5e:
                    2a:d4:7a:4b:13:46:af:1f:bf:40:85:13:82:2c:54:
                    2d:87:eb:da:c6:62:44:0e:3b:49:ec:d0:b9:b5:42:
                    ad:1d:53:cf:7e:c8:49:99:bf:16:6d:ab:5d:3b:37:
                    55:a0:46:76:48:d4:51:59:3d:13:8b:29:86:8c:d7:
                    31:b9:ef:ad:83:29:1b:c7:5f:be:91:1c:ab:33:58:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E2:0D:A8:FE:42:6E:56:97:77:FF:DD:1D:2B:03:B4:A0:8F:45:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/cc2a6906-06d1-375b-bea9-e18c56b467ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:a7:f0:6b:08:22:7f:94:b3:fa:a0:6c:15:ed:0a:eb:50:
         2e:fa:63:e2:ef:8e:f5:4a:28:75:61:73:96:8b:e3:d7:c7:84:
         c0:09:0e:6d:39:be:85:d3:90:59:e8:58:e6:4c:75:51:51:36:
         2e:4d:4a:fb:fb:70:4c:80:de:8e:d5:84:24:c2:ba:04:11:f5:
         ee:16:2e:ec:4b:da:00:8b:58:25:9d:d4:a1:4f:af:56:ee:50:
         3b:3c:76:db:79:8f:16:44:5e:7c:dc:de:37:68:b3:4c:cf:81:
         14:4f:85:83:6c:95:a1:bf:d5:8b:ac:71:22:c7:88:11:86:df:
         c3:64:b9:99:da:b4:1b:2b:29:93:7c:18:6d:45:04:31:4a:13:
         fa:38:0c:f3:61:81:aa:34:d5:d4:7b:85:eb:0d:5b:99:62:38:
         be:39:44:be:db:f4:70:76:43:b2:df:22:21:69:94:17:33:b4:
         c6:27:11:62:c2:08:97:72:04:2f:1a:82:0a:58:23:1b:89:e5:
         0b:48:7b:c9:71:db:c2:06:c5:a5:22:c7:89:9e:31:4b:b0:73:
         f9:7c:71:63:5c:3b:d5:84:ba:b3:6e:20:4b:fb:55:2b:04:ea:
         67:1b:0f:8e:d3:a3:33:04:a5:f4:18:a4:c0:37:3e:1b:33:1a:
         8a:1f:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:06:11 2024 by rpki-client on console-fra.rpki-client.org