Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bbb7fe01-989b-3040-9d54-e0f9abd1e229.roa
File:                     bbb7fe01-989b-3040-9d54-e0f9abd1e229.roa (raw, json)
Hash identifier:          kr+ugkplOZMtHEIX2YpaHjysIo1Vp16cD+7rcsO9EJk=
Subject key identifier:   AA:02:BF:DA:B2:47:94:49:FD:ED:1D:99:43:B0:E5:F4:5E:2A:FA:20
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453317E8B1A8B12BD89596ED00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bbb7fe01-989b-3040-9d54-e0f9abd1e229.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7861
IP address blocks:        64.114.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:e8:b1:a8:b1:2b:d8:95:96:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=fbc02a79-6de4-455e-b68b-3e03cd33d309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:00:e6:f7:a2:17:a4:78:13:64:d0:79:b2:
                    8c:be:9d:e8:4b:eb:51:0e:2d:6d:07:3b:a3:22:99:
                    9e:b9:79:52:0d:a0:11:81:a1:68:9a:d4:b0:5c:db:
                    95:3d:c3:b9:7b:c9:ac:d0:b2:52:15:99:4e:4c:62:
                    dd:5b:ac:f9:93:85:fe:16:76:98:a7:d7:af:b1:86:
                    85:d4:59:f8:02:da:5c:e4:c5:d7:75:af:35:94:ed:
                    d1:99:10:c4:91:0a:3c:44:09:46:d9:af:6d:26:55:
                    ce:ad:7a:f7:6c:b6:59:45:cb:10:82:2a:07:f9:69:
                    76:ec:2e:ff:24:f4:e0:81:97:52:1a:f8:90:51:78:
                    20:1e:62:a8:9c:a7:59:6d:f5:80:d7:28:9a:44:63:
                    eb:10:ec:8f:38:7e:c0:83:e4:01:90:a0:17:81:8c:
                    c4:fa:ab:a7:83:fa:0e:33:32:4c:e5:b3:38:fd:54:
                    f1:d6:09:dc:d6:6a:2b:89:6f:eb:1f:28:d9:b6:d8:
                    d9:76:30:41:a5:ae:d0:48:30:4e:1e:32:cf:e6:ac:
                    1b:36:81:b1:22:c2:f8:db:dc:ab:cf:8e:0f:f2:e4:
                    4e:8d:04:b4:64:33:ec:80:df:0e:86:8e:d6:7f:49:
                    52:a9:64:ca:17:d0:00:94:54:8e:63:d2:28:fd:f3:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:02:BF:DA:B2:47:94:49:FD:ED:1D:99:43:B0:E5:F4:5E:2A:FA:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bbb7fe01-989b-3040-9d54-e0f9abd1e229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:d8:d9:4e:b9:ee:2c:21:f9:ab:1f:fb:e3:7d:5a:d7:cf:2c:
         ea:b1:07:ca:7b:7b:ad:9e:cc:50:3c:57:1f:b7:f0:6a:e1:2b:
         7c:ca:59:d5:e1:0a:ef:39:7b:db:93:e0:25:f5:9f:e6:26:48:
         52:89:8c:81:90:01:89:e1:0a:9a:5b:ca:69:fd:54:a5:27:92:
         3e:ae:8e:70:a6:9e:68:92:28:b8:01:35:dd:45:7e:8c:e0:e8:
         35:5f:52:3e:5c:98:bf:8a:ba:0d:13:2c:90:ce:22:be:f2:d7:
         3b:34:c1:a7:42:fd:9e:fa:b9:c7:00:88:ce:ec:a4:45:4a:df:
         f2:84:84:2c:7b:63:e6:2f:02:23:36:cf:65:bd:1b:1d:93:fe:
         1a:e5:20:c5:8e:7e:96:91:82:de:10:0c:4e:e2:98:f2:ef:8f:
         4f:cf:74:f9:45:e9:3e:26:f4:64:d5:cb:e8:55:57:fe:1d:98:
         3a:cb:d0:68:55:5a:c0:08:27:a3:03:2c:80:8b:1c:32:ce:77:
         00:c1:bd:fb:18:9e:2e:0a:c6:83:e3:93:55:66:2b:b2:63:c8:
         7e:74:39:1d:f1:72:0c:53:93:00:e0:62:3c:8d:40:42:ef:aa:
         d3:50:fd:07:fa:2d:9b:d8:76:a7:ea:56:4b:b9:5c:4d:eb:cc:
         63:51:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:11:01 2024 by rpki-client on console-ams.rpki-client.org