Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa
File:                     eb613705-3a78-389a-87a5-46a5cf41bc2a.roa (raw, json)
Hash identifier:          JQRuUqXlCJim7/CNFxqCKHEIInS9lmyJJxep7OMihUQ=
Subject key identifier:   B0:A9:89:32:47:76:B5:D9:B0:07:7D:AC:5D:C8:91:C3:A4:BE:14:B5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584548FDA5D517C80317A8193340
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa
Signing time:             Thu 21 Mar 2024 21:15:21 +0000
ROA not before:           Thu 21 Mar 2024 21:15:21 +0000
ROA not after:            Wed 19 Jun 2024 21:15:21 +0000
asID:                     36492
IP address blocks:        64.9.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fd:a5:d5:17:c8:03:17:a8:19:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:15:21 2024 GMT
            Not After : Jun 19 21:15:21 2024 GMT
        Subject: CN=efa6f355-b645-41c7-be5d-9f56c2cd6ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:6d:1e:9a:de:36:e5:2c:a5:4e:d3:03:49:
                    35:0e:d7:4c:bd:9d:46:c8:ad:3a:54:bf:3a:0d:39:
                    03:ea:25:7e:65:37:a9:fb:eb:72:a1:bc:77:5e:8f:
                    10:66:94:c4:ab:4e:c3:e5:1d:04:8b:3e:14:57:09:
                    3a:cc:f7:38:c4:85:35:49:9c:fe:fd:c7:93:21:6a:
                    15:58:5a:09:1a:36:16:26:29:15:22:55:50:c0:58:
                    7b:c9:03:8c:1a:11:eb:b4:b6:36:a5:2c:41:79:5a:
                    81:fa:0e:cb:c5:96:cb:88:90:eb:36:ff:87:f6:5c:
                    84:69:46:e0:f1:f5:fb:0f:0f:0f:b7:c7:00:f9:35:
                    27:97:69:74:9f:46:01:e8:4d:3b:3f:35:c9:bc:04:
                    6b:21:02:af:27:5d:c2:34:e8:3a:b0:39:d5:f1:3c:
                    d2:d5:3e:d2:63:f5:29:75:34:63:22:aa:6f:6b:e7:
                    42:63:39:c3:c9:6b:1b:c2:8a:91:bc:50:3a:6d:ca:
                    c2:44:a7:57:be:a4:de:be:cd:98:14:84:cd:37:d1:
                    d0:ad:f8:d9:d8:a1:95:ec:1d:3d:c3:ab:04:4e:d7:
                    c4:57:8a:c5:e2:01:ae:60:e4:f9:63:48:1d:2d:ec:
                    8c:eb:32:c7:18:1a:d0:fb:e0:57:3a:dc:dc:46:9e:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:89:32:47:76:B5:D9:B0:07:7D:AC:5D:C8:91:C3:A4:BE:14:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/eb613705-3a78-389a-87a5-46a5cf41bc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:e3:f3:b9:ae:b2:64:ed:79:69:d9:69:07:1b:5a:07:40:
         5d:04:b1:69:1b:42:d0:ad:72:26:36:69:4f:5d:90:c5:a4:db:
         c3:c8:1e:d6:24:09:d2:12:69:a2:21:1e:3e:82:47:8e:49:86:
         71:84:d2:76:d1:3f:9f:97:79:32:0e:e4:f7:be:52:75:f2:3c:
         b2:b6:37:a5:e0:73:c9:9f:df:e9:e2:0d:82:c2:99:02:5f:cb:
         22:92:94:3a:84:17:24:ce:77:a1:cd:f4:47:84:1e:7d:4d:52:
         3c:d1:38:16:51:1f:14:9d:16:c9:1a:31:ef:85:c9:ca:63:9d:
         41:d1:01:01:24:8f:67:a9:5b:95:70:72:9a:4c:6a:aa:56:ca:
         bd:13:45:fb:36:e5:ec:20:4c:91:32:6c:f4:59:3d:69:99:b8:
         6b:d3:f0:19:6f:8b:96:da:2f:29:f4:43:50:a3:6e:8b:88:46:
         f5:91:2a:84:be:e3:68:e3:a9:54:ab:d7:d8:1d:d7:38:db:15:
         98:d2:41:de:77:ca:3c:c3:6e:e8:82:0e:cb:db:16:82:b2:2b:
         1b:1f:d3:a4:5c:90:0e:f6:87:2c:48:4b:07:6d:5a:0a:ed:bf:
         0d:41:f4:89:c2:ad:ca:47:80:30:a4:cb:e7:52:3f:47:a5:44:
         33:40:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:48 2024 by rpki-client on console-fra.rpki-client.org