Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/c26f6e20-9da8-3ce7-9c92-11a5c1db14d7.roa
File:                     c26f6e20-9da8-3ce7-9c92-11a5c1db14d7.roa (raw, json)
Hash identifier:          K65sNLML93CsjOXHqSVHGyAdlyKB7wfGJFdUZ4p+470=
Subject key identifier:   B5:F2:1B:0C:78:E7:38:78:9D:F8:56:92:DE:9D:95:BA:C2:65:DF:3C
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858456C5323DF998C2C9E44C70D00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/c26f6e20-9da8-3ce7-9c92-11a5c1db14d7.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     49981
IP address blocks:        64.40.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:23:df:99:8c:2c:9e:44:c7:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=257adc67-00f8-4ec2-ba82-2a22011aafb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:a9:f9:bf:2f:14:59:18:45:29:fc:21:af:
                    b9:ac:c2:66:fa:5d:d5:96:70:d8:10:01:99:91:1a:
                    94:2d:c4:02:34:f2:5c:77:a2:21:80:77:7c:67:91:
                    a1:aa:78:16:e0:61:bc:32:0f:b4:29:c3:ce:2c:67:
                    49:18:c5:aa:68:a0:f4:7a:b6:11:07:59:04:f6:4b:
                    d3:f9:f2:16:fd:e6:32:0d:a2:d5:45:a3:ef:d9:27:
                    da:8a:5d:20:08:c3:3c:5e:64:29:38:79:96:cd:df:
                    96:f4:9a:70:af:f4:d0:72:56:ec:fd:b4:4f:8c:84:
                    6a:aa:25:1f:b6:20:f7:aa:8f:e7:b2:58:95:35:e9:
                    97:d4:84:52:a5:44:5a:0a:d8:8d:c7:8e:4a:34:19:
                    da:06:94:d1:40:a7:47:b4:57:3a:43:63:20:74:e8:
                    7a:e5:20:3c:8f:0b:3a:3c:9b:eb:45:a1:21:bd:20:
                    09:65:11:35:ca:3e:e6:a0:2d:83:48:95:a8:ac:44:
                    ef:27:e3:37:50:9f:95:36:ce:fe:8d:9b:1d:76:00:
                    37:14:e4:92:93:23:3f:6e:49:cd:e3:e4:c3:12:67:
                    e8:4e:3c:a6:c0:91:42:b6:a7:0f:a3:e1:a9:15:6e:
                    11:92:a9:9b:61:98:f0:a3:98:f7:52:63:75:68:7e:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:1B:0C:78:E7:38:78:9D:F8:56:92:DE:9D:95:BA:C2:65:DF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/c26f6e20-9da8-3ce7-9c92-11a5c1db14d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:19:ff:db:6b:52:bc:c0:b3:db:74:39:1e:f3:54:68:61:d5:
         a4:ae:12:65:6c:03:7e:63:e3:3c:53:c3:36:3f:70:89:f3:a7:
         0e:d9:6e:cd:30:d2:17:c7:87:c0:24:64:0f:cd:58:47:30:f9:
         32:dd:4f:db:95:ee:dc:85:42:3c:8d:c2:55:69:d4:41:a0:14:
         a0:78:8b:96:0b:9f:d2:22:e9:d2:69:be:88:af:14:75:9b:66:
         49:d9:98:d4:f1:6e:ae:fe:9f:61:60:bd:9a:3b:04:d2:09:4a:
         58:11:5d:01:a7:77:76:26:39:81:4e:24:fb:cf:7a:63:79:90:
         36:95:23:46:0d:d5:5f:f3:f9:d2:26:cc:f3:62:f5:94:e1:27:
         c8:23:ca:3b:4b:98:e0:a6:09:53:5e:35:be:4e:db:3a:3c:db:
         2d:86:d3:65:d6:27:d5:b9:22:f6:fd:74:9a:66:93:19:94:ae:
         54:4f:06:0c:46:0a:22:c5:b4:ea:4b:05:57:db:1e:22:0d:60:
         bd:bd:85:d9:01:4b:0b:42:10:54:3a:47:fb:d6:71:d8:54:5b:
         27:d1:78:9b:b0:6e:fb:13:52:4a:6e:d6:e0:2d:d6:2b:93:12:
         0f:5a:9c:4a:77:47:ae:b4:4b:cb:e0:7d:99:f3:7c:20:be:c1:
         4e:98:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:46 2024 by rpki-client on console-ams.rpki-client.org