Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d2fb69c1-b195-3d9d-9874-c2261947f880.roa
File:                     d2fb69c1-b195-3d9d-9874-c2261947f880.roa (raw, json)
Hash identifier:          QoQ+kAewGXGsuUraMzt6ItjoIPP/89hOQts7BFLmj54=
Subject key identifier:   FB:CD:B1:95:E1:D1:42:C6:E0:76:26:B4:89:E0:33:C5:28:33:03:DB
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584511B59354B24335546A232800
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d2fb69c1-b195-3d9d-9874-c2261947f880.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     206505
IP address blocks:        64.40.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:93:54:b2:43:35:54:6a:23:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=e886e897-8739-4d9a-b536-1f520de1e484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:15:10:7c:88:b6:d6:da:3d:b2:54:30:14:
                    b7:c9:d0:39:5a:42:73:a5:b1:78:16:30:d8:cd:53:
                    55:1e:02:80:98:87:d8:27:64:93:28:6f:47:43:43:
                    03:93:e5:37:a3:01:4b:cc:4b:2e:57:3e:c6:bf:3a:
                    61:e8:fa:51:d1:63:6b:76:b8:2f:d7:3c:4f:d2:13:
                    1f:49:5f:df:b3:4f:c9:79:ee:0b:4f:8c:13:8f:a4:
                    89:28:39:a1:f3:c2:a0:ea:e3:d8:b6:f8:0a:15:91:
                    53:9d:20:99:16:38:e6:f5:24:b3:37:9d:52:af:f1:
                    e2:c9:b7:38:25:a5:35:18:c2:32:d4:c4:f7:27:47:
                    7d:f1:f3:2f:8a:96:1e:05:37:a6:55:d8:29:bd:fb:
                    de:fd:dd:65:2f:c3:1f:d8:56:ae:a1:e4:c5:e0:b0:
                    27:fb:42:3f:ab:30:20:25:69:96:d6:b9:c1:74:bc:
                    37:c6:5b:17:0f:c3:4d:6f:99:96:4b:25:67:87:d6:
                    07:85:02:ed:8d:ad:39:42:ec:1e:b0:81:a8:31:5c:
                    50:d5:1d:2d:c7:34:d5:df:01:f8:83:e3:75:0c:0d:
                    c4:ab:49:5d:f0:2d:20:3e:7a:8a:3f:55:f1:09:de:
                    c1:fb:eb:f1:b1:00:8a:23:bc:02:4f:2c:fa:d6:bd:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CD:B1:95:E1:D1:42:C6:E0:76:26:B4:89:E0:33:C5:28:33:03:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d2fb69c1-b195-3d9d-9874-c2261947f880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:32:35:61:cf:23:4a:e2:5b:d9:3a:a0:dc:6c:ce:22:91:2a:
         a1:c6:f0:70:74:d3:82:0d:89:b8:20:ba:c3:5d:76:59:b8:29:
         da:24:6f:32:29:97:13:3b:6c:a5:9c:d1:1c:8b:eb:cf:f1:0d:
         93:93:a4:4d:83:ef:ae:9f:d1:38:7d:83:a5:dd:6e:b3:51:8d:
         68:d8:7c:95:a6:6e:1a:9f:f2:2f:88:88:b8:9b:55:5f:ce:0e:
         2a:d3:6b:04:30:ef:fc:2f:df:d0:e1:67:8a:17:25:33:df:53:
         65:fd:5f:0b:fe:f9:cf:ed:7a:09:9c:fc:18:c5:c9:df:45:ed:
         42:b0:fd:e2:27:dd:a1:7d:54:a5:d5:a8:10:f7:49:4c:44:ec:
         8e:6d:65:bd:07:ae:48:f5:77:64:bd:2f:ec:16:c0:4e:da:94:
         cc:3e:c3:62:4e:e4:40:ac:e8:82:06:36:37:b7:5a:41:30:59:
         1d:02:3d:c0:83:5c:c2:fa:5a:71:1a:9e:dc:e7:e3:fa:3b:a0:
         74:02:2e:d6:91:43:a5:5c:f5:d2:a9:83:0c:f9:9b:e7:db:83:
         e1:a8:da:b2:5d:59:d0:e9:2c:08:58:55:c2:fb:a4:7a:46:ae:
         2c:00:05:ee:d7:ad:09:ad:6c:93:21:be:1d:6b:17:8c:9d:5d:
         2f:bb:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:46 2024 by rpki-client on console-ams.rpki-client.org