Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa
File:                     afdbac6f-debc-393d-952e-f803e27af2c1.roa (raw, json)
Hash identifier:          fKkWw/XP8KxM0jGadapUWIdoo02MZ2h+C29rkN4o324=
Subject key identifier:   FF:F5:B1:47:D8:86:DF:19:48:F1:56:9C:9D:6F:57:45:E9:82:C0:81
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F43285845A9BE1C80F748B39513A62F80
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     53828
IP address blocks:        64.191.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1c:80:f7:48:b3:95:13:a6:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=32380d73-b868-4556-9e8d-f1ebc4681b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:95:4b:a7:39:03:05:14:f3:01:19:3a:de:
                    b1:02:db:82:91:74:cb:c8:93:2e:32:2f:61:4f:d6:
                    c5:e9:8b:ff:ee:c7:75:4b:d5:e5:0c:ff:5c:71:db:
                    d3:d8:b1:5c:ef:b0:e3:6c:69:3c:ad:ce:ba:9c:82:
                    ec:58:09:ba:ac:c6:33:f6:18:2e:e4:8e:ed:c9:a3:
                    da:a0:e9:fb:e8:1f:89:14:f3:49:72:f0:b3:5a:00:
                    f2:7d:f7:00:5d:79:15:69:6f:5f:6d:43:d5:1b:34:
                    72:f8:e5:d9:39:74:f8:96:29:5d:cb:a1:ef:3a:e0:
                    23:de:90:8b:f1:33:2d:58:ed:64:3b:05:71:42:6a:
                    ab:e5:ba:f5:6d:7d:14:5b:b0:a3:45:17:07:47:bb:
                    53:47:8c:36:8a:38:a0:70:3a:18:c3:38:a3:b1:99:
                    70:c2:bf:6f:95:0f:21:b6:b4:55:d6:ec:59:99:29:
                    c1:db:26:7e:f6:56:c5:0a:c3:58:a4:be:b4:2e:68:
                    1d:6b:87:55:39:d4:86:59:9e:1c:a6:21:b8:07:25:
                    2f:43:aa:f4:8c:38:dd:53:c4:65:5b:b7:a8:77:31:
                    ef:74:6d:62:a6:7d:85:fa:35:fa:85:c5:90:51:fe:
                    19:ba:19:fb:24:04:2c:e0:30:ca:1e:9c:e4:5f:d6:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F5:B1:47:D8:86:DF:19:48:F1:56:9C:9D:6F:57:45:E9:82:C0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:db:1a:9a:2a:43:db:b6:c0:95:14:bf:6e:5e:e3:71:cd:
         32:0c:42:78:9c:c3:69:5e:d9:53:1c:0d:dd:24:29:43:6b:d3:
         8d:95:38:68:68:8b:f1:63:16:d7:ac:52:b8:49:10:b0:b3:3c:
         59:89:ec:22:a2:2a:21:01:b5:f1:79:4a:7b:f2:c8:29:f2:13:
         a7:4d:22:06:9c:7d:b3:db:fa:10:a1:cb:c5:0f:ee:66:f2:13:
         8a:e9:a9:04:89:cb:89:5d:ff:66:0c:e5:23:8b:09:09:05:e5:
         17:ec:65:fe:e4:66:f2:e6:a6:0e:30:2f:fc:0f:f9:75:67:10:
         a6:37:65:14:81:4c:3e:91:0c:e8:f5:0a:18:18:ac:ba:b1:73:
         84:60:22:eb:69:78:50:09:73:76:8c:40:78:47:8f:51:49:a2:
         03:64:76:cc:fe:90:16:6d:13:bc:d2:44:d3:8d:7c:6d:9f:71:
         b6:3c:2f:40:09:86:79:a1:6c:f5:08:5f:d6:9b:f1:b3:55:a7:
         61:15:e8:f8:4e:a0:60:fa:ca:9a:12:ff:ac:fc:e9:8a:8a:f8:
         b2:12:41:fe:24:32:b3:3c:dc:b2:ba:84:a4:b7:1c:ea:ce:bd:
         67:20:84:c4:9e:2c:b1:44:a3:63:c1:8e:a7:81:07:67:d2:53:
         c6:9a:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:22 2024 by rpki-client on console-fra.rpki-client.org