Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa
File:                     8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (raw, json)
Hash identifier:          oginQ+5G0NQR+vtJISVozj6TXfi0i+UxbsJF05SxP0s=
Subject key identifier:   0C:2D:BE:FE:09:C2:C5:A7:83:F7:8D:36:60:2A:6B:33:FC:46:16:51
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F43285841E46CCF303F308140F9619980
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 13 Jun 2023 12:39:43 +0000
asID:                     399629
IP address blocks:        64.190.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:cf:30:3f:30:81:40:f9:61:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 13 12:39:43 2023 GMT
        Subject: CN=d3a0d620-2e19-47e4-9df8-fe655a678e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:e2:ee:25:bc:73:1b:46:cb:f4:af:95:7b:
                    45:ee:15:85:34:7b:87:e5:57:f9:d1:d3:62:7c:f6:
                    0d:db:47:2f:bd:8a:92:4c:a8:66:9a:eb:ad:4c:95:
                    57:c2:aa:22:14:7b:df:35:cb:9c:6a:ec:46:68:9b:
                    d3:b5:d4:ee:ac:c8:b7:f0:e5:6d:f3:f3:2d:b3:ba:
                    76:27:7d:68:24:6c:da:81:98:31:9b:de:20:a8:35:
                    65:c7:36:20:31:ec:9e:78:4f:34:5c:10:bf:99:4a:
                    a8:64:e0:aa:e9:82:7f:a2:0b:89:4c:db:16:7b:a8:
                    31:4e:b2:46:fe:cf:68:12:db:08:4d:f2:15:1f:96:
                    98:75:c8:f3:a5:13:4e:ea:4e:14:40:0c:39:68:47:
                    dd:34:2a:eb:0b:ca:b4:f7:f0:03:1c:c6:46:2c:8a:
                    cc:17:2c:df:58:5d:7b:4e:6c:6a:57:c5:80:15:31:
                    b8:7d:f2:02:e3:73:be:65:6d:a5:43:0b:48:c1:2c:
                    c2:94:99:54:a4:63:7b:b5:20:91:8d:24:d2:2a:9a:
                    60:91:4a:77:33:2f:92:ab:04:99:e2:2d:d4:ed:86:
                    8c:83:a0:e0:26:0a:62:20:5d:05:ea:fb:33:41:a5:
                    14:67:5e:fc:20:0b:24:5e:5e:71:85:c4:27:6e:17:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:BE:FE:09:C2:C5:A7:83:F7:8D:36:60:2A:6B:33:FC:46:16:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:b7:11:5c:e8:86:ca:23:71:e1:94:03:6c:05:25:45:89:
         9b:8e:c2:88:95:cc:43:9b:0a:c2:fb:5e:c3:5a:0e:94:db:e1:
         3a:93:6b:28:33:8e:ef:a6:4a:84:86:31:7e:74:90:7a:e1:55:
         49:60:71:5a:de:41:47:cf:36:f5:28:e6:16:51:d3:ff:4d:e2:
         96:35:2e:8e:f8:25:b3:3e:56:a8:db:99:e5:d6:a0:1e:0b:cf:
         1b:5c:b9:55:6f:0c:6f:b5:46:21:da:23:ef:50:63:12:1b:87:
         d9:2c:66:cd:53:19:31:4d:c0:b3:31:1c:3c:41:56:42:32:4c:
         1c:8c:99:1b:57:d1:38:c6:e0:d5:fc:69:11:8a:f9:71:fd:50:
         16:ff:52:a0:0c:09:f9:0b:8b:aa:e6:d7:6e:69:b3:08:fc:67:
         7a:6b:d1:72:09:b0:d8:da:0e:f3:ed:ee:4d:c0:b2:ed:fd:c8:
         d6:f5:d0:11:5d:cb:8d:2d:f3:5b:0a:41:c5:cb:49:07:4a:50:
         94:6d:59:2f:73:a5:15:47:e2:df:81:4a:97:ff:ee:9f:76:c6:
         cd:24:81:b1:f9:3a:ea:a7:37:15:71:6e:1b:c5:b0:0f:b3:46:
         ac:43:5c:57:0b:50:5a:0c:3b:25:24:50:0c:f6:3b:8d:43:70:
         2d:4b:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:17:44 2023 by rpki-client on console-fra.rpki-client.org