Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa
File:                     e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa (raw, json)
Hash identifier:          DwNL6pcEkmP6cjKVMazvSzvMH/L+zfFN3YPKqIqRP78=
Subject key identifier:   CA:C0:60:D4:87:59:B2:F4:14:4C:64:4A:E6:C4:6F:26:EC:EB:5B:61
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858454C3810F02E99FD41A133FB80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     6596
IP address blocks:        65.50.200.0/24 maxlen: 24
                          65.50.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:10:f0:2e:99:fd:41:a1:33:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=7054ac92-611e-441d-bc13-8f0bf3b78495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:8a:50:50:d4:e9:10:00:0d:ec:19:cb:89:
                    34:1d:da:a3:57:60:6a:ff:15:89:85:d2:62:01:fb:
                    61:9f:26:79:f3:1f:9a:fa:19:30:ad:85:f5:41:c6:
                    47:65:cc:d3:d6:c8:16:eb:b8:33:eb:7d:7a:3a:be:
                    22:fa:9d:29:13:7d:0d:3b:14:da:8f:ad:6a:be:19:
                    a7:d2:5f:19:5d:11:56:11:e4:54:f2:93:d5:d4:ad:
                    1b:f6:c8:bc:11:93:7f:0f:23:64:1c:35:5f:d9:bd:
                    85:a1:41:92:a3:6d:c9:78:5e:77:b6:57:12:8b:c0:
                    63:23:de:5c:3f:9a:6e:72:d5:2c:27:99:68:50:0d:
                    97:9a:64:c2:18:89:fa:0f:f5:45:d7:cc:ba:d8:aa:
                    92:4d:69:56:52:36:64:ca:ee:da:fb:06:87:2a:fa:
                    a7:3d:53:7e:8a:43:bf:1a:e9:64:9e:90:47:7d:86:
                    95:a3:82:d5:5f:8d:0e:a8:17:8f:1d:52:54:23:4b:
                    6c:94:31:56:31:df:f8:c8:93:5f:0e:4b:01:0e:1b:
                    c4:17:77:23:55:64:29:d7:bd:c0:10:b7:de:47:6b:
                    dd:b2:88:1e:2f:fe:8c:8f:a3:69:f5:4e:eb:a4:63:
                    99:ba:86:b5:00:b8:c9:86:c4:c6:7c:70:2e:c0:ed:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C0:60:D4:87:59:B2:F4:14:4C:64:4A:E6:C4:6F:26:EC:EB:5B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e5a328ab-035e-3997-ab28-59e6ddc61bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.199.0-65.50.200.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:3a:55:aa:86:a3:98:bc:4a:b7:07:2c:d7:91:e6:9f:b9:
         45:d4:04:33:6a:21:d7:5f:56:2a:36:71:84:05:30:7f:44:c3:
         5e:b4:84:64:2d:61:2f:3d:f1:08:6d:40:07:1e:ae:4e:e2:73:
         48:26:f6:da:a3:23:23:b6:ab:ac:f9:2a:d0:24:81:05:5d:6e:
         39:2a:e4:7c:3c:6a:6f:7a:9c:1c:f6:8b:82:b3:1e:ec:e4:13:
         d8:c8:1a:b0:8f:9e:ce:1c:4f:61:e5:59:0f:e8:2e:ee:5e:88:
         c5:5f:9e:9e:50:d2:19:58:1a:a1:58:00:4e:cf:9c:92:1a:d8:
         43:73:11:ba:52:43:f9:d1:fd:cb:0a:a4:e8:12:c5:5b:41:ef:
         dd:58:e1:46:9a:84:98:17:d8:e8:a1:98:f5:5a:6c:1a:ed:9f:
         38:05:00:bd:43:4f:44:ba:f6:cd:69:ce:0c:2c:38:cc:9d:de:
         08:bc:16:5f:eb:a4:de:e6:46:5c:8d:1b:0f:09:1f:c8:b9:db:
         8e:15:94:2f:4a:5e:79:87:84:6c:fd:a8:c3:1d:74:21:62:d1:
         e3:77:0a:37:6e:47:46:57:51:ee:92:83:95:a2:74:e7:20:7b:
         86:50:b4:6d:32:2d:db:16:1f:e5:26:66:64:bd:e4:4c:d9:a5:
         4d:7a:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:07:55 2024 by rpki-client on console-ams.rpki-client.org