Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa
File:                     f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa (raw, json)
Hash identifier:          TUs6W7R7gLd9S527OlB47bV6ScGuk2F4XkK9a2d6iXw=
Subject key identifier:   CB:37:39:99:85:A8:89:39:19:D0:DE:94:C0:26:AD:DC:C8:A4:AF:DC
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED0065882E772BD84D00140
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        65.50.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:06:58:82:e7:72:bd:84:d0:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=f6024c09-cb72-48df-af1e-ea7fac66232c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:dd:97:1d:e1:9c:87:46:e5:ae:6f:27:47:
                    07:44:8b:67:a4:97:12:1b:bd:47:ca:ff:e2:b6:ad:
                    6f:e9:68:4d:e6:5d:63:2a:8c:68:e8:b5:73:79:14:
                    f0:16:be:bc:0c:50:7e:79:44:e2:b0:60:30:cb:77:
                    e1:fd:01:6c:ec:5a:9f:34:4d:bd:bc:de:39:67:e3:
                    a6:65:eb:5f:13:55:ae:8d:4b:45:d9:89:81:a5:5c:
                    c9:2f:50:c8:9a:46:d2:4c:68:40:7b:e4:57:b3:5e:
                    28:cf:fc:37:44:44:c6:a0:3d:45:f3:62:06:fa:95:
                    71:cb:47:05:44:a9:02:da:13:10:db:0b:d0:bb:94:
                    09:ad:a8:18:c5:ec:b3:e6:6e:3d:5d:ef:f7:c4:47:
                    44:99:a1:23:5a:e5:87:9c:07:2b:ff:1e:a1:40:c7:
                    4d:4c:d7:70:32:a7:c2:65:81:0c:fd:d3:8d:53:7e:
                    50:c9:7b:22:6c:65:24:1a:95:76:43:bf:45:8d:a8:
                    12:75:55:39:64:af:5e:ee:2d:8a:d8:b9:47:ce:3b:
                    8c:58:83:1a:f1:00:c3:41:58:7e:6e:2e:16:c5:db:
                    50:37:22:f7:a1:0c:dc:74:60:3b:d3:6c:82:91:84:
                    fb:d1:9d:4a:dc:7f:a4:b3:79:81:14:c5:94:0a:91:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:39:99:85:A8:89:39:19:D0:DE:94:C0:26:AD:DC:C8:A4:AF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f660c17d-9da8-3fef-8e90-443e1d6fcad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:49:db:07:aa:95:b6:98:b0:03:3e:86:79:79:0a:51:9c:37:
         ea:da:fd:40:19:09:74:b7:4a:f0:3a:70:29:b4:f0:61:ac:f9:
         04:72:47:30:6a:64:40:77:e1:22:3b:92:ba:df:be:1d:de:57:
         72:58:49:d3:1a:10:f2:eb:b3:0e:f1:e9:45:3c:a8:7a:8d:04:
         76:db:c6:d5:30:7a:56:44:49:3e:45:c8:67:88:94:36:c5:3e:
         54:a9:5d:e1:2e:1c:11:6e:9d:83:76:1d:77:44:24:4f:d6:2b:
         80:8b:bf:88:c2:3d:41:12:43:e3:1a:2d:8b:a0:cc:b2:d8:6c:
         c0:dd:ee:a9:5e:b4:3e:c6:d0:9e:fd:53:38:f1:5d:1b:9d:12:
         30:8b:2b:46:c2:78:db:15:bd:4b:2b:51:08:fb:62:53:da:b9:
         03:4e:a8:1a:58:08:2d:fd:f0:80:f8:f5:74:75:f0:b2:f7:36:
         4a:a6:be:35:ba:ab:a2:09:47:6f:f8:2c:0e:d5:f8:23:07:84:
         4c:1c:72:d0:fd:e6:d6:91:5e:96:54:a4:7b:de:21:1c:27:0c:
         9c:70:08:8a:07:3d:4c:ce:e1:c3:49:0a:76:87:ca:c1:0a:ad:
         fa:c1:c4:13:01:35:a9:34:f8:b5:64:a1:d1:5f:98:90:81:92:
         66:c3:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:04 2024 by rpki-client on console-fra.rpki-client.org