Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ab8c324-0348-32f5-bb72-519c95c38dc8.roa
File:                     8ab8c324-0348-32f5-bb72-519c95c38dc8.roa (raw, json)
Hash identifier:          si8Ud9NF4w2f41TQ/MIC79vRsjZywMKpRTyihUZ/FW0=
Subject key identifier:   1C:E4:6F:3A:84:B5:C7:08:86:09:4D:D7:12:1A:F9:C3:04:11:20:9A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844FE2AB646C565FDD159493C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ab8c324-0348-32f5-bb72-519c95c38dc8.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     397234
IP address blocks:        64.6.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:b6:46:c5:65:fd:d1:59:49:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=265e295c-1a27-49b9-9194-d0d50a109e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:fa:aa:de:ab:b0:b9:b4:85:cb:30:a0:a8:
                    e3:d2:ed:02:f3:54:5c:03:b6:ba:e6:0d:8d:c7:8f:
                    47:bb:35:ae:a8:67:62:1c:63:79:11:ad:8a:08:1e:
                    78:d3:35:26:2e:59:48:50:fb:9d:ad:11:12:5b:02:
                    d3:62:50:58:d1:b7:de:52:bf:42:2e:94:aa:80:c4:
                    3e:25:fd:19:b3:8d:69:40:83:37:75:ad:94:0b:25:
                    6d:76:3c:ad:f5:2e:71:d5:77:8a:b6:10:2a:e4:30:
                    bd:e0:11:2d:92:0f:a6:e4:95:61:d2:70:f7:b6:6c:
                    ee:f2:7f:60:e0:09:f6:86:60:d2:a2:df:90:03:e6:
                    89:1a:13:1d:e3:d6:7e:85:9c:83:fe:4b:04:f8:21:
                    8c:e2:2d:05:6e:2c:09:7c:9b:c5:a4:b7:35:7d:6e:
                    16:42:02:38:f3:ad:4d:3c:09:15:3e:1a:77:a4:a8:
                    9e:a6:e3:b2:04:77:48:75:ab:9a:49:6e:4f:1d:82:
                    42:98:7a:b5:b6:cf:7b:e6:56:d3:b2:36:0c:cb:b3:
                    68:be:ac:51:1d:1d:92:b2:e6:e8:63:e3:35:58:2d:
                    b7:14:e0:82:78:14:b6:96:62:e9:79:40:7c:6c:37:
                    48:2d:03:71:ff:3f:70:9f:bd:4e:ec:d8:0c:de:a0:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E4:6F:3A:84:B5:C7:08:86:09:4D:D7:12:1A:F9:C3:04:11:20:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ab8c324-0348-32f5-bb72-519c95c38dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:91:5d:49:6e:09:68:b5:70:36:f4:8a:27:e1:4c:24:14:22:
         16:69:da:9b:5c:f1:ed:ec:6e:28:ea:dd:e3:68:27:7a:d9:86:
         00:30:05:8e:bd:5e:59:85:f9:10:f8:c9:50:e7:a9:e3:31:73:
         2f:52:b6:fc:5d:de:fd:20:f7:3e:7e:60:cf:8d:7b:b0:b2:68:
         ed:05:94:bb:08:de:4a:48:0e:8c:9a:c5:cf:e5:6e:b2:ae:fa:
         d4:87:8a:95:33:43:5d:e2:b5:9e:a5:d4:ba:a1:c8:01:97:cd:
         8f:c4:9e:71:8e:32:79:5b:b4:87:08:1a:27:ff:c1:04:6b:7e:
         cd:da:67:13:70:a9:15:24:f1:a9:48:45:02:ca:ea:02:81:1e:
         a1:ea:83:ff:32:84:28:7b:b5:fa:bd:42:51:07:3d:c8:2c:f6:
         87:54:29:ac:05:10:f0:41:a7:ac:0d:b8:dc:4b:a4:55:9f:83:
         9b:4d:f6:bd:0d:f4:f4:65:c8:46:e1:50:d0:c7:f0:45:ef:09:
         9b:c7:ec:e6:05:ae:9c:e4:c5:35:ca:12:e9:ba:a3:5b:59:42:
         f0:0f:ec:cc:91:f1:23:a0:60:2c:5d:b9:69:98:58:74:06:93:
         91:47:0e:56:36:f1:fb:22:20:1c:e6:69:cf:96:07:7e:c4:35:
         9d:0e:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:49:58 2024 by rpki-client on console-fra.rpki-client.org