Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/0e479c70-e9d7-3398-b3ee-13359f7145b9.roa
File:                     0e479c70-e9d7-3398-b3ee-13359f7145b9.roa (raw, json)
Hash identifier:          bndUjhTKsYcvJXSAqXz94PghitBpwAP+SlAZa3Jlyp4=
Subject key identifier:   C1:D7:FA:CA:C2:F3:E9:7F:8C:3A:64:CA:31:9E:C5:6A:13:10:51:25
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F432858458B088421701674D499E42280
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/0e479c70-e9d7-3398-b3ee-13359f7145b9.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     4913
IP address blocks:        64.58.96.0/20 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:84:21:70:16:74:d4:99:e4:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=8c904156-7573-4804-b17f-2b8ab2f1d085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:bd:91:a1:90:8d:9d:2c:c4:8d:b9:45:ea:
                    68:4b:2e:0b:b6:23:98:7b:19:f4:b0:d8:8d:76:2f:
                    35:83:0f:c7:81:00:dc:e4:55:8c:b3:73:dc:09:02:
                    6f:b1:78:0a:c5:ea:9c:85:9c:3b:a6:d3:38:8f:43:
                    37:8c:a7:ca:63:bb:86:9c:d8:93:fa:44:a0:78:3c:
                    cb:f5:cd:47:b7:9d:c6:6a:08:40:ba:7e:49:7f:78:
                    16:b9:9e:1f:f0:38:5b:0b:4f:94:7b:c7:47:7c:dd:
                    da:95:69:3c:b5:92:0f:85:39:c0:cf:18:ea:49:d4:
                    f9:5e:02:6a:db:e0:3d:db:3d:24:80:98:78:d2:be:
                    cb:46:f2:6a:73:e3:95:89:b2:8c:1a:ae:e3:6d:e4:
                    ad:e7:b3:c4:71:06:43:b8:5c:b0:27:bd:c0:eb:57:
                    ff:4e:89:c8:fa:b0:ce:40:c1:ed:f3:aa:81:09:de:
                    bc:e6:75:28:7b:fd:a3:b0:5c:83:c5:c0:64:b0:a7:
                    0a:11:9d:52:64:1b:62:7a:7b:06:0a:a4:ac:36:65:
                    dd:59:ea:69:f5:02:b6:26:49:53:02:08:2b:53:eb:
                    0b:27:e5:76:41:68:74:a1:c1:da:f0:10:cd:c0:ee:
                    8e:c4:02:4a:5a:dc:0e:22:3e:c2:83:19:98:d3:d6:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D7:FA:CA:C2:F3:E9:7F:8C:3A:64:CA:31:9E:C5:6A:13:10:51:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/0e479c70-e9d7-3398-b3ee-13359f7145b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:d5:39:ca:88:71:c2:09:35:7f:83:64:4e:25:be:4d:4c:
         d9:e5:65:e7:4c:6a:19:da:cb:e3:0d:26:c0:f9:6d:37:61:73:
         95:c8:c6:9c:cf:e8:6e:61:40:00:66:05:92:23:93:de:f7:96:
         56:3f:17:3e:50:c7:db:b1:30:3e:15:fa:5d:42:ab:06:c9:3c:
         11:d0:e8:07:93:32:08:1e:8b:f1:d3:cb:2f:48:f7:88:ef:d8:
         0e:03:ca:21:1d:b0:7c:b1:35:02:b1:17:cc:b9:9f:1e:f8:59:
         6a:e4:c9:75:16:3d:85:b9:10:eb:20:10:11:62:cb:ce:86:f0:
         74:1f:d3:4e:32:5d:15:1e:75:b2:9a:d1:4c:21:c6:cf:ff:3e:
         87:eb:4f:bc:c7:03:37:7f:50:27:15:67:95:32:a7:a7:1a:d3:
         58:56:b3:29:68:32:6e:0c:38:71:1e:cc:29:ef:fd:e6:95:2e:
         9d:c1:5c:29:86:b7:2c:e3:ff:9f:9d:53:dd:d7:d9:85:16:82:
         dc:38:62:3d:cb:74:80:c6:a8:f2:ae:67:29:5d:ab:fd:d6:7d:
         4a:09:4f:d3:cf:d6:62:90:26:7b:04:b4:8a:a0:2c:a1:51:bc:
         9d:0c:fc:db:3e:e2:40:04:9f:3b:cf:47:a7:48:33:31:97:cd:
         12:61:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:52 2024 by rpki-client on console-fra.rpki-client.org