Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa
File:                     2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa (raw, json)
Hash identifier:          T8CY6xBY0Z8Suy2xOwaqCYJL7G1/RUsm3hUgqQxP3es=
Subject key identifier:   16:A8:62:D7:79:B9:74:E6:C7:20:19:A6:4B:C3:C4:84:9B:F1:B7:26
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F432858458B088438BD95FDCA7A001300
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     24753
IP address blocks:        64.49.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:84:38:bd:95:fd:ca:7a:00:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=708fd5cf-de26-4b0f-8dc0-a524a3f63866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:8f:da:da:b2:66:10:dd:a6:53:48:30:c2:
                    8f:6c:ce:5c:a8:1f:61:ee:f6:a2:61:12:00:0d:ac:
                    e4:7c:fc:9e:09:98:f1:df:bb:9f:ac:52:5b:0d:2c:
                    6c:df:2c:51:90:be:9e:a2:0b:a8:e3:4e:ff:35:8a:
                    f6:e1:ce:71:a1:f8:a7:7b:98:bf:32:fc:68:b9:23:
                    c3:cc:3c:03:1d:a8:f5:83:c3:5d:04:44:0d:cf:a5:
                    2f:35:cd:1e:fa:85:e6:7a:1d:ce:d0:f8:02:79:06:
                    ac:24:ce:0c:05:4c:02:30:d5:a4:9f:0b:4e:cd:01:
                    26:45:8f:68:54:e8:89:b3:78:36:6c:18:66:b9:f5:
                    f9:59:ae:9c:a4:07:2f:26:cb:9b:56:91:75:47:89:
                    a0:8f:50:4b:e0:0e:36:22:e9:12:65:d1:92:3b:df:
                    52:38:ca:54:31:a3:ed:05:07:d9:bc:7f:51:89:01:
                    b1:44:24:04:a3:35:22:e2:4a:a4:b3:e4:ea:59:c6:
                    10:d0:2f:bc:64:60:69:d6:93:0a:47:97:9e:61:92:
                    5e:bc:4f:59:2d:8c:bc:f9:c7:44:8e:a4:5c:10:e0:
                    4e:f8:44:f5:51:23:70:1f:a3:48:be:06:73:b1:03:
                    19:a1:9c:dd:20:d2:2e:0d:c1:d8:13:38:c0:b0:3e:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A8:62:D7:79:B9:74:E6:C7:20:19:A6:4B:C3:C4:84:9B:F1:B7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:23:81:5f:10:8f:2d:15:5a:35:8f:37:74:12:0e:17:54:f8:
         4a:8e:6d:c3:d4:17:0c:d8:9d:76:28:40:fb:d7:d3:28:23:0a:
         99:88:df:a0:0a:a2:6e:93:7a:88:43:80:62:6d:fc:48:92:3f:
         63:c6:89:40:27:12:b7:b3:a1:9b:df:d6:4a:8a:c6:d0:2f:22:
         c3:eb:7a:32:6a:0a:a4:e4:ce:76:0d:ba:c9:00:d3:4e:74:35:
         f3:e5:da:c0:44:71:24:44:85:99:6c:cc:37:43:bf:a3:4e:48:
         0e:0a:c3:de:6a:24:f7:8c:a9:f9:09:96:16:d6:18:98:48:aa:
         1c:e4:b0:8e:36:e5:de:fc:30:1b:26:2b:b5:4a:03:89:b2:57:
         3c:6b:b3:fd:4f:63:2b:5f:fe:d9:c8:4f:89:54:ff:f4:63:0c:
         56:b0:b6:d3:df:14:44:9b:82:9f:62:f2:e9:e9:e0:c4:49:da:
         1a:db:02:79:13:28:8f:4c:05:30:db:4a:f6:42:16:cf:0b:4e:
         c9:55:b7:87:25:b2:64:05:0c:2b:0f:17:26:21:6a:88:53:f4:
         12:51:e0:3e:f6:92:76:d8:e7:e2:6d:f7:63:48:17:17:a5:5a:
         f4:25:34:14:ac:7d:9b:db:45:4b:f9:be:4e:15:cd:81:8c:14:
         f5:65:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:52 2024 by rpki-client on console-fra.rpki-client.org