Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/63efd8ee-733d-32c0-9a5b-47c15abd254c.roa
File:                     63efd8ee-733d-32c0-9a5b-47c15abd254c.roa (raw, json)
Hash identifier:          Z7vlbsqiG/N2jecY3/0RXGSQ82c/Ph7TnHklTgAUUT4=
Subject key identifier:   8D:90:29:9D:B0:45:6F:E7:69:26:B4:F7:99:1D:86:AF:DD:36:A4:2F
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F43285845BA7E280F7F9B53B90C05CCC0
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/63efd8ee-733d-32c0-9a5b-47c15abd254c.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     11127
IP address blocks:        64.58.109.0/24 maxlen: 25
                          64.58.97.0/24 maxlen: 25
                          64.49.179.0/24 maxlen: 25
                          64.49.129.0/24 maxlen: 25
                          64.49.130.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:28:0f:7f:9b:53:b9:0c:05:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=650ef264-f04e-40f2-bff5-72cff959917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:41:0c:36:05:4c:72:50:2a:36:03:40:b9:fc:
                    2c:82:0c:dd:44:56:0b:96:4a:57:a5:20:20:0c:d8:
                    c2:e4:35:be:88:68:17:b6:33:a9:ba:83:d0:04:61:
                    54:1e:1a:ad:14:71:e6:91:d1:d5:bd:32:c7:d8:9f:
                    11:6e:0a:70:b9:47:3d:6c:a6:fa:c4:2b:79:e5:21:
                    5a:c0:e7:86:c4:97:fa:01:88:4b:2e:3a:5c:db:3b:
                    9d:b9:58:f5:33:06:fe:69:24:bb:af:12:85:03:18:
                    b3:b3:7f:3b:d5:40:62:b6:46:65:fb:21:54:c8:13:
                    b0:88:f9:ad:6e:01:b8:4d:7e:4d:f2:71:f6:b9:2e:
                    72:ef:74:5a:10:68:4c:ee:b3:ef:c4:2b:3c:d8:8f:
                    ed:cb:7b:b7:ba:a0:91:d3:da:7b:af:cf:fd:b9:20:
                    4b:03:70:b7:7c:5e:fa:09:f9:a0:5e:e6:0f:54:a6:
                    64:91:62:28:06:3f:9e:56:4f:dc:ad:2e:9c:a5:32:
                    81:ea:7d:aa:95:62:9c:1f:02:75:a1:94:4c:8b:e2:
                    42:ca:66:16:ac:50:57:3f:ca:54:8f:02:0d:45:9b:
                    a7:94:4e:2b:3e:a2:c3:5a:9c:c7:41:a3:ad:59:f0:
                    f4:35:15:2d:8f:a3:c9:73:46:64:b7:b6:8f:3b:31:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:90:29:9D:B0:45:6F:E7:69:26:B4:F7:99:1D:86:AF:DD:36:A4:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/63efd8ee-733d-32c0-9a5b-47c15abd254c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.129.0-64.49.130.255
                  64.49.179.0/24
                  64.58.97.0/24
                  64.58.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:29:66:b8:dc:a7:15:c5:17:3d:27:7a:e7:a5:70:72:19:97:
         a4:d3:79:be:ac:59:e0:55:a5:62:38:50:7c:0b:75:d9:2e:c3:
         bf:4f:35:f5:75:63:15:95:ed:80:0a:47:f8:e0:92:0a:72:b9:
         18:f8:81:7a:e1:44:90:42:34:e4:92:5f:24:2d:ba:36:39:bc:
         df:0e:11:1d:1c:09:e0:4e:49:1d:c2:40:76:ad:a4:db:2d:c0:
         6e:b0:67:99:01:bd:ed:cd:96:16:5f:8b:ab:43:9a:f7:f5:c6:
         17:85:bd:95:5f:0c:00:38:f5:4a:38:4b:54:21:14:78:10:da:
         d2:41:e1:de:15:49:0e:77:90:87:cb:59:47:b5:17:e5:bb:fe:
         fb:f2:22:fe:78:9e:da:b3:07:3c:ab:5d:e0:93:7b:a9:cf:c1:
         a0:36:12:38:5c:c0:89:41:70:75:c2:75:47:ff:33:59:1c:4b:
         e7:40:bb:3a:41:c4:f6:aa:fa:74:a4:1a:45:3f:cf:a0:7b:0b:
         7e:1f:b8:2c:64:5c:3e:a2:5d:d7:86:ee:7b:7d:69:6d:ba:2e:
         82:6b:45:ea:55:33:08:5f:fc:e9:90:71:f1:1a:93:4a:c9:02:
         0a:49:82:26:0f:9a:28:9c:bd:e0:cf:5c:38:af:4d:9c:d6:d3:
         de:48:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:51:19 2024 by rpki-client on console-fra.rpki-client.org