Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa
File:                     2951e8ad-8636-3403-831f-0d15984794b4.roa (raw, json)
Hash identifier:          Z4XNo+PWiMY2+WVOth9swu8ntCSIQo7R66Zvv4VjdLU=
Subject key identifier:   3C:3C:58:8A:D9:5D:E8:57:C1:95:61:2A:EA:79:EE:49:4B:1D:A8:8A
Certificate issuer:       /CN=29c10060-705c-45ae-937b-544864b670d7
Certificate serial:       010D0C9F4328584566BDB5A225501A22ED494780
Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        64.71.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b5:a2:25:50:1a:22:ed:49:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c10060-705c-45ae-937b-544864b670d7
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=6af6619a-0092-4ec7-907b-5fca7b9f86d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:45:e6:92:e5:a4:ac:db:d7:da:61:56:82:
                    64:9a:10:b0:fd:c1:3f:b5:52:1c:b8:04:47:a8:2c:
                    b6:43:5a:2d:1c:8c:31:18:90:76:d0:23:05:fe:58:
                    34:bf:7e:31:6e:79:cb:3a:ba:36:09:eb:88:c0:20:
                    83:af:fb:1b:98:18:f7:bd:13:c0:4c:63:9e:c3:42:
                    3a:3b:19:51:52:81:e4:24:71:39:71:ef:75:69:a9:
                    e4:79:e0:81:a9:5b:4f:a5:9c:89:5f:14:4a:47:c7:
                    71:f6:3b:6a:6e:ce:7b:3d:92:81:4d:8c:4a:72:66:
                    d5:bd:e0:5a:69:6b:40:22:a7:a5:62:a5:85:e2:22:
                    20:9e:62:91:94:1d:54:5e:6e:c4:68:48:b2:5d:c6:
                    35:a7:b7:38:5b:ae:75:73:17:75:86:b3:a7:ae:62:
                    dc:dc:75:7a:7c:62:88:cc:5f:f0:58:df:2b:17:12:
                    c3:da:5c:55:40:85:ec:32:42:bb:ff:44:af:a8:45:
                    f7:5f:4a:13:45:30:0a:4c:85:08:7e:d3:86:2c:5b:
                    fb:09:80:d7:dc:88:92:67:3a:64:a2:24:53:12:d2:
                    f3:5b:94:d4:2e:42:d1:7a:45:8e:67:3e:e2:31:40:
                    97:61:81:bd:a6:2b:0e:b9:bd:34:69:55:6e:4d:98:
                    99:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3C:58:8A:D9:5D:E8:57:C1:95:61:2A:EA:79:EE:49:4B:1D:A8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:82:22:38:34:c1:2c:c3:75:ef:84:cf:14:93:43:42:76:
         ec:dc:2e:b0:8f:6d:ff:f4:28:74:27:9c:34:d5:80:c1:40:f7:
         29:bd:8b:1d:3d:5f:c0:71:f7:49:f0:bc:7d:39:ec:3f:18:89:
         75:ca:a3:98:8e:c4:54:1e:25:ce:b7:fd:92:59:d9:36:13:de:
         5c:17:0c:c3:9b:b0:8a:ff:67:13:23:5a:ea:07:5f:80:ef:28:
         7e:89:8e:7c:73:8d:eb:52:2b:6e:49:91:bf:7b:21:a4:ee:09:
         bd:3b:99:55:dc:3e:f4:f4:7c:c9:bc:16:47:81:75:41:8a:9a:
         eb:e8:55:6d:9b:11:87:3f:3b:ae:82:cb:a8:2b:8f:39:df:c6:
         43:47:61:2c:a9:c8:e7:05:c3:91:91:3b:0d:d8:fb:68:65:1c:
         c5:14:9e:01:2c:d4:03:16:ae:43:89:b4:1c:1e:65:9d:10:97:
         5e:b2:d2:5b:67:f8:b2:58:ac:0a:41:cc:09:61:03:ac:4d:83:
         7c:35:41:2f:cb:bb:fc:0c:44:9e:14:94:51:fa:fe:69:5d:61:
         97:1a:7b:c2:fb:0e:44:d4:d9:5d:91:2e:86:19:9a:0a:93:d0:
         47:21:03:9a:b7:7e:d3:28:88:d1:fa:15:6d:6e:2f:50:f6:34:
         ed:92:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:58:28 2024 by rpki-client on console-fra.rpki-client.org