Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/3a7e8663-f570-3f98-b3ad-ad7ad42dddca.roa
File:                     3a7e8663-f570-3f98-b3ad-ad7ad42dddca.roa (raw, json)
Hash identifier:          phz9kNlpuLHpZvJrUN8Xk6jMO8G0Q0/0w7uu0Mle7Zk=
Subject key identifier:   94:8D:36:48:A0:FA:D3:D1:35:F9:CE:3F:5E:C5:7B:08:F4:3E:78:9A
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F432858452EE7EAE076327CE0AC4A5D80
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/3a7e8663-f570-3f98-b3ad-ad7ad42dddca.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     397270
IP address blocks:        64.112.79.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ea:e0:76:32:7c:e0:ac:4a:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=c3585aee-ec67-4029-8ea8-8bba909e8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:97:94:9e:26:4d:a0:e8:1b:9e:eb:31:ca:68:
                    45:33:b2:c3:38:bc:1e:01:a9:a8:4b:4e:4c:10:fe:
                    fb:d6:14:cb:df:77:d7:6d:e5:0c:7a:bf:20:71:32:
                    55:f1:bc:65:fb:e2:bb:e1:29:13:ee:a1:05:2a:e3:
                    15:5d:80:3e:c7:43:57:67:a8:ad:f5:5c:42:53:07:
                    45:ad:a9:60:4d:30:93:f3:9e:a9:82:ca:26:7a:b6:
                    05:41:76:65:a7:0a:fd:99:e4:ab:b5:aa:64:90:1e:
                    b1:f4:15:0d:e5:eb:28:84:7a:01:55:c1:d2:d5:00:
                    41:9d:cb:36:a3:23:67:ad:ed:38:a9:3e:e9:19:6d:
                    36:6f:ff:fd:d0:54:db:f1:41:de:f9:a0:b4:06:4e:
                    86:23:95:d5:1d:90:93:a2:65:21:54:78:80:bc:47:
                    65:fe:0f:3c:3e:13:da:69:89:a2:fc:03:2a:1d:e8:
                    76:62:7e:b9:0d:81:40:7c:c9:ac:06:10:ad:17:23:
                    b1:37:a2:7c:62:b9:0c:36:cc:34:3d:25:6b:7d:0e:
                    fa:87:13:8d:57:c5:f2:6b:8b:dc:4a:87:32:22:dc:
                    c4:80:7e:a0:d8:65:b4:fc:97:12:df:f1:b7:35:3b:
                    91:0f:4a:9e:ed:ba:b3:78:50:e2:6a:12:d3:99:7b:
                    50:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8D:36:48:A0:FA:D3:D1:35:F9:CE:3F:5E:C5:7B:08:F4:3E:78:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/3a7e8663-f570-3f98-b3ad-ad7ad42dddca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:6a:3e:d3:fa:b3:4c:48:d4:83:9b:c8:57:45:25:fa:1c:
         78:91:1a:bf:f0:78:df:1f:c1:81:95:45:3b:b8:32:bc:d3:45:
         75:c3:01:a4:32:5b:c5:bd:1b:79:78:47:9a:fb:6e:c7:a2:56:
         98:0c:0b:07:37:ef:20:b2:c8:43:70:d9:f5:84:f2:bf:40:a2:
         55:3c:7f:d5:fc:1c:f5:90:c9:5d:b2:76:48:54:52:79:1a:56:
         6d:c2:8f:62:93:52:38:ab:ef:19:0d:35:55:6e:d7:bc:ec:55:
         c4:02:7d:31:b2:1a:16:ee:a8:67:09:e8:75:06:f9:b5:1e:39:
         f5:22:68:ce:a9:0f:32:3c:02:ed:7e:bc:b0:2e:a6:28:0a:e4:
         ae:1e:98:bb:98:9c:99:02:5f:2c:e3:91:01:d7:1b:da:10:5b:
         ab:7c:0e:3f:d7:99:37:c5:1d:2f:aa:47:28:65:6c:a2:73:df:
         dc:4e:5b:52:25:ca:45:be:16:0d:48:19:a1:c3:46:68:3c:56:
         30:32:08:0d:16:c4:26:ae:c1:fd:a6:c0:fa:95:f4:ab:9c:bd:
         c7:4c:ff:96:28:e4:74:fa:9b:6d:88:2c:02:f1:f7:35:97:c8:
         71:90:27:ec:79:83:d0:61:a6:ad:37:c5:b0:00:62:c7:53:38:
         c3:f0:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 06:33:39 2024 by rpki-client on console-fra.rpki-client.org