Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa
File:                     973a96a2-0162-35e7-90db-f4882fddf92f.roa (raw, json)
Hash identifier:          qowXait795ENQcKemI+xuDxd7ShmL8sAZ0HdoFp4WeM=
Subject key identifier:   78:5D:B6:34:60:82:84:40:41:62:CE:2F:2B:10:22:EA:D2:A6:DB:11
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F4328584582A8876308B12A6920D73C80
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        64.52.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:87:63:08:b1:2a:69:20:d7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=aedcc87a-aea7-42e6-a51f-0f12d4b3d3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5e:a5:71:be:5a:60:bb:fd:57:77:99:95:a5:
                    27:13:8b:bd:56:f2:7f:84:9b:a8:76:f9:1f:b7:b4:
                    d1:c5:23:ef:52:7b:02:f6:44:b9:a9:f2:f1:f7:3c:
                    90:db:38:44:aa:87:3a:66:74:d0:69:e8:2e:89:ef:
                    57:7c:db:d8:92:e7:b0:b3:63:43:5e:7e:ec:e4:2a:
                    9f:db:c6:6b:01:74:fd:eb:88:62:3f:80:03:0e:f8:
                    c3:f6:55:f9:0f:f8:b9:a9:dc:73:20:9d:c1:38:8a:
                    98:f7:93:20:16:4b:aa:20:4a:e3:d1:7b:89:e6:d3:
                    3a:19:1f:51:57:64:48:57:00:22:05:37:72:2d:e9:
                    3c:be:08:39:6a:2b:39:9c:2b:ad:19:e8:71:d9:ec:
                    ca:e4:12:54:da:38:d2:ee:a9:37:42:65:c3:0f:06:
                    ec:31:6c:93:c3:a1:3f:08:c6:6c:eb:ce:c8:06:87:
                    a1:94:ea:60:64:47:57:0f:ff:87:a4:ef:82:ee:a9:
                    9d:96:33:ae:10:b7:6d:5d:23:78:02:af:40:19:d9:
                    c8:d7:98:07:08:39:70:81:90:27:dc:a3:7d:72:8d:
                    e2:c1:d5:1d:62:9c:e9:9f:eb:ee:61:74:d5:35:89:
                    f5:64:d2:90:06:f8:fa:91:6b:67:3c:72:d6:8d:24:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5D:B6:34:60:82:84:40:41:62:CE:2F:2B:10:22:EA:D2:A6:DB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/973a96a2-0162-35e7-90db-f4882fddf92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:74:ef:80:42:95:a3:f0:d3:d8:54:11:7a:cd:31:a8:7d:
         e8:a9:98:1b:e4:9c:ed:f8:99:d0:65:0c:e3:24:5a:80:76:a9:
         bb:1f:4d:4f:0a:24:bb:e9:ce:1f:83:a9:8a:7f:3e:80:11:e7:
         93:e2:e1:64:65:69:fa:00:fb:97:2a:03:e9:90:3b:23:fa:fe:
         9d:66:9c:9d:d1:c2:4f:54:21:0c:d2:18:db:83:d6:91:2d:c0:
         ff:7f:77:65:d8:b3:ee:42:8f:fc:45:fb:ba:68:79:5b:13:6b:
         1f:39:5f:21:56:09:21:89:c0:fd:b3:a1:38:74:3a:08:7d:85:
         27:12:73:82:04:99:d1:7f:41:c9:7d:c3:cf:1a:ad:79:be:53:
         90:89:e4:b7:8f:25:c7:a7:59:02:68:8f:db:c0:e2:ae:fb:4d:
         aa:5f:2c:11:74:cb:f5:94:30:ac:c3:8d:be:0f:2f:15:2e:cf:
         d1:4d:d2:bf:a9:d2:44:88:5a:60:4a:05:c5:1a:c6:0a:2e:62:
         81:66:fd:58:3f:41:44:36:cf:d4:82:78:9d:1e:1f:b0:26:76:
         ba:93:d4:e5:f7:75:e0:3b:16:50:24:70:a9:79:c8:95:61:59:
         4f:b8:9a:88:11:47:42:72:c4:0f:3b:fc:80:06:48:e7:c6:9f:
         54:0d:5a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:01 2024 by rpki-client on console-ams.rpki-client.org