Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2423b0ba-8122-36db-8e71-9442a7624464.roa
File:                     2423b0ba-8122-36db-8e71-9442a7624464.roa (raw, json)
Hash identifier:          pbO4f8YzZwJ8byCnDz+yUfPM1W8JZoBJ30688ua3a9w=
Subject key identifier:   D2:44:25:BE:32:30:DA:13:77:18:89:BE:43:4B:29:FD:18:B2:8E:10
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89578F1AB6F227773D8F560
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2423b0ba-8122-36db-8e71-9442a7624464.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     54288
IP address blocks:        65.49.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:78:f1:ab:6f:22:77:73:d8:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=eb0d2457-0378-482d-b171-4f2bc33c4b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c0:9a:14:8d:bc:45:53:6b:0b:ea:88:51:ae:
                    ea:85:81:a0:ae:f5:b0:ea:9f:af:3f:1d:d6:3c:a5:
                    11:34:48:e0:93:ae:ef:24:15:ae:30:e3:f5:0c:26:
                    01:49:35:98:e5:3a:c8:93:01:85:70:14:26:12:4c:
                    b5:53:8a:21:ec:aa:67:10:87:17:e1:9a:d5:bc:52:
                    20:91:42:1f:76:ff:bf:16:bd:19:73:1c:a1:33:87:
                    94:b9:29:49:e9:45:99:70:92:47:8c:48:b8:65:78:
                    56:29:dd:08:82:85:8d:f8:a1:b2:0a:4e:ef:2e:71:
                    bb:98:25:ef:04:30:4e:db:5b:7f:7f:82:08:03:eb:
                    23:12:83:5c:67:00:1c:2b:7b:3d:be:f3:41:fd:29:
                    34:ae:ea:8c:a7:14:77:b6:bf:08:de:a4:ec:d0:0a:
                    a5:da:b3:c1:ed:65:e7:34:0a:72:bd:18:1d:c6:ed:
                    ec:90:15:1c:74:8d:96:1c:56:8b:91:69:b0:39:e5:
                    04:21:c4:e5:47:60:85:ea:56:6b:0d:85:b2:39:e1:
                    41:9c:48:95:f8:dc:bc:dc:4a:ce:ff:ec:47:bf:b0:
                    36:cb:c5:1f:db:ac:75:73:f8:25:b7:98:b1:b6:ae:
                    bf:0d:a9:42:71:42:32:a4:50:6a:8a:d7:42:da:39:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:44:25:BE:32:30:DA:13:77:18:89:BE:43:4B:29:FD:18:B2:8E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2423b0ba-8122-36db-8e71-9442a7624464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:3a:68:03:81:9a:7c:07:8e:ef:73:93:82:84:d1:47:c3:
         5b:7d:1a:83:da:6f:08:61:8b:a0:e1:76:da:3a:d7:13:02:a8:
         19:43:6a:67:ce:35:05:3c:71:b2:ac:44:3d:e1:e1:54:1f:30:
         ef:9d:35:16:77:b4:01:05:a2:db:f1:4e:55:8c:b2:63:15:d9:
         6c:f7:3d:19:ef:2f:7f:72:b0:4e:31:f7:f5:7e:6c:33:ed:80:
         8a:66:ce:3e:32:36:5a:e7:34:a7:d2:5e:e7:fc:e3:b4:23:8b:
         f9:9b:02:a6:ff:9e:8c:db:9d:16:95:43:30:48:e8:b6:d0:9c:
         06:d6:a0:5f:9e:4e:a6:0f:ec:89:52:34:2e:15:35:3f:6f:7d:
         70:b8:67:0e:58:59:7e:91:b8:48:d4:97:ce:ae:bf:a9:c9:d9:
         c3:9b:f8:b7:4a:87:c5:56:e0:ee:b9:f3:e7:6d:83:70:80:19:
         3f:be:2d:e1:12:d4:f9:e9:03:63:ff:70:cc:c3:8b:d3:74:99:
         b6:38:86:2b:e6:88:59:02:0b:55:47:0e:92:1a:81:0b:6a:c2:
         37:8b:77:38:9f:fb:76:30:a4:f4:bb:f2:bb:b1:e5:e8:95:aa:
         92:8f:c8:0b:69:07:d6:f8:cc:d8:09:5a:74:65:70:11:32:c1:
         0e:df:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:47:25 2024 by rpki-client on console-ams.rpki-client.org