Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4867e763-e1a1-3186-bf25-0e86dc10ce0c.roa
File:                     4867e763-e1a1-3186-bf25-0e86dc10ce0c.roa (raw, json)
Hash identifier:          cQqiFh04R60v3KzysDtv58S9FOY17mZ7zNbGZXSPcyk=
Subject key identifier:   0A:0C:8B:FC:52:EB:9C:06:9C:88:66:30:18:34:7E:61:45:95:2F:B9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858450699C9AEDFBC81192C788E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4867e763-e1a1-3186-bf25-0e86dc10ce0c.roa
Signing time:             Tue 27 Feb 2024 02:30:47 +0000
ROA not before:           Tue 27 Feb 2024 02:30:47 +0000
ROA not after:            Mon 27 May 2024 01:30:47 +0000
asID:                     207821
IP address blocks:        64.62.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:99:c9:ae:df:bc:81:19:2c:78:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 27 02:30:47 2024 GMT
            Not After : May 27 01:30:47 2024 GMT
        Subject: CN=f4737387-9ed2-439e-ac7d-33dc8c0cb121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:77:25:05:c1:5f:8a:b5:92:9d:5f:bd:2c:
                    c7:11:9c:72:94:4d:9e:b6:49:4a:18:62:05:07:bb:
                    56:94:fe:e1:f1:c1:84:e0:f7:de:d5:3d:e9:1d:70:
                    dc:f4:7b:10:74:7c:cc:cc:e0:cb:b2:48:49:54:0d:
                    fa:f0:5b:0f:2e:a5:ef:b5:c1:c8:5a:7c:2d:a8:d1:
                    d0:0d:c7:6a:e8:ec:72:6f:b9:50:5e:f9:43:83:eb:
                    7a:46:a1:1c:71:42:7c:4b:55:5d:e7:27:1a:a6:85:
                    3d:5c:20:85:6a:c9:12:fa:06:73:d1:78:a4:cf:dd:
                    e1:c6:28:a0:06:b3:34:b6:ca:57:1e:24:80:4e:2b:
                    d3:8a:69:31:bf:75:18:0c:b0:0d:3f:36:58:88:78:
                    1e:e0:92:b4:84:fb:ad:35:7d:cf:07:5d:f7:b2:7a:
                    90:63:01:a6:7e:54:69:cb:e0:1a:33:1a:98:fc:76:
                    f4:85:bf:4d:25:7e:5e:62:0f:b5:a7:af:91:e3:d4:
                    a7:dd:2a:2b:97:84:c9:62:cd:88:87:15:6e:22:d4:
                    cf:e7:29:3a:11:e2:00:12:fa:9f:75:f3:e0:cb:ad:
                    a6:4e:2b:46:cb:bc:c2:d1:a0:3b:69:49:cf:bb:82:
                    17:13:1b:b2:a3:c0:a5:20:2e:0b:08:85:91:5c:7a:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0C:8B:FC:52:EB:9C:06:9C:88:66:30:18:34:7E:61:45:95:2F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4867e763-e1a1-3186-bf25-0e86dc10ce0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:84:f6:be:23:1c:fd:b9:46:53:49:7b:13:8b:e3:21:d2:
         19:f2:d1:c1:06:e5:fd:12:d1:0b:37:5e:50:a3:cf:9d:1c:a7:
         4a:d9:90:77:13:08:f0:8e:b9:90:85:c3:24:eb:b8:f9:87:fa:
         47:63:0c:71:b0:9d:6f:6b:5f:76:04:7c:41:65:68:2e:f6:29:
         b3:25:c1:d9:a4:aa:8f:20:df:af:4b:cb:d6:5c:7f:a1:32:f6:
         de:ed:e4:b3:64:7e:77:bb:b8:2a:95:81:a4:5b:11:9c:db:af:
         3f:4f:3c:96:64:31:b1:05:32:55:01:38:5f:2b:a1:b5:53:ca:
         07:5e:07:f9:11:ee:11:52:44:51:8b:d7:bd:42:f6:ec:f0:9f:
         67:18:fa:1f:30:74:f6:d2:dc:b5:ad:6c:77:2b:15:fe:1b:e6:
         99:57:b8:47:3f:17:95:75:6f:06:1a:73:5a:16:93:24:73:6c:
         58:66:f9:e5:54:28:fc:4d:07:64:e3:eb:3d:50:b2:87:a1:0c:
         22:2c:09:5d:0c:45:db:55:93:a0:38:3d:24:5d:c1:97:6e:4b:
         50:23:48:d8:97:a8:4e:54:c9:3b:fa:08:a0:15:28:62:71:ab:
         be:81:b6:81:f4:d8:29:db:8f:e4:04:d7:73:52:2a:8e:57:20:
         5e:34:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:28:38 2024 by rpki-client on console-fra.rpki-client.org