Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5989f039-ee8c-3f53-98b3-423bb9c8ae2d.roa
File:                     5989f039-ee8c-3f53-98b3-423bb9c8ae2d.roa (raw, json)
Hash identifier:          goXJ4THke4FYeMbyYjY4tmXLIEVTvEUeHduHeu7kjRo=
Subject key identifier:   E3:AB:20:F2:C0:BB:9C:66:CE:14:0D:96:2B:1A:49:AA:56:5B:02:1D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858458C6DE2A304BFBB98FA4D8500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5989f039-ee8c-3f53-98b3-423bb9c8ae2d.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     14277
IP address blocks:        64.62.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e2:a3:04:bf:bb:98:fa:4d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=a786707e-fe80-441a-8c88-fb658d8b592e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:ce:0e:20:40:f7:9b:19:27:b5:27:31:fb:
                    61:74:94:43:ff:79:8f:80:83:5c:9b:3a:de:a1:b3:
                    47:b2:cb:62:e3:2a:e2:42:d4:a7:58:af:b6:18:1b:
                    ae:53:81:87:7e:c2:5c:1f:fb:0a:0b:86:b7:f4:d4:
                    d9:53:f7:3b:39:99:d7:d9:a3:a8:f1:68:3a:3f:c9:
                    85:b5:17:ab:04:84:56:de:39:62:a4:81:f6:7c:73:
                    f8:90:c9:3a:01:ac:4b:b3:24:b4:76:6d:e5:18:55:
                    e0:8f:f5:2d:05:21:51:3a:b0:fe:c3:bc:2f:f8:f0:
                    7d:db:fc:16:1a:51:11:e1:44:54:22:80:99:90:98:
                    fa:ee:6f:4e:8c:1a:90:08:dd:ba:4c:0e:db:a8:39:
                    08:5b:ef:11:d6:ae:17:8a:e7:6c:f6:e7:b4:6d:17:
                    c2:68:a7:65:eb:2f:c4:cd:a1:29:f2:48:9c:ee:7a:
                    e2:4c:b3:41:cb:66:d3:b1:52:a1:2d:77:27:06:93:
                    16:7a:6c:3e:8c:ed:00:02:c9:68:b5:84:58:ef:8e:
                    d5:06:c1:f7:b0:c9:e0:c0:62:f8:b9:c2:b9:18:66:
                    1a:4a:0c:32:82:d8:f6:01:08:31:18:4c:78:4c:e2:
                    36:22:61:96:2d:59:4b:d7:eb:27:99:7b:d6:3d:f0:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:20:F2:C0:BB:9C:66:CE:14:0D:96:2B:1A:49:AA:56:5B:02:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5989f039-ee8c-3f53-98b3-423bb9c8ae2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:cf:fe:7f:0a:4f:54:6d:2a:28:d4:ff:5c:a5:0e:b1:5e:
         55:b9:c3:59:37:2d:ff:0e:0b:4e:2b:fe:63:e4:42:bd:66:83:
         a3:5b:07:0b:f6:f2:8a:46:a5:72:59:36:4a:d1:99:76:35:cd:
         54:96:6d:12:0c:e4:e2:7f:75:bd:ae:21:f1:92:64:15:40:62:
         8f:66:b9:9d:f3:ac:a4:c0:8a:95:44:b7:a0:bb:c7:99:53:cd:
         d5:c4:5f:27:cf:43:1d:f2:aa:83:c8:df:4b:61:45:fe:c1:6b:
         47:d5:50:c2:b2:59:85:a5:70:a1:1a:eb:46:c4:92:38:6f:57:
         a2:92:81:a4:a6:86:d0:a8:78:1f:63:78:8f:ba:67:0b:c3:75:
         91:14:2b:ce:d7:f9:3c:10:ed:53:14:c3:cf:ad:b5:46:a3:02:
         f6:e0:1d:e0:c1:43:a5:68:a7:3a:a0:cd:e3:98:be:79:de:d4:
         c8:74:07:1c:8e:b4:de:22:01:1d:a5:e2:ae:69:52:b9:15:5a:
         e0:16:19:ef:39:36:56:dd:8e:07:4d:dc:e6:fc:75:e9:41:47:
         37:61:b0:17:a7:fb:58:7a:a7:79:fe:90:2e:65:b5:9d:3e:41:
         f0:6a:91:10:28:5f:ad:c9:e4:f5:98:d5:26:3b:46:21:12:d7:
         4e:52:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:13:33 2024 by rpki-client on console-fra.rpki-client.org