Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67112fdb-f3ab-3da0-be8a-5c1faa6d08e9.roa
File:                     67112fdb-f3ab-3da0-be8a-5c1faa6d08e9.roa (raw, json)
Hash identifier:          DpNvLKOEyVfLw+I0UjNfK3dTh6atNqb4dMqRs8TTptA=
Subject key identifier:   CF:F8:43:09:62:D6:BB:14:1F:C6:4D:EC:08:94:FB:16:A0:38:F6:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F895622456A216E4167F0680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67112fdb-f3ab-3da0-be8a-5c1faa6d08e9.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     60154
IP address blocks:        65.49.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:62:24:56:a2:16:e4:16:7f:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=cbeae558-fe95-481c-b3e5-3b6ff69e7d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:ca:76:93:94:d9:fb:5a:21:54:e4:3a:eb:
                    50:fd:b3:2e:46:df:7d:51:cc:1a:41:72:54:85:8f:
                    6d:77:68:d7:1c:6d:35:69:d5:03:73:f3:fb:ed:ae:
                    5c:6b:03:96:bc:8a:aa:89:80:b6:1f:28:f2:cb:63:
                    c1:eb:f4:1f:ce:00:fd:af:2b:11:39:b8:61:b3:d5:
                    b6:3f:df:a8:86:88:2a:9a:6e:ea:9c:60:6e:5c:28:
                    57:b0:69:d6:b7:c0:f2:fb:32:f9:8f:a2:15:3a:89:
                    aa:91:0d:f3:ca:5f:0f:c8:11:e0:d5:c8:06:ba:ee:
                    0b:8b:b8:0b:6c:9e:84:f4:28:5c:f4:81:6b:57:ee:
                    e0:4c:97:8d:19:de:92:f8:1b:db:7b:4d:81:4a:30:
                    20:03:c6:d2:54:7c:35:60:d0:d1:7d:53:32:ea:e2:
                    36:06:1f:02:70:1d:d6:6b:d4:aa:e7:bb:2b:c3:d3:
                    67:47:21:f5:cb:17:9c:a8:20:41:6c:b4:1e:08:c0:
                    88:95:dd:f5:81:f4:c7:e6:b3:33:35:4e:02:2b:23:
                    9b:9e:8c:1a:bf:ae:85:f8:62:40:3a:0e:0e:54:e1:
                    b3:c1:00:f9:3b:38:f9:61:16:32:f9:83:01:7c:78:
                    99:be:00:a5:bd:6d:e1:8c:7e:b5:36:72:e2:ef:4e:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F8:43:09:62:D6:BB:14:1F:C6:4D:EC:08:94:FB:16:A0:38:F6:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67112fdb-f3ab-3da0-be8a-5c1faa6d08e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:10:65:d9:85:bf:32:55:12:ba:31:f8:12:7f:1c:4f:be:79:
         28:ad:57:82:63:1c:1f:44:92:d9:9d:b5:0b:4e:b3:29:bc:bb:
         0d:bb:d2:3b:7e:2a:c8:8e:87:d2:9b:f5:9f:26:f9:fd:b8:ed:
         0b:13:ca:08:37:96:a0:9f:c8:d3:7d:b8:5d:0d:75:c9:e6:4b:
         0c:2d:24:f3:c1:7b:e2:bd:85:60:f7:f5:08:c2:67:a1:4b:61:
         41:c6:07:43:24:11:49:c9:92:56:2d:12:85:7b:e2:99:fd:0b:
         a1:8f:7e:d3:5e:6e:6f:35:13:a5:0a:18:84:6b:09:05:37:9b:
         d3:75:8c:98:b5:ea:39:aa:8c:3e:31:f6:5c:36:02:b4:00:29:
         58:3f:47:c3:89:52:45:74:d5:d2:a5:e1:10:80:55:c0:d4:2e:
         88:22:88:07:66:00:f9:22:ed:0f:74:74:27:cc:0a:c4:fe:dd:
         0b:94:36:13:c0:f1:a5:15:61:e4:64:7e:df:81:e9:75:bc:ce:
         fa:0d:33:92:c3:9f:07:cc:dc:66:27:ff:d3:a0:01:d3:cd:57:
         88:f9:d4:a3:96:de:a3:a3:31:7d:70:8d:82:8c:a9:74:34:7c:
         6a:e3:0e:e2:36:06:f6:2f:58:c0:ef:54:b3:d8:d9:4a:54:55:
         98:73:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:30:31 2024 by rpki-client on console-ams.rpki-client.org