Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa
File:                     b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa (raw, json)
Hash identifier:          BgSvmUi6dzTv/L8y3VqOEDwPi/Ha70gn/a44EfIJ/VE=
Subject key identifier:   5E:A6:76:75:C4:7F:EB:EF:6A:C7:68:D5:04:9D:4E:4A:97:26:66:1B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B3B8134036FBBFF06EC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     57
IP address blocks:        64.62.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:3b:81:34:03:6f:bb:ff:06:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=76fd279a-14bd-4797-b120-1ec3b0ea7d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:d0:47:e6:b6:80:85:22:2a:05:9b:be:38:
                    b5:b4:99:e3:74:68:42:45:2f:b7:ca:6e:46:6d:a9:
                    7e:e0:fc:94:2b:d9:ba:fd:e0:30:37:53:7f:90:73:
                    68:5d:82:6a:8f:6c:5f:d4:e4:ab:10:cc:ff:64:ff:
                    c7:08:fd:3f:cf:38:69:39:dc:25:9c:fb:21:d3:8e:
                    9e:0d:58:7d:12:c8:e4:c7:a1:2d:cb:6d:f3:12:c5:
                    c4:16:81:46:9a:98:2b:2b:ca:df:9c:7c:94:b8:83:
                    33:44:3c:b2:74:38:e5:e0:31:8b:08:5d:9b:6b:54:
                    9f:bd:87:90:99:87:04:bc:fe:c4:b0:17:29:8f:48:
                    87:30:40:48:d3:d2:8a:9e:8c:bb:30:ad:8e:cf:34:
                    05:59:bc:87:f2:eb:ce:a7:54:ad:d4:77:d1:21:6a:
                    b3:a9:e8:ab:44:2e:77:68:d9:5c:2a:33:29:0f:e5:
                    c2:e4:83:12:bc:6d:9a:8a:21:ea:44:76:79:c5:0c:
                    1b:e2:a7:75:9d:2d:2e:24:f0:61:d6:d8:ad:bc:b2:
                    ca:d3:b0:85:9c:1f:42:68:41:f6:d3:8d:f4:2f:a1:
                    6d:02:0c:64:66:38:b1:59:8e:bd:63:c8:d2:7d:cb:
                    2e:4f:5c:7b:50:69:72:4a:de:eb:34:95:5c:f6:87:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A6:76:75:C4:7F:EB:EF:6A:C7:68:D5:04:9D:4E:4A:97:26:66:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5cb3bdd-c958-31fc-802f-21f4f125fdba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:88:4b:a5:5b:fd:6a:61:af:bc:2e:5f:9e:73:c8:a1:50:
         d6:89:b5:1c:c5:03:56:89:f9:ed:89:aa:db:8e:9d:e7:53:08:
         2e:e3:b0:95:2c:8e:03:c0:b0:2d:6f:51:d1:90:e1:1b:c9:71:
         f3:e2:bb:75:6e:c6:f3:9d:ba:fa:f5:c3:6c:f2:c1:e9:14:8b:
         56:9f:e8:36:70:b5:fe:6e:3b:80:91:b2:c8:15:1a:f8:80:b7:
         80:43:df:5e:33:f6:fe:5a:9c:fb:89:1f:4d:ce:29:8c:7d:b5:
         60:14:24:17:27:fa:c6:7c:34:bf:08:e6:21:6d:09:e4:8f:1f:
         85:0a:13:83:c8:2e:ee:b8:1d:77:ed:49:2f:8a:c2:f4:a2:d2:
         6b:c0:2f:61:cd:a7:fe:70:e9:8d:4c:dd:4d:92:9f:ac:0d:c2:
         4b:d6:f5:bd:03:c4:35:06:59:9c:9d:84:7e:4b:f4:57:78:c5:
         84:87:6a:11:3b:2b:e6:8f:d3:92:bf:e7:58:0e:48:f1:22:5e:
         ca:fe:b3:d7:56:9c:b0:3d:37:3d:1b:d5:1c:16:7c:4b:59:de:
         6d:fb:8f:97:f4:14:b0:36:94:b3:d7:e4:e0:36:80:0b:4d:ea:
         b2:86:1e:9f:fd:82:e3:e5:cd:14:86:ed:0a:38:e1:07:95:5d:
         20:5e:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org