Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c55e874a-cfe5-373f-b7c1-c185b59ab2e7.roa
File:                     c55e874a-cfe5-373f-b7c1-c185b59ab2e7.roa (raw, json)
Hash identifier:          g/5vGDKYQN5P7iYV+s5gXk/fC0YRBt/h//Am3TjuVkk=
Subject key identifier:   58:34:02:44:23:31:B3:86:EB:20:EF:8C:D3:54:17:59:FE:48:B9:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8956BF1B8C6AA8CC1E526C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c55e874a-cfe5-373f-b7c1-c185b59ab2e7.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     54288
IP address blocks:        64.62.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:6b:f1:b8:c6:aa:8c:c1:e5:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=e6c15c51-d959-47c1-9392-17bd8150861e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:df:5b:81:e2:fa:0f:ab:15:7d:e2:07:0e:
                    3b:2c:d9:4f:37:b2:24:f0:a6:4e:3e:5d:4e:d3:20:
                    46:ef:2a:4c:fc:3b:c7:da:8c:13:2c:a7:b8:f3:84:
                    69:11:22:f4:d9:88:e6:82:31:05:11:c3:da:a0:a2:
                    92:d0:96:85:f6:25:e9:8b:85:7c:ca:a5:a2:63:95:
                    d0:0d:a6:4b:2f:ee:4f:ea:c2:34:2b:79:e9:30:81:
                    2f:40:01:31:70:16:f2:ab:df:d8:9e:42:e3:72:d4:
                    18:39:ba:b9:98:0d:90:fc:94:e1:0e:9d:76:e6:ef:
                    79:0e:30:22:f3:2b:2f:45:49:70:56:d2:06:3c:ba:
                    36:92:5f:c1:ff:ab:b2:41:80:b8:ab:e9:8b:45:bd:
                    27:53:29:24:be:e3:13:94:27:d9:bd:66:ef:e1:74:
                    08:64:ad:3b:8b:51:4d:47:33:a3:9e:43:db:63:7b:
                    18:32:d4:5c:36:21:ab:56:89:ef:04:e1:e5:00:04:
                    41:c3:cb:e3:37:ea:3c:0d:33:cd:10:05:df:c4:8a:
                    a3:c6:7c:9a:d3:86:2a:fe:c6:32:d2:4a:01:a3:cc:
                    18:f2:58:4c:73:c1:8d:5c:d8:8e:8a:df:eb:8a:e1:
                    31:81:41:25:f2:10:cd:77:0c:91:1b:b7:f9:d1:c4:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:02:44:23:31:B3:86:EB:20:EF:8C:D3:54:17:59:FE:48:B9:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c55e874a-cfe5-373f-b7c1-c185b59ab2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:87:84:d9:98:17:8a:b3:30:30:62:8e:6f:5b:f3:ec:50:f8:
         37:c6:62:22:f7:0b:c4:eb:4d:b5:f2:6b:6b:47:27:19:57:8f:
         1d:4c:34:b5:43:1d:8d:07:ab:76:24:44:75:cb:9f:c2:83:55:
         04:6f:0c:d8:67:49:9f:0e:1f:07:b2:18:1f:ec:f8:eb:48:5e:
         07:bb:9e:85:74:42:e2:fc:b6:05:7f:57:56:08:a6:67:41:b2:
         cf:3a:2c:57:89:24:ba:28:ac:6c:18:2a:5b:5f:c3:5c:f2:ad:
         a9:6b:cf:3e:d6:57:2d:3e:3a:d5:b8:58:58:2e:40:ca:7b:f6:
         65:3a:e7:80:ce:35:5a:e0:24:85:5b:68:33:17:7e:0b:fe:5c:
         64:f0:13:e5:74:8a:36:19:8b:07:75:3f:e7:c8:8c:cb:4b:21:
         b7:ce:81:17:bf:d7:12:64:85:56:5b:91:f0:2f:58:89:0a:cd:
         b8:b0:0c:ed:b0:0a:3d:30:f0:85:55:48:34:b6:73:9b:56:e4:
         c3:ef:bf:24:a7:fc:65:2e:a7:26:a7:69:0e:a3:94:0c:15:d1:
         eb:bc:96:f6:b6:a8:a3:55:6c:84:c5:0d:3e:0c:a4:c6:15:96:
         f2:28:3a:27:2c:08:ee:b3:82:cf:cd:03:ee:ec:c4:10:7d:b9:
         87:e1:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:16 2024 by rpki-client on console-fra.rpki-client.org