Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
File:                     a87435cf-a6f2-3201-8a93-631966f582c4.roa (raw, json)
Hash identifier:          fGIu0zAEnRg3VH+zcRVrNdv3ThOEwoG9acOZ/tzNEdo=
Subject key identifier:   4D:23:55:78:A8:48:09:68:00:08:B2:33:0E:9C:6F:D4:62:3B:83:25
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858457A486B3B234C83E265999480
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        134.224.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6b:3b:23:4c:83:e2:65:99:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=f7f56e0a-570b-424c-a7e4-a52038d55c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:85:3e:e7:a5:ff:5f:5c:1d:56:35:d9:62:
                    40:fb:4a:b8:43:bf:66:22:0c:17:de:f6:ee:e1:cd:
                    b1:fa:0e:2b:8a:6f:9a:3a:ac:bf:b5:6c:7f:a3:c9:
                    9d:8d:5c:04:5c:04:0a:79:95:fd:32:96:e5:5b:3c:
                    23:e3:c8:c7:f1:76:ba:d8:0b:16:34:9d:b7:a8:09:
                    94:ad:31:3c:c3:3b:09:24:48:60:76:58:d1:9f:f8:
                    84:ee:b4:4a:80:aa:a5:d4:c4:b1:67:96:18:b3:04:
                    ac:07:6f:ad:74:47:4b:8a:4a:c2:b4:0b:e0:ad:7d:
                    b0:a3:85:98:e7:63:b3:e4:ce:c5:87:35:a8:42:84:
                    a8:2f:9b:ca:ba:7a:34:e0:d9:89:5e:ed:5a:4e:f7:
                    56:99:bc:17:aa:9f:98:24:47:91:e1:ad:ee:ce:13:
                    37:1d:61:68:ba:99:33:a5:1a:e7:89:d6:19:2b:84:
                    d6:77:1b:81:69:fe:80:1e:5e:b2:51:d4:0c:82:46:
                    7f:11:ef:1c:54:d4:6f:8a:bb:a7:47:e2:cc:8e:91:
                    1e:95:a3:e1:b0:e8:3a:d0:a9:03:bb:d4:22:35:e1:
                    78:1d:3e:74:6c:f3:e8:e5:fe:35:df:04:e7:d3:16:
                    f6:6e:a6:94:c9:68:a5:86:1b:04:cb:8b:92:f7:b5:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:23:55:78:A8:48:09:68:00:08:B2:33:0E:9C:6F:D4:62:3B:83:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:7f:4c:dd:53:86:3a:92:0b:da:cb:d5:93:ca:b0:d3:e7:
         04:9d:3c:e8:7b:56:71:7d:43:a8:35:9d:0c:87:cc:09:50:9d:
         ed:0a:8a:b1:fc:4b:37:97:cd:39:d9:0c:e9:92:7a:71:eb:a3:
         fb:20:41:16:54:01:23:d3:46:2e:57:22:e8:b9:01:f8:2b:da:
         6c:cc:f8:0a:43:56:11:3c:f3:d6:08:2b:a6:e4:0d:64:48:2a:
         45:99:09:46:c7:ed:64:a0:4c:75:3c:53:42:34:e2:9b:a1:4c:
         c5:85:02:37:79:9a:a6:fb:71:3f:5b:32:42:e2:03:18:c3:e9:
         98:39:c7:35:96:d3:bd:b4:6f:28:02:59:24:92:d9:f0:8a:b0:
         c4:ba:a8:31:ad:8d:37:e3:3b:e3:cd:49:1b:34:d5:cc:56:ba:
         c2:fb:e7:9b:03:5d:bf:ef:dc:e6:3f:4f:41:da:ca:6f:ee:cf:
         0c:97:e6:20:5e:e9:eb:c7:1e:32:7d:d4:ab:b4:df:f6:31:c6:
         a2:e4:0d:b3:3b:10:20:b5:43:32:e8:9a:7d:eb:d7:e0:b7:0d:
         57:08:3e:6d:b4:4b:46:68:ff:21:44:ef:81:1e:65:f9:6e:e9:
         46:2f:5a:22:bf:4b:b2:65:0f:75:69:ec:81:43:a7:21:96:a3:
         b9:66:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:09 2024 by rpki-client on console-ams.rpki-client.org