Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa
File:                     c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa (raw, json)
Hash identifier:          6Yce1GmIAFEA2xdINRgvhnOdUKh72TFWjBx1JzKsLIQ=
Subject key identifier:   E5:5D:1B:EB:FB:AD:92:69:22:E7:EC:08:06:C8:7F:AE:AA:4A:C0:A3
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285844EA9FEE9247E133EFF92E59C0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     14618
IP address blocks:        64.69.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:ee:92:47:e1:33:ef:f9:2e:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=d165ba56-6107-4c48-b98d-9a11e8ba5a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:b1:ff:8c:a9:8d:0d:fd:9f:bf:f6:eb:ae:
                    82:e4:23:a2:5a:25:dc:9d:3f:6d:6c:fa:0a:54:f0:
                    85:bf:7f:12:5a:e9:05:8b:07:19:23:e5:c5:90:d1:
                    e9:81:ec:1e:93:ce:e0:dd:b0:9d:03:8e:2a:61:fd:
                    8e:8c:c9:65:fa:c2:27:84:40:df:13:a9:5c:21:10:
                    59:c7:36:86:0b:e3:36:2c:54:d2:12:15:98:95:d0:
                    f1:21:ee:c9:2a:71:c6:65:99:f5:63:aa:84:7a:c7:
                    f8:f7:a4:3e:34:e0:5f:87:d5:72:b5:cd:b5:32:3c:
                    6a:59:d0:16:33:69:cf:58:fe:d8:f6:f5:06:c3:fd:
                    74:55:f6:58:68:eb:1b:89:6a:68:cf:3e:bf:64:97:
                    54:1b:b4:be:d8:49:3c:ac:15:d2:12:73:f4:1c:8d:
                    8e:2c:1d:fd:25:b4:c7:a6:a5:53:b0:73:3d:d6:2d:
                    2e:87:c5:8e:98:78:0c:29:22:c5:59:f8:45:a1:e7:
                    c6:ab:d4:db:4e:e2:11:98:0f:5b:83:cc:39:37:a7:
                    b0:ac:07:94:aa:2f:8f:d0:ff:57:97:3d:dc:8a:f4:
                    00:2e:83:cb:ca:75:71:d9:ec:8b:19:ca:88:4c:f7:
                    8b:e5:c7:f5:57:31:b7:43:55:93:99:a6:71:11:7f:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5D:1B:EB:FB:AD:92:69:22:E7:EC:08:06:C8:7F:AE:AA:4A:C0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:6d:5e:90:38:8f:fd:06:de:c0:b5:29:2c:63:a4:b8:9a:
         d2:c3:7e:c2:f0:06:92:12:0b:86:ab:da:48:66:46:a4:18:e0:
         22:4b:82:6d:c5:df:b6:95:ad:96:ed:68:a6:64:99:ae:80:68:
         81:6c:b4:c9:c2:fe:5f:ae:9d:ab:cd:fc:76:a5:36:a8:69:8c:
         94:7b:41:1a:29:76:5f:06:36:25:58:3d:6d:ad:0a:71:c9:ff:
         5f:0a:aa:75:7e:25:34:cb:cf:1d:26:91:f4:94:ee:8f:04:21:
         2b:b8:6c:21:b7:d7:74:48:0a:3a:7f:87:b5:83:40:b2:92:c7:
         ad:2a:b8:ac:d1:5b:6f:ca:55:66:a3:c4:f6:2f:08:aa:8e:59:
         ca:5d:9d:70:1b:9c:9c:51:1a:01:d6:db:79:67:c0:77:34:63:
         ac:5f:cf:64:96:51:54:9a:32:68:88:98:e4:87:91:dd:7e:aa:
         be:c4:8b:c5:da:87:7b:04:1d:14:0e:f2:fd:0b:b3:17:e0:2a:
         86:6d:f2:18:d8:19:64:61:71:d0:04:0e:7d:5f:f2:5e:34:66:
         37:36:49:7a:02:ad:da:d8:a2:dd:6d:97:e1:c5:dd:c8:d0:d3:
         ac:1c:f1:42:ea:86:36:91:27:d9:aa:b9:9b:d3:ce:72:ad:30:
         b3:c8:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:58 2024 by rpki-client on console-fra.rpki-client.org