Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
File:                     c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa (raw, json)
Hash identifier:          l+AnLzLSpXxbwMj3hX+Y9RRzRT7UVDIL0lKIOnNvV1I=
Subject key identifier:   A5:D3:67:49:F6:4B:A6:1D:49:4E:AD:54:21:16:47:84:50:FA:24:36
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285844EA9FEE7B83339C578FB720C0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     16509
IP address blocks:        64.69.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:ee:7b:83:33:9c:57:8f:b7:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=5d58752a-3793-4422-9239-5891eff48f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:80:70:b2:7e:4e:ce:54:14:8b:4d:8c:78:93:
                    f8:b8:e4:c6:fb:6c:d2:1c:14:e2:97:5a:3c:10:26:
                    46:39:99:6e:cc:a4:2c:3a:2a:11:26:fb:e4:9e:b1:
                    cd:19:81:08:fa:9b:e9:4b:5f:2a:ea:ba:48:aa:ef:
                    88:82:d0:27:1f:05:26:87:44:9b:33:68:9a:38:ee:
                    7a:f0:08:b7:fd:8d:00:cd:93:7d:01:1f:62:34:08:
                    4f:ab:fe:4f:ef:af:e4:1c:0d:7e:13:9b:61:c8:4e:
                    a0:b3:7b:c2:52:f9:ef:5d:e4:eb:04:f7:6f:53:90:
                    ad:7e:fa:d8:fc:47:c1:88:76:5d:0d:96:50:a0:b8:
                    58:4c:00:3a:62:be:d7:30:39:03:ff:35:06:5b:01:
                    c9:1e:2f:c3:17:9c:35:28:bd:10:c9:40:fc:5c:de:
                    14:36:9f:88:d1:9b:4e:95:72:9e:7b:ff:2d:de:45:
                    c3:16:71:31:49:c1:3a:33:33:3e:6f:7a:b4:36:09:
                    bd:d4:be:34:3d:6b:b7:f5:b3:5b:e5:92:d1:7b:59:
                    94:e5:9e:7b:d3:cd:e5:f0:47:1c:7b:57:8e:2f:f3:
                    c5:94:cc:d6:7b:4e:49:ec:60:95:3a:03:54:da:a0:
                    1d:1a:a1:81:ee:3c:46:0c:de:0d:cb:b5:55:96:17:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D3:67:49:F6:4B:A6:1D:49:4E:AD:54:21:16:47:84:50:FA:24:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c8d785d0-9453-371d-ac74-5e4bbdbc96dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:e9:09:4b:1e:40:d5:a3:2a:9d:68:cc:91:26:89:8f:1c:
         89:26:37:9e:d6:ce:96:9b:b1:8a:d4:a8:26:cf:28:9f:81:cc:
         f8:89:96:27:e9:93:ee:db:37:b0:0f:55:47:93:a3:6a:30:03:
         b2:72:2c:88:36:13:2f:bc:7c:3d:bb:39:29:75:d4:6d:66:6b:
         53:f4:e0:99:f1:a5:03:07:0f:bd:f3:1d:e0:3a:a2:68:9f:a1:
         c3:66:cd:db:db:fe:0c:34:ef:44:16:43:77:35:01:bf:83:f9:
         ed:c5:81:14:a7:3e:ca:0e:d9:89:41:31:65:ec:42:c8:23:67:
         18:a8:73:1b:e4:d4:74:61:88:e1:8b:76:8f:11:83:46:a4:1b:
         1b:17:5a:8e:b7:c4:0e:16:24:66:9d:da:30:58:69:92:17:0b:
         c5:d7:7d:eb:f8:b3:4e:61:95:9d:5d:4d:32:76:f1:db:7b:b6:
         3e:da:63:9e:4e:1c:e5:1a:7d:7e:dc:aa:8c:8f:06:ee:3d:1d:
         af:3a:73:2b:aa:e8:2c:a7:4b:c0:4d:ea:05:bb:6c:5e:e5:88:
         ed:7d:26:81:7c:69:1c:63:4c:57:93:3e:c7:85:0d:aa:92:f7:
         10:a9:d6:ed:05:90:90:ad:93:f5:62:a0:3b:81:63:03:be:55:
         11:94:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:17:14 2024 by rpki-client on console-fra.rpki-client.org