Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e1a96e2f-5ca9-3ad6-afd1-d93a6634b9d2.roa
File:                     e1a96e2f-5ca9-3ad6-afd1-d93a6634b9d2.roa (raw, json)
Hash identifier:          1g4tf5VTsReFG1G98pb1sfL10SLyIVt65TdL61IO1Zg=
Subject key identifier:   F8:D6:B0:E8:6A:5D:C1:4B:9C:60:CA:11:CE:3F:22:03:27:0A:6E:A6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B352AC6B006BE901CE4400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e1a96e2f-5ca9-3ad6-afd1-d93a6634b9d2.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        76.64.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:52:ac:6b:00:6b:e9:01:ce:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=aa5adb9f-d938-4c08-9abb-69524185e0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:eb:85:b5:c4:70:3f:c7:eb:ab:c8:30:80:
                    33:76:ca:fa:44:0d:80:93:00:c9:42:72:35:ea:7c:
                    f1:fb:7c:4d:f4:2a:dc:d1:59:b8:39:34:5b:5b:cc:
                    12:22:ca:8f:5e:c2:5e:13:b3:fb:db:a4:5d:e6:4d:
                    e8:3f:76:4f:39:a8:cd:8f:3b:c2:b5:e6:17:9d:ef:
                    16:68:18:4e:95:be:7d:b3:bb:73:3d:29:e8:5e:64:
                    1f:f5:69:ac:da:c3:e9:54:7e:bc:b6:5a:3a:f8:19:
                    8b:c7:d2:fd:27:15:9c:c6:80:00:9e:d4:97:86:09:
                    86:ce:f1:04:78:7d:c3:70:c6:a1:9e:f1:63:0d:03:
                    fc:29:14:76:d4:dc:e9:1b:df:04:67:9c:96:b4:b1:
                    b7:b2:53:c0:d0:4a:6d:a6:ff:0d:b2:17:6b:d6:8b:
                    dc:d8:42:85:cb:61:f7:4c:98:0f:54:d5:8a:06:44:
                    74:e8:2d:f7:d0:3e:f2:38:71:10:e6:19:44:62:e2:
                    d5:45:20:e8:ce:33:3b:f4:56:e4:64:66:e1:8a:54:
                    07:d2:de:03:66:94:ed:d4:e8:df:3b:bf:85:db:ad:
                    93:21:a4:a5:87:1d:e2:98:2f:6a:f2:1e:bd:8e:a9:
                    be:d5:cb:73:f1:af:46:25:b9:15:ba:3b:7c:58:63:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D6:B0:E8:6A:5D:C1:4B:9C:60:CA:11:CE:3F:22:03:27:0A:6E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e1a96e2f-5ca9-3ad6-afd1-d93a6634b9d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:cd:e1:9f:10:3d:94:4e:e3:d6:83:3e:8a:87:b8:f7:64:9b:
         60:39:c7:5a:de:40:d4:9c:58:e1:8f:41:c4:31:08:55:e0:d0:
         b4:89:22:a1:ec:fd:5b:cf:83:a2:ed:09:cb:34:68:12:5c:77:
         13:f0:e3:12:f9:c1:89:6f:17:bd:38:da:95:34:20:62:2c:c7:
         82:58:e3:dd:75:7f:a3:d7:a9:31:54:52:7a:2e:ee:06:7b:ad:
         d3:eb:b6:27:7d:15:39:04:44:30:df:a0:b1:92:24:a2:06:5c:
         16:95:b4:79:89:a2:ac:01:b4:d2:6b:47:c9:3d:f1:d1:77:bc:
         96:25:dd:86:f9:4b:1c:9f:2b:42:41:1a:20:5a:17:56:34:6e:
         02:8e:23:ba:57:51:79:bc:4a:04:82:1d:7f:7d:87:7b:51:e5:
         82:4b:d2:b9:05:4c:56:f0:4c:4c:a0:ae:9b:70:4d:7c:89:e0:
         cb:8e:2e:b4:6d:96:15:e4:5b:da:ca:1f:92:16:ee:ab:55:dd:
         a9:6c:f4:22:d9:53:1a:b3:1d:c8:ab:ec:33:b1:62:f7:99:e3:
         af:6d:62:cf:6b:65:b9:e5:89:a8:c6:33:45:f0:ec:2a:4b:9b:
         90:b2:81:24:57:23:a6:33:88:fc:b2:fa:99:88:3d:11:58:92:
         d7:15:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:51 2024 by rpki-client on console-ams.rpki-client.org