Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa
File:                     8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa (raw, json)
Hash identifier:          KY3h9SW+v+NHmP+tBx7Ve4tot8rkzBaG8WjLDOxMp2E=
Subject key identifier:   38:DE:93:97:F6:FD:E9:0F:78:59:48:DF:29:49:01:54:DC:C5:F5:2D
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584582A88B94F438E058FDDFFB00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     63062
IP address blocks:        67.44.64.0/22 maxlen: 22
                          67.44.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8b:94:f4:38:e0:58:fd:df:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=63018e32-933c-43b7-aa8b-9dcca83afdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9e:97:b7:94:89:88:f7:7d:3f:99:43:d9:3a:
                    86:2b:40:56:a4:6b:b6:90:0a:7c:80:01:30:bc:9c:
                    60:46:2f:68:a2:d4:d3:f4:fd:7c:7b:d8:d3:1d:ff:
                    f8:a5:a5:0d:4f:1a:aa:b9:50:70:dd:3d:da:1f:22:
                    d1:f4:7b:52:c6:27:39:a8:f1:cb:33:b0:7c:67:77:
                    71:a9:7f:0e:fd:81:7e:b5:a0:75:89:f6:45:04:43:
                    3b:65:aa:18:02:03:a1:18:12:c3:7e:56:6c:0c:28:
                    76:74:13:28:97:d2:49:92:46:54:6b:53:bd:ee:76:
                    75:86:b6:6a:a3:fe:28:77:94:bb:b7:82:c9:15:a2:
                    31:28:e0:1b:0c:d1:bc:dc:2d:80:bf:15:ec:83:e4:
                    8f:b8:0e:7c:23:a3:c9:cd:1f:88:2d:05:8e:de:47:
                    7f:eb:34:12:97:8b:13:f4:78:8f:62:de:d2:ae:26:
                    9c:8d:6d:f8:b1:ca:fe:77:3f:09:e5:ea:ba:1b:4e:
                    18:38:e7:de:60:5f:df:ae:c8:65:26:d3:8f:5b:79:
                    f8:e2:8f:50:41:86:bd:07:1c:76:6f:99:1b:17:95:
                    74:73:75:06:9c:2a:48:f0:13:8d:ab:db:67:b7:fb:
                    24:35:da:34:7e:66:2c:9a:9c:a8:d9:7d:4a:d5:33:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:93:97:F6:FD:E9:0F:78:59:48:DF:29:49:01:54:DC:C5:F5:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8820b3dc-fe9e-3279-adf3-ba53538e1bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.64.0/22
                  67.44.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:a4:42:b3:6a:90:e8:8d:4f:98:59:6f:53:1f:7d:db:7d:
         9b:95:92:5c:84:97:a6:a2:e8:83:c2:3d:f0:ae:42:0e:ca:f4:
         2e:8e:7e:10:fa:d5:29:dc:a3:f6:84:a6:68:d6:fa:26:10:7e:
         c4:cf:78:27:69:42:94:82:fd:2a:2c:bb:c5:04:11:36:e7:3e:
         e1:c0:22:9c:97:6b:ce:e9:04:86:6b:94:29:a7:4b:c0:9d:67:
         ea:20:1c:ba:bb:d0:03:43:01:55:22:ba:0f:b5:ba:15:b8:9d:
         45:10:22:35:ba:f5:fd:9e:69:e8:83:33:88:ad:a0:89:42:3a:
         d7:9e:3b:42:87:cb:f4:eb:34:ec:90:2b:6d:0e:5e:a1:6d:4d:
         0d:af:04:a2:88:a7:23:88:cd:d6:44:04:49:1e:67:b7:5f:52:
         e4:d6:7f:33:3c:71:f7:8d:c8:a6:e3:db:5e:95:a0:b3:62:45:
         c4:9d:9a:2d:2a:fe:e2:53:ec:a1:b2:3a:04:df:c2:9b:d7:a5:
         72:91:77:1b:04:93:19:2a:0d:94:75:4e:6e:b6:17:9a:43:9c:
         94:93:76:ed:36:86:13:2b:16:d5:aa:4f:a7:a2:e2:94:f8:96:
         fe:de:c3:7f:90:5d:af:e3:2c:d1:37:89:60:e6:59:cc:47:8a:
         b7:49:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:58 2024 by rpki-client on console-ams.rpki-client.org