Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa
File:                     ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa (raw, json)
Hash identifier:          4fQbYZhecC5DTLjJSHr4Hoz9HocdVqfPwiq5rdUIgtU=
Subject key identifier:   63:EC:77:93:EE:35:59:9F:11:E5:59:1C:04:C2:1D:B4:EF:34:18:D7
Certificate issuer:       /CN=9e246efa-84c5-416a-bc6c-a7163432845f
Certificate serial:       010D0C9F4328584582A8915F07F7D4E50F015D60
Authority key identifier: 6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     2914
IP address blocks:        64.93.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:91:5f:07:f7:d4:e5:0f:01:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e246efa-84c5-416a-bc6c-a7163432845f
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=3c1d96f8-3a34-4e36-ad93-1fa676e5d060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:b8:c7:a6:da:0a:40:b3:30:02:8f:f3:1c:
                    59:d3:4f:ca:ac:56:d3:eb:33:15:4b:3f:c3:0b:ee:
                    16:19:72:99:19:26:e9:9f:21:88:d6:91:b7:1d:d2:
                    54:0f:b0:f0:1a:99:46:73:86:21:fa:83:4b:9f:1e:
                    dc:ac:6f:69:ff:ea:b3:e7:56:6e:fe:d1:41:86:3f:
                    21:70:a8:92:cc:d6:52:be:83:8c:3c:4b:1d:cb:f2:
                    eb:04:0f:40:53:ad:ec:e7:89:63:7e:25:24:7e:95:
                    4f:f6:e4:94:43:90:cc:14:a7:35:2b:9a:7b:a4:c9:
                    b7:b8:68:24:7e:5d:de:c0:5b:2a:69:fa:29:95:47:
                    fe:9a:96:64:b2:34:59:91:c5:75:6c:f6:bc:98:3a:
                    23:ca:84:3c:12:c9:cd:23:71:dd:d9:d7:6b:c5:42:
                    ff:3f:7f:c4:2b:5d:61:72:eb:62:b0:2c:5c:2d:e7:
                    e6:16:22:ac:e8:cd:ab:55:62:a5:1d:60:5c:bb:fd:
                    84:d1:ed:51:3c:75:7c:95:e7:99:84:1b:45:ca:83:
                    1b:83:db:03:a1:64:70:d8:92:5c:62:3d:d2:94:d6:
                    37:24:dd:d3:f2:07:9b:11:1e:40:12:1a:40:fd:94:
                    dd:fc:36:64:d3:1f:18:6c:53:fb:94:b7:19:9d:84:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EC:77:93:EE:35:59:9F:11:E5:59:1C:04:C2:1D:B4:EF:34:18:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:e5:6f:62:96:05:22:6a:2a:f8:23:e1:3b:ac:58:b9:69:
         b6:56:3f:9f:65:28:5b:bb:4a:10:b0:39:8c:5a:e1:8a:d6:b2:
         7d:1e:54:fb:1e:aa:c4:c5:d9:d9:29:00:67:09:35:d0:26:9a:
         12:ec:e7:9e:35:e4:f0:67:77:69:10:6e:3c:2c:a7:8e:15:99:
         70:e0:25:40:30:33:c6:fe:88:62:09:28:81:3a:01:0d:03:de:
         a5:45:b7:f2:4f:60:c8:4a:0a:23:d4:8e:00:22:27:92:8f:cb:
         80:51:3f:01:21:1d:5a:fe:3d:40:9e:e0:bf:0a:6e:f6:68:95:
         2c:f3:d9:dd:19:df:73:4e:e5:3f:a0:df:e4:f6:a1:cc:e5:17:
         21:de:3c:36:8f:77:79:7e:56:ec:ed:f9:90:32:04:7c:82:e6:
         d0:97:49:29:9b:f2:6d:d7:4d:f2:56:bd:9f:a4:7b:65:d1:e9:
         b6:69:47:05:86:5f:9c:9d:50:b7:d1:30:09:6e:c6:1e:7f:a0:
         4b:ec:59:40:72:71:87:5b:0c:96:af:2f:b4:d6:51:0d:32:35:
         60:8b:8b:4d:56:09:29:c5:22:02:61:17:78:75:53:af:1f:10:
         78:b2:be:6c:1a:47:69:ab:e7:1d:78:06:41:7c:a2:00:0f:69:
         a3:00:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:57:07 2024 by rpki-client on console-ams.rpki-client.org