Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa
File:                     6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa (raw, json)
Hash identifier:          F1XKjlhJ8cksJzN9KEeO1siz9nG4+JZNhAT0pLvxc/0=
Subject key identifier:   22:B7:4D:CD:9B:E1:AC:94:3C:99:2A:97:FA:ED:0B:7D:50:97:FF:65
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285845B7B3896AB0DEC6A77E815E00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     46450
IP address blocks:        64.255.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:89:6a:b0:de:c6:a7:7e:81:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=3b115b94-ab96-4265-8757-dbc4072831f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:43:13:11:59:31:1f:93:cc:ef:ef:57:f8:
                    ed:79:04:a3:54:78:2b:37:90:12:58:c5:a0:ad:0b:
                    62:52:b5:90:42:48:b8:98:e8:f9:73:8c:e4:41:14:
                    92:a3:3a:46:6d:fd:a6:5f:3a:7d:16:67:72:11:5b:
                    a1:64:58:9c:f5:eb:56:5e:c4:d9:b2:38:ce:c7:40:
                    c9:0f:37:55:ee:13:a2:83:2c:94:ac:41:20:0a:65:
                    f2:aa:5f:b5:01:f0:d8:73:f7:47:ee:23:04:f9:ac:
                    62:61:1f:8a:13:9b:fb:50:fa:39:87:84:df:18:6c:
                    21:5c:39:15:ae:58:2a:e3:da:18:12:dc:e9:23:45:
                    3a:80:b9:8c:98:ec:2d:85:2d:6f:a4:7b:64:7d:d6:
                    8b:3d:e7:cf:bb:61:f6:28:48:08:18:7d:e7:42:6c:
                    37:6c:01:67:03:b5:17:43:59:95:03:b7:34:8e:0e:
                    f5:f8:04:0d:2b:54:a4:4a:cd:02:67:69:b8:ec:f3:
                    7b:ab:b6:37:56:8c:91:66:c4:6e:cf:cb:01:ca:bc:
                    8d:4c:09:37:f1:60:f6:35:95:e2:f1:67:d6:08:71:
                    db:13:71:f4:6d:c6:0f:3f:44:b3:68:18:57:25:86:
                    d5:65:72:8a:47:96:f3:c4:8d:99:35:85:57:ac:11:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:4D:CD:9B:E1:AC:94:3C:99:2A:97:FA:ED:0B:7D:50:97:FF:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a0c7f19-051c-35df-935b-b0b7c9c6912c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:b5:30:81:4f:bf:46:8b:4e:87:64:0a:4d:9a:9a:de:17:
         08:2a:8a:f8:e1:fa:e8:8b:08:d7:4f:5c:b7:68:48:d5:68:c1:
         16:a7:e5:5b:09:11:7f:4f:43:6d:6f:a2:f0:0b:5a:68:4f:af:
         3b:b3:60:b4:31:0a:dd:53:23:85:a6:a5:b4:c2:83:97:d5:ad:
         a7:ef:fa:7a:de:4f:b8:41:25:60:9c:93:d8:e3:ce:5e:10:91:
         c0:bb:70:a6:62:b4:fd:42:ab:0c:ed:33:fe:db:f2:67:4d:54:
         ad:36:3d:d9:6b:29:db:83:38:6c:5b:fb:ac:35:c3:6b:28:11:
         33:ff:5b:8f:9d:dd:58:9f:2f:72:ff:f2:52:6e:f9:e7:55:b6:
         92:b8:93:b0:85:85:13:44:65:41:79:08:ba:5f:b1:4f:c6:1f:
         39:15:fb:d1:4c:92:30:7f:39:56:ae:09:4d:bd:28:ef:3f:9f:
         6d:2e:8a:5b:3b:56:cb:a3:7d:3f:e5:ba:9e:11:e5:fe:30:4c:
         43:07:0a:de:5b:3b:15:e6:2b:2e:3e:97:a9:b9:35:58:9e:9d:
         38:32:da:22:e4:c2:dc:fa:7e:f4:12:05:87:43:c5:b6:93:86:
         a8:f7:78:1f:20:c2:30:19:90:76:9a:bf:e4:89:1e:f9:30:b4:
         5f:07:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 06:01:20 2024 by rpki-client on console-ams.rpki-client.org