Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa
File:                     3acff935-390a-35f4-8b00-7267d2b359be.roa (raw, json)
Hash identifier:          DLcDdFidFoUvz0Rig/Cgl5a9EG7RGcEHgnnYe9FtqMs=
Subject key identifier:   44:75:35:B3:99:95:9E:65:6E:37:05:BC:5A:99:10:48:63:0E:57:7E
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285845DBFE61D1ECD47B1ACCFA3880
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     399045
IP address blocks:        64.112.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:61:d1:ec:d4:7b:1a:cc:fa:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=bd4f603a-1f1c-40fb-a168-241f09aa7a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:73:86:5f:2e:6f:e2:16:e9:af:3b:74:cb:
                    2b:67:8c:9a:2f:28:a0:54:9b:8c:56:1a:42:9e:43:
                    db:61:5c:63:43:7b:60:1b:d4:f8:38:25:58:d5:c2:
                    94:5a:4c:db:05:8d:49:ea:77:78:91:36:55:a2:fa:
                    dd:55:99:a7:24:11:96:e6:61:7e:f9:3c:a0:dd:1f:
                    4a:68:71:35:45:be:2f:7e:46:be:41:c5:2d:f0:b5:
                    6b:9e:35:15:92:57:b3:1f:7b:52:dc:76:dc:04:70:
                    38:ef:23:ba:8d:d0:90:28:99:b0:68:40:9c:36:53:
                    0d:d1:2c:3b:8e:a1:90:8b:1c:03:38:e6:dc:8d:e8:
                    14:1f:c5:07:20:cf:51:14:92:68:f3:a2:cd:cf:83:
                    86:72:81:eb:2a:7e:84:a1:76:31:c3:19:77:1a:f8:
                    21:94:86:fa:02:5b:83:aa:c9:bf:10:05:ab:2c:1f:
                    bf:b7:af:f7:2f:3a:a7:34:41:0d:7c:f0:79:8a:2e:
                    22:06:18:17:6c:a7:f3:00:3e:f2:f2:50:b2:e3:62:
                    cb:bc:ce:21:72:1c:d2:0c:6d:6e:03:68:8b:10:19:
                    22:b7:f4:2a:e8:5b:f5:76:4f:b6:a7:02:1a:a5:97:
                    e1:74:f0:d0:d7:68:33:35:07:de:73:d0:e9:5b:89:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:35:B3:99:95:9E:65:6E:37:05:BC:5A:99:10:48:63:0E:57:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e2:6a:98:3e:09:ad:91:26:8f:30:dd:ed:5b:13:2e:51:55:
         c9:7a:83:39:82:e6:0c:fa:68:e8:4b:bb:52:33:e3:25:96:86:
         f2:33:19:79:fb:0e:a9:de:ad:1c:7a:f4:af:47:fa:54:9f:75:
         b5:27:cd:19:1a:16:6e:c7:f4:6e:38:d3:98:3d:97:d6:55:01:
         1e:39:46:e0:be:75:93:d3:cc:59:94:5a:ef:db:99:a0:11:a4:
         98:1b:80:58:8a:19:19:53:ce:f1:ce:71:31:28:d6:ee:fd:12:
         e1:9c:cf:97:64:f2:ba:59:c6:59:c1:46:70:b1:ab:7d:86:3b:
         f6:73:5a:b8:9e:a4:77:fe:1d:7e:5b:22:ad:3f:42:03:57:e6:
         51:fb:16:1d:96:1b:bb:26:65:a2:97:a6:32:c6:10:f7:b2:77:
         20:3c:51:9e:cd:71:c8:bc:fc:03:83:21:97:06:c0:84:95:35:
         74:70:22:e0:ea:be:69:71:ed:13:ae:af:f0:7a:ef:a4:2e:ec:
         55:93:99:8e:02:18:c1:4a:40:e0:50:b4:ae:03:a7:1c:51:99:
         d9:ba:2c:f9:7c:f5:4f:64:db:c9:66:b1:3c:ea:e6:2d:89:99:
         b1:5c:0e:dd:10:0e:da:be:c0:5f:62:92:49:f2:c4:2a:0d:e8:
         84:79:5c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:24 2024 by rpki-client on console-fra.rpki-client.org