Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa
File:                     20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (raw, json)
Hash identifier:          0cg+QZ4V/weMONa9fDI6e4tGN273jyV9oRgTe0c+NCc=
Subject key identifier:   DB:77:F5:07:02:06:4E:FE:A5:67:48:D3:EE:3D:6A:E4:61:01:00:0A
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F43285845840DC11BC21BC920A4D18E00
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     36329
IP address blocks:        64.58.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c1:1b:c2:1b:c9:20:a4:d1:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=12408f35-3ec9-4b86-812d-e3f2890f00f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:b0:46:ce:7e:2e:0b:3e:4c:9a:d2:63:de:
                    20:84:9a:97:f3:44:3b:4e:39:e0:17:89:7a:43:18:
                    7b:25:5a:b2:3c:16:f4:20:69:6a:32:b0:66:18:a4:
                    74:ba:0f:a7:05:4b:56:f9:cf:89:db:8b:5e:6d:0b:
                    57:59:d3:5a:84:6c:2a:b8:d4:3c:80:7e:96:0f:02:
                    87:5c:dc:cb:36:e4:e6:a2:84:d7:b4:97:50:d4:4b:
                    40:9a:06:da:4a:31:61:9c:f3:ad:b6:2a:68:c1:a7:
                    88:ab:9d:7e:e5:61:8f:60:0e:59:0b:af:9c:f1:03:
                    8f:9d:e7:af:e3:e6:af:81:1d:4a:7c:70:4a:37:a8:
                    02:ec:e5:c7:4a:4e:53:1e:28:59:87:d9:40:5b:d9:
                    71:de:ac:24:5d:92:83:9f:96:c1:89:35:af:6a:17:
                    c6:b3:97:c5:ba:60:d5:6c:4e:78:93:f9:b0:cc:20:
                    3c:02:a9:64:74:65:02:54:b9:c1:f4:02:12:0d:88:
                    e5:88:f4:5b:12:e7:36:2c:be:ad:ef:32:f2:0a:e5:
                    18:26:77:85:e0:b2:79:9d:61:32:14:40:e3:2c:e4:
                    c2:3a:05:40:bf:52:bb:d7:8e:b9:bf:28:dd:a9:3b:
                    a3:71:33:89:c2:80:e2:63:15:74:70:67:8f:1d:21:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:F5:07:02:06:4E:FE:A5:67:48:D3:EE:3D:6A:E4:61:01:00:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b2:5d:f0:4d:d8:37:32:b1:7d:6c:9b:6f:55:dd:bb:51:1b:
         b5:67:fc:54:08:eb:90:86:57:ea:60:0b:f0:af:33:81:b9:37:
         71:d3:53:23:8d:2f:2e:bd:2f:9d:f6:7a:71:8e:e2:91:70:6e:
         f9:e6:90:2c:2d:a8:d3:ac:b3:15:94:ad:66:fb:3a:dc:f7:97:
         6d:b8:a8:bb:09:1c:d9:27:b0:69:fe:63:13:ff:f9:0c:ea:ad:
         68:f5:ff:84:ce:c2:88:52:6a:34:46:1c:05:8b:32:f2:84:03:
         38:e9:66:c4:20:3c:91:84:19:8a:2a:84:b2:67:48:28:50:a7:
         e7:fc:93:8d:92:44:e2:ea:bf:65:7b:67:0e:0b:ed:b4:08:ca:
         48:30:15:e1:9a:86:62:06:9b:e3:bd:dd:cd:f5:da:72:43:7c:
         e2:ce:ac:9d:b6:10:d6:f7:5a:ff:9f:64:cc:46:0f:02:ae:2c:
         c2:4d:aa:ad:90:3d:fc:f2:53:0f:a3:53:f0:fa:b5:af:ef:28:
         b0:2e:ca:46:c4:c7:34:73:1e:58:3b:2f:1e:32:a4:41:6e:9a:
         74:18:28:71:b7:91:66:21:8b:91:52:33:85:fc:87:33:9e:35:
         95:8b:ae:33:31:8b:62:27:77:8c:ac:8d:ea:da:4b:1a:e1:43:
         d5:41:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:39 2024 by rpki-client on console-fra.rpki-client.org