Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/3db5303c-2046-3381-ae82-3790929b1c77.roa
File:                     3db5303c-2046-3381-ae82-3790929b1c77.roa (raw, json)
Hash identifier:          n0TxTWEvwje+lpqOcfFvAfquxGFv3teYEno2k/hQLuA=
Subject key identifier:   20:EE:E6:DC:D9:4F:B4:32:38:27:E5:48:AC:91:8D:D1:C1:7D:A8:34
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F4328584558C83C1BAF5721F09719D200
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/3db5303c-2046-3381-ae82-3790929b1c77.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     396982
IP address blocks:        64.69.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:3c:1b:af:57:21:f0:97:19:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=1c507d02-a7b7-40f6-8f94-f0a8994062c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:63:40:ad:a3:28:07:78:b8:5e:8c:02:f9:
                    48:f4:1e:6a:9a:71:3e:e9:5d:c3:e1:38:d0:ca:f2:
                    69:cc:e5:60:fd:33:6c:93:0f:30:3d:7d:25:3c:9b:
                    11:89:d3:73:00:8a:74:dd:fe:c0:4e:5a:44:51:39:
                    8f:06:98:8b:64:62:f0:c2:ea:c5:a7:9c:32:32:67:
                    ca:d6:02:a9:08:23:60:77:f7:7f:ca:42:c8:d8:c9:
                    f2:f0:58:53:98:8d:a2:49:27:32:d5:a4:af:df:f5:
                    fb:26:56:64:9a:ff:80:11:4b:07:a1:e8:5d:76:22:
                    be:21:4f:7e:62:87:30:b5:e8:e5:12:93:13:38:89:
                    ba:8d:6a:16:28:0b:8b:d7:4e:bc:53:fd:97:57:4f:
                    4b:72:59:09:88:ae:55:d3:cd:30:6f:44:7e:3e:af:
                    48:7d:62:88:fa:d9:f8:10:51:93:95:44:ac:91:32:
                    78:96:47:42:a4:5e:8a:dc:d2:25:b9:b7:6c:67:20:
                    fb:5b:56:cb:0a:2e:a9:05:b6:70:93:dc:da:b9:8f:
                    56:16:cf:fc:2f:5e:35:25:5e:05:09:c9:0e:dd:4c:
                    8d:88:e9:f3:dc:ca:15:bd:c8:fb:38:39:c8:ed:95:
                    a7:1a:a5:53:3e:3f:b8:3d:04:91:f1:27:d5:b9:60:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:E6:DC:D9:4F:B4:32:38:27:E5:48:AC:91:8D:D1:C1:7D:A8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/3db5303c-2046-3381-ae82-3790929b1c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:eb:28:7d:3f:69:9e:2a:ff:66:54:d2:52:e0:f7:66:d8:23:
         03:d4:f6:a0:ab:b0:89:cb:d3:ff:04:2a:34:42:4f:64:86:a4:
         4f:ca:70:ea:7e:71:3c:09:f5:08:48:27:be:f6:b7:ab:25:25:
         bd:fa:7b:27:d4:08:59:2c:47:0c:e6:1e:74:01:8f:e8:87:ce:
         0d:09:40:c4:4d:72:65:89:6e:37:58:02:d5:18:d9:4d:54:30:
         58:c2:d2:07:72:b7:69:c7:cc:92:67:7e:44:4a:96:cd:e2:35:
         4b:d1:c0:f8:5f:ff:76:49:f3:c5:55:65:6e:34:82:2c:8a:b4:
         c1:33:6c:16:01:83:fc:94:ca:fc:02:3d:f7:41:94:cd:67:aa:
         54:2a:70:41:92:0d:44:ea:06:e9:42:4a:3f:f0:62:4a:03:1a:
         53:58:a2:f6:12:50:17:59:4c:94:e0:d0:32:27:ab:47:17:8a:
         8a:ef:1c:e0:2b:4d:09:bd:1b:59:98:c2:67:95:0a:b4:45:0c:
         09:02:c2:0e:fb:9c:44:54:4a:f1:58:dc:4e:85:36:f7:e8:b6:
         fe:e7:b7:69:54:77:55:0f:cf:bb:0e:74:af:28:9b:04:f0:19:
         76:fe:ee:83:85:3c:90:d8:be:fb:fe:92:95:33:5d:e0:59:df:
         99:35:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:04 2024 by rpki-client on console-fra.rpki-client.org