Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa
File:                     36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa (raw, json)
Hash identifier:          NOa6MWNxffJTBmC38s+gRTQVzL0g69Gs8EH5hERI9vw=
Subject key identifier:   1F:31:D8:03:09:C0:95:A1:52:89:5B:5A:CC:CB:13:D5:5C:79:4A:1E
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F43285845777DCC43E1230A2E259DF500
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     21734
IP address blocks:        64.95.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:cc:43:e1:23:0a:2e:25:9d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=d1ab534a-1988-4f67-b3b9-874974f59341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:a9:e0:f9:06:25:85:f3:df:44:c2:0b:15:
                    08:a1:94:76:78:08:07:69:0e:6a:c2:45:d6:21:2a:
                    b0:ed:ae:55:17:65:0f:74:75:6e:dc:ed:3c:e9:dc:
                    f2:1f:d1:a9:29:55:44:c7:0a:26:26:60:b7:25:20:
                    95:df:a3:f3:28:9a:3d:05:d7:9f:86:47:6b:1b:3d:
                    2e:96:05:2d:45:9b:ea:b1:77:6e:ad:5c:a1:9c:4b:
                    b9:7e:5d:cd:fc:f3:25:e6:aa:05:b7:4d:f4:92:0d:
                    72:1b:0d:36:5f:8c:37:88:df:bb:3d:66:a3:d9:fd:
                    11:7d:80:75:a1:6f:4f:64:25:33:2f:a1:76:1b:21:
                    d2:72:b7:91:1c:4f:8d:dd:de:d0:ee:7d:e2:fe:42:
                    7a:75:d1:87:78:82:2b:71:e9:dc:a8:83:23:52:0c:
                    04:ef:71:55:33:76:46:0c:62:4d:61:2d:ac:5e:be:
                    9a:9e:f3:05:e7:e8:b0:6f:ae:dc:10:e8:3f:e2:da:
                    02:d1:52:3a:78:b7:18:93:09:c1:24:08:3e:fb:5b:
                    ae:1d:6a:cb:da:f3:da:26:94:82:e0:53:e0:9b:74:
                    0a:ef:f4:08:9d:8d:db:d7:9b:3e:5f:e0:8c:c8:49:
                    38:4d:47:a2:46:24:35:3c:31:c2:26:d4:b1:10:55:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:31:D8:03:09:C0:95:A1:52:89:5B:5A:CC:CB:13:D5:5C:79:4A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/36e2d862-b69a-380e-9bcf-5feb88b2e3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:96:73:e0:66:ec:25:47:67:76:5e:20:ea:41:20:c1:4c:
         7a:90:6e:7e:19:05:2a:64:1f:86:d8:39:fe:a3:01:05:c6:66:
         53:64:ee:e5:df:70:fd:73:f9:bd:0a:ff:eb:3b:d7:25:ed:ee:
         52:7d:0c:ca:af:9f:1b:46:81:1c:86:2c:82:0b:64:29:cf:8b:
         30:88:e4:88:81:26:ea:70:42:68:3a:69:0d:52:18:97:cb:e9:
         cf:10:e9:51:95:0b:20:95:65:74:ff:df:6e:d4:0b:e8:8c:31:
         48:85:09:c3:4f:8f:3c:e7:f9:5c:21:ad:26:5c:f6:68:23:10:
         7d:72:d0:bd:29:b5:57:81:da:13:28:e4:ca:17:7d:34:9a:1a:
         c5:be:14:05:1d:85:10:2a:57:5b:c3:c0:ec:3c:d3:32:31:82:
         76:67:20:a1:32:5e:0c:d3:a6:c8:85:f5:71:6d:b9:f0:e6:9e:
         3e:2d:4e:ae:6a:5d:aa:db:85:0e:8a:ce:a4:8d:c8:7f:a8:2d:
         7a:83:9b:75:9e:80:67:90:7b:a6:f5:8e:e2:07:71:13:50:80:
         d9:19:5f:04:15:cd:0f:74:01:85:fe:8a:05:e1:41:00:3e:c6:
         6b:e7:74:92:6f:c2:01:9f:53:98:db:96:94:af:68:51:dc:2d:
         ce:3b:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org