Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
File:                     9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa (raw, json)
Hash identifier:          wUnf6iCtL+NWxwouWSkAoJqvV81T1yb/hGavcMP0/Hg=
Subject key identifier:   F1:97:06:DD:C3:44:DA:5F:56:65:02:63:55:B7:AE:52:14:44:E2:C0
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F43285845F51E926513AC13E6426D46C0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     393336
IP address blocks:        64.40.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:92:65:13:ac:13:e6:42:6d:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=64acc729-436c-41bc-b636-ff90179401b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:0a:4b:e0:55:39:9e:f3:21:c2:80:2f:b6:
                    48:f4:fb:ac:33:0c:84:6a:8f:30:b3:a8:d0:77:0c:
                    e8:37:a5:f8:30:f8:eb:51:ed:ba:fc:06:5c:05:5e:
                    19:b3:6c:7c:b3:a2:15:b2:c9:18:3d:02:55:ce:67:
                    be:f6:11:56:b3:7b:ca:b3:02:3a:3a:26:f6:22:d8:
                    7d:63:b3:1d:85:1b:26:60:aa:70:7e:b4:34:cb:5c:
                    d3:42:ff:84:75:4a:28:52:0c:12:e6:04:f8:bd:8d:
                    00:01:0b:5f:11:26:71:ee:ca:a5:c0:b6:97:a3:85:
                    77:0d:4f:bd:2d:19:4e:34:4e:b2:6a:73:f5:23:e6:
                    41:9b:2d:98:1f:de:46:43:b2:3f:f0:dd:5c:bc:54:
                    ad:91:82:a1:58:eb:e9:2a:d0:13:2f:90:19:7d:75:
                    3d:88:93:6e:e6:ce:17:5d:0a:52:e5:40:21:25:21:
                    49:07:df:da:bc:da:ee:0b:16:bd:b5:26:5c:f3:15:
                    58:b3:55:df:4d:70:2f:4c:47:4c:0b:2d:37:42:38:
                    2a:ba:be:4e:10:76:0d:b8:9e:1d:db:8a:6f:fe:46:
                    20:a4:04:60:bc:3c:a9:18:b0:f2:bf:79:b7:5d:c5:
                    e3:a1:bd:37:e5:6f:26:89:13:4a:56:f0:a5:20:6e:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:97:06:DD:C3:44:DA:5F:56:65:02:63:55:B7:AE:52:14:44:E2:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:40:e3:5b:87:71:31:8d:63:22:1f:35:ab:c5:2e:fe:22:28:
         d0:6e:9a:c3:1d:4a:6d:a6:89:25:75:17:76:fc:30:f6:61:7f:
         4e:79:4b:17:68:bc:4c:20:b4:12:fb:ac:3d:db:33:ef:d8:e9:
         2e:49:5c:9a:04:b1:cb:4f:67:67:fa:a2:63:ba:9e:60:c7:fa:
         a4:06:76:b1:f5:45:a2:b7:b3:cb:20:f5:a0:2a:14:5b:1c:79:
         8b:da:dc:58:45:46:7e:be:0c:64:67:58:92:6a:f7:d8:b4:e7:
         d3:71:ad:a9:32:4c:2d:da:98:90:84:05:3e:ab:5b:16:bb:f7:
         58:23:a0:51:6a:92:55:97:ff:12:33:2b:f1:b8:51:ee:93:36:
         bc:0a:6a:b2:b8:2b:83:52:fd:2c:5a:ca:c0:15:e9:53:a4:89:
         62:6f:7f:ee:a9:22:a1:fa:8e:e8:eb:4a:3c:e5:67:5d:f2:62:
         c0:93:f2:09:8d:a2:d0:c1:0d:2b:10:f5:a6:a3:3c:4c:4f:48:
         81:16:fb:73:93:da:ab:95:ef:2f:a0:bd:69:70:5f:bb:aa:6c:
         db:65:b5:39:f5:b5:6b:81:2e:56:df:61:ba:84:5b:18:0f:ac:
         e9:2e:fb:c4:fc:90:b1:b6:86:0a:47:c7:16:a2:45:89:18:fc:
         69:8c:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:54:52 2024 by rpki-client on console-fra.rpki-client.org