Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa
File:                     8364f6e2-aaec-33e5-80c0-465d381b7783.roa (raw, json)
Hash identifier:          NCeLSN+TPk7b/81klZ+32HswzV3XBI9ETLa4C+ObYog=
Subject key identifier:   4B:DA:7F:66:A6:F2:31:84:CE:91:2F:AA:51:83:67:AC:10:FC:40:E8
Certificate issuer:       /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial:       010D0C9F43285844EECFFAF51A247BA8A3C0EAC0
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     6461
IP address blocks:        216.19.95.0/24 maxlen: 24
                          216.19.86.0/24 maxlen: 24
                          216.19.84.0/24 maxlen: 24
                          2620:a::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fa:f5:1a:24:7b:a8:a3:c0:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=0081d7d6-b788-4c69-a6e0-ab222574d32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:37:76:aa:3f:4d:04:29:9e:14:5a:5f:3a:
                    a2:8c:39:09:9a:95:0c:ef:6b:38:de:b6:92:aa:39:
                    8f:f9:b5:ba:8e:6d:8a:09:fc:9c:fd:24:0b:c2:80:
                    08:ec:e3:f4:bc:b2:4a:4f:26:6a:ce:fb:58:c9:7a:
                    4f:13:8e:08:e9:fb:0e:2e:c7:1b:a6:cf:d2:9d:e7:
                    25:f9:30:c6:f2:20:f4:2d:c3:aa:a2:31:d6:b5:0a:
                    e4:d6:23:44:f3:42:60:cc:99:46:c4:8c:85:ce:30:
                    cc:05:3d:58:4e:97:29:75:77:2e:08:26:43:f4:4e:
                    83:82:c0:0f:53:86:e3:75:20:b4:d6:f4:71:21:de:
                    84:2f:61:71:93:c6:83:3a:a0:82:0e:03:80:83:9a:
                    bf:36:8c:2d:f7:b0:59:14:20:c8:ce:fd:3e:f1:1a:
                    f6:95:e9:69:77:4a:94:24:84:48:70:09:3d:de:d5:
                    f5:d7:21:06:19:fc:78:44:a5:42:eb:fd:9b:63:3c:
                    72:b0:a4:fe:23:c9:ee:59:67:53:a1:b8:71:07:09:
                    de:0d:2b:33:49:82:e4:e1:e7:8d:ed:89:6e:f5:e6:
                    7a:5e:e0:10:42:8b:3c:6d:6c:e1:21:33:81:30:8d:
                    48:0c:8c:7e:72:45:62:0b:5f:c3:64:2d:be:0a:b7:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DA:7F:66:A6:F2:31:84:CE:91:2F:AA:51:83:67:AC:10:FC:40:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl

            X509v3 Authority Key Identifier:
                keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.19.84.0/24
                  216.19.86.0/24
                  216.19.95.0/24
                IPv6:
                  2620:a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:33:c5:85:82:80:b4:e8:8a:2b:b6:c7:99:60:f6:07:c8:a9:
         1b:b2:8b:50:ad:c8:61:ad:ab:f2:25:92:9e:aa:db:0e:3d:86:
         2b:b0:15:e7:ca:e9:13:f0:f1:bc:73:f7:96:30:04:b8:f5:af:
         0a:5d:cf:48:34:e3:5e:ea:cc:97:9c:49:a0:18:d0:02:4c:99:
         96:b9:ea:2f:e2:b7:9c:2c:4c:76:bc:52:91:75:d8:b4:bb:a1:
         37:62:09:ec:6a:d7:51:16:5b:f3:cb:8f:01:d0:2f:5c:95:7a:
         42:16:f1:e7:35:68:47:40:ff:81:ed:17:47:cf:57:1b:84:61:
         41:5b:8e:81:00:84:41:c7:4c:89:fa:b3:7b:da:48:b8:5e:26:
         64:b7:58:f7:90:83:74:35:a7:51:e6:bb:ed:ee:a6:d2:16:da:
         80:0f:62:4d:2f:d0:82:e7:03:2c:61:00:f7:46:e8:21:02:fe:
         97:4e:de:b9:d9:75:85:8c:e9:8d:68:6d:d4:6a:6b:67:e7:dc:
         a4:9c:31:2c:3f:33:a3:03:83:1e:b1:5d:ef:52:2c:ad:26:b0:
         ab:96:b1:59:2d:0a:51:5f:a2:6f:5e:bf:c5:35:ab:49:b6:65:
         25:ff:23:2d:82:3e:61:da:7d:bf:e4:df:9c:50:48:bf:31:e5:
         29:54:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:02:32 2024 by rpki-client on console-ams.rpki-client.org