Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/ae827ff5-9bf4-33a2-ae08-957d4cd146c4.roa
File:                     ae827ff5-9bf4-33a2-ae08-957d4cd146c4.roa (raw, json)
Hash identifier:          VpAVlOh2RqfEs1CxsSlD0RRLQ3o0Ra2S+AwRG3v24dg=
Subject key identifier:   E1:03:B3:06:5E:9C:D2:09:63:9E:7E:55:7C:8E:F2:82:79:64:AE:E4
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F43285845095572ABC0C7B0E147F3FA00
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/ae827ff5-9bf4-33a2-ae08-957d4cd146c4.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     1239
IP address blocks:        64.84.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:72:ab:c0:c7:b0:e1:47:f3:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=ffff68bf-9bc0-4df0-b1a2-88d6e0889d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:8f:b2:9d:e4:76:30:22:16:fe:05:c3:ba:
                    b0:1c:a9:f9:64:ae:ff:b7:aa:49:6b:76:bb:7f:3b:
                    56:b5:db:92:48:0e:df:1e:5f:1e:4b:b3:f2:8f:2c:
                    44:e0:c0:b6:12:56:f0:b1:37:5e:a2:87:0a:1f:47:
                    d2:99:dc:f1:dd:d6:52:e8:a8:4f:0f:bb:ce:eb:3a:
                    0d:ce:db:aa:8c:95:eb:c0:e4:6b:d8:f1:e1:b5:49:
                    08:23:c7:1a:21:46:a2:07:52:f6:b5:be:1a:4e:fb:
                    b9:18:e5:39:e9:41:6d:45:d7:3e:03:f2:18:f1:60:
                    27:0c:5d:35:24:9f:fb:7a:df:2b:7d:5e:09:68:d7:
                    f1:ac:cb:91:15:a4:5a:75:39:30:76:83:3e:b7:ed:
                    6c:c3:d4:ba:ee:28:50:95:78:7d:e9:f0:f9:c1:6a:
                    79:37:43:ad:92:f3:4a:60:44:c2:ea:88:89:56:9f:
                    49:16:27:b7:87:6d:75:c6:4d:82:e8:f0:ee:38:c5:
                    a8:dc:28:cd:82:70:fc:91:45:52:da:94:e2:fc:3a:
                    dc:44:88:ea:a2:18:1c:bf:35:77:6c:3f:8a:17:bc:
                    88:37:ee:ed:c1:43:d0:e5:79:29:17:1b:76:f0:a6:
                    8f:03:78:65:93:c0:05:8e:41:f3:33:1a:81:91:e0:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:B3:06:5E:9C:D2:09:63:9E:7E:55:7C:8E:F2:82:79:64:AE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/ae827ff5-9bf4-33a2-ae08-957d4cd146c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:e3:8b:11:06:2c:86:27:b0:b3:94:12:16:e0:96:26:a6:
         e7:42:f7:1b:d4:e3:0c:1e:2b:9a:3e:37:f4:11:de:74:a0:ee:
         0f:36:10:e4:82:31:c8:54:ad:b2:55:d5:fa:ec:e3:b1:37:26:
         58:9e:db:94:a9:d0:64:7c:48:8a:b6:90:10:11:7a:9a:f7:26:
         bf:ea:15:07:65:99:b4:f8:13:2c:34:e7:ed:73:6e:f2:c8:75:
         d9:fe:46:ab:fa:6a:fb:97:58:0d:85:23:08:8c:92:ec:e5:cc:
         b2:cd:30:88:0a:0d:0e:e9:0c:04:2f:7f:45:73:5d:44:6e:6d:
         74:45:85:fd:7c:ad:40:cf:bf:3e:1a:32:e1:7b:20:a9:82:b6:
         16:9a:fa:50:b1:e5:87:56:b1:50:73:5d:58:ab:80:a5:bc:35:
         f4:db:bb:3d:a4:66:3c:89:44:cc:71:f8:6c:39:17:b5:a5:16:
         33:1c:f8:ff:34:c3:7d:4b:8f:ca:ef:36:a1:91:c3:61:bd:51:
         7e:56:4d:a7:d8:a6:f2:52:2c:fb:73:d1:79:0b:6e:2b:87:76:
         5e:0f:42:e5:a5:93:ae:98:4c:be:23:2a:71:a4:f3:fb:dd:42:
         76:10:bc:e6:53:59:16:0a:3c:09:57:b4:e8:8f:5e:6c:d1:1b:
         0f:94:8d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:40:47 2024 by rpki-client on console-fra.rpki-client.org