Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5116022b-eb5c-3be5-8c97-5eff6490e8c3.roa
File:                     5116022b-eb5c-3be5-8c97-5eff6490e8c3.roa (raw, json)
Hash identifier:          2fPoQ68TnV0oIGgG8xWDocJ8f97K/nL/5U6lTInaMKc=
Subject key identifier:   91:92:83:57:90:86:B7:48:3B:D9:71:9E:E1:94:11:F6:0A:E8:8D:AE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B2F91BB5BCEF67A148EB40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5116022b-eb5c-3be5-8c97-5eff6490e8c3.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     10965
IP address blocks:        64.4.90.208/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b2:f9:1b:b5:bc:ef:67:a1:48:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=33653cee-fbb2-4de3-bdce-e074195efea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:75:44:cf:2f:f7:42:59:60:60:22:18:a1:
                    75:8d:fc:78:cc:8d:87:cd:42:a8:2a:f9:ea:fa:c9:
                    4a:3c:e2:da:13:0d:67:c1:71:a8:26:29:46:6d:24:
                    5d:92:26:c3:29:fc:12:91:34:9b:51:6e:29:9e:f2:
                    b6:2b:3b:fb:72:2a:6f:aa:50:c9:ed:37:6b:79:7f:
                    a1:de:49:c3:79:86:85:5b:2b:c5:79:c7:07:da:64:
                    e3:6a:51:bc:e1:af:7e:04:c8:eb:a3:5d:7e:d6:0b:
                    1c:99:f8:50:bd:b2:de:dd:64:00:c3:fa:0d:a7:2f:
                    8e:58:50:a5:5e:75:a2:ab:8e:bd:3c:40:17:22:e3:
                    34:93:a8:d4:30:70:f5:aa:85:16:91:e4:3e:96:8f:
                    a4:6b:72:51:71:d6:8a:9f:64:99:df:b9:6e:e2:39:
                    75:5c:6c:6f:74:d4:3d:39:0c:79:89:e2:2a:ef:0b:
                    d3:75:a0:88:0c:4c:24:b8:6f:2f:76:0c:c8:18:03:
                    4b:56:f2:a0:50:f7:93:10:82:d7:f6:73:28:4a:27:
                    15:9d:7d:14:7f:d4:4b:67:32:04:6f:9b:f5:4f:78:
                    a7:22:3f:ee:a0:f3:40:b2:99:9b:f7:e0:49:4a:3c:
                    9e:50:38:84:8b:45:3b:ec:96:4d:87:97:6d:62:29:
                    5e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:83:57:90:86:B7:48:3B:D9:71:9E:E1:94:11:F6:0A:E8:8D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5116022b-eb5c-3be5-8c97-5eff6490e8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.90.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:4b:27:cd:56:30:80:51:7f:39:22:fd:52:50:62:17:47:
         4f:0d:2e:bd:fb:6c:f3:49:8d:a8:ad:2e:6e:bc:32:5a:33:4f:
         d3:2d:d2:fd:20:36:e3:a9:4c:34:4a:15:be:bd:de:5d:00:ed:
         c0:33:a3:fd:a8:b7:b7:f9:c9:ce:42:8d:0e:26:58:ea:19:2b:
         c8:7d:3a:32:25:00:15:df:88:4d:0a:d1:c5:cc:6f:25:a3:de:
         80:b6:34:15:e1:59:e8:04:d0:ef:b9:10:ec:17:b7:e7:db:10:
         25:0d:43:14:d8:c2:05:2a:0b:1c:12:70:f9:2b:80:58:ec:50:
         72:e5:08:4a:88:67:c8:d6:ed:21:5b:45:19:b2:87:94:86:16:
         c4:5e:63:e2:1a:3a:86:b0:22:a3:c5:cd:a3:e3:4d:3f:26:74:
         85:21:1a:38:b7:69:fc:a7:38:0f:c5:f5:c5:c9:fa:f5:3f:50:
         16:93:3a:1d:97:c7:dd:84:fa:e2:19:e1:39:69:52:d5:1e:44:
         8b:89:3f:d4:ef:98:9c:8e:2d:bb:49:df:47:14:49:31:55:82:
         a5:df:39:0c:34:52:54:3f:43:0d:c8:34:55:cd:a0:39:74:a2:
         c9:ca:41:d3:fd:91:53:27:88:f9:fe:74:60:22:89:82:e3:9e:
         40:ee:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:33 2024 by rpki-client on console-ams.rpki-client.org