Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/96c664e8-94bc-38c2-a452-6e3b4b041a43.roa
File:                     96c664e8-94bc-38c2-a452-6e3b4b041a43.roa (raw, json)
Hash identifier:          3Wbh/e7MTlao7Cr5Xnm4n+994lE80dYfv0xiD+iHOF4=
Subject key identifier:   E6:7A:CA:48:A6:98:96:43:21:2D:7C:F0:DD:8E:98:F9:C1:81:11:3A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA1126637A84C34D80A6BE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/96c664e8-94bc-38c2-a452-6e3b4b041a43.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        64.230.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:26:63:7a:84:c3:4d:80:a6:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=b2acf93a-e811-442b-9876-8bdae478ce09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:af:de:b6:74:90:e9:b6:c3:d3:75:fd:4e:
                    d0:ba:d9:fa:a9:36:70:bb:12:e4:e0:00:0f:3b:6a:
                    af:12:ad:52:76:80:7e:fb:18:b1:98:11:62:6d:4a:
                    d1:52:d3:e0:65:7f:c1:f9:80:93:11:fc:97:d0:45:
                    c3:ac:8a:35:9c:09:ce:36:27:10:fa:b6:2d:b8:11:
                    2a:af:fa:7e:47:d6:dd:5d:a0:8b:44:ea:bc:a8:30:
                    29:5b:8b:c5:31:3f:55:bb:e1:6f:e6:a0:a7:c5:25:
                    0c:43:15:99:34:e1:f0:d1:d2:e6:37:75:80:b5:58:
                    21:01:bd:2d:e7:0b:6b:c1:c6:89:cd:99:5f:60:65:
                    55:b6:a0:70:3a:06:8a:57:d9:2c:eb:99:14:67:fe:
                    55:66:88:25:e4:36:b3:3b:38:5f:f7:fd:f4:57:1d:
                    cd:ca:b6:ac:52:3b:90:d1:13:24:ec:33:c7:49:2b:
                    73:34:2c:08:3e:a8:26:4c:3b:05:30:7b:23:44:23:
                    c6:0a:17:e6:66:26:f5:cf:8d:1e:8b:6d:1c:80:a5:
                    32:3c:b3:5d:62:db:0d:28:60:53:5b:2a:36:91:44:
                    0f:b2:f1:99:18:08:04:bf:ae:8f:15:ee:bd:e7:66:
                    09:1c:31:64:73:79:02:d5:b8:07:0b:68:1e:3a:4b:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7A:CA:48:A6:98:96:43:21:2D:7C:F0:DD:8E:98:F9:C1:81:11:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/96c664e8-94bc-38c2-a452-6e3b4b041a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.230.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:06:13:ab:c7:40:c4:8a:19:8d:a0:e5:e1:ba:99:21:bd:
         bc:e1:f7:4f:38:35:a2:9c:6a:9d:3b:b2:30:10:0e:bd:ae:a0:
         d7:7d:73:73:d8:1f:78:a0:fc:3a:ff:38:67:50:2c:03:e0:63:
         7a:d7:ae:09:72:53:f8:e1:4c:3c:5e:5f:c9:d8:0b:9d:3a:a3:
         33:e2:13:91:7d:4c:58:63:c2:98:99:60:08:00:88:86:20:78:
         9a:70:e2:7f:4b:6c:b7:0a:ef:1a:8c:25:6b:2e:e3:62:30:39:
         e3:b2:79:8b:27:2e:e7:30:37:81:83:df:08:ad:11:31:c6:86:
         aa:6c:62:55:3f:38:b0:dd:fb:d4:4b:d4:2d:35:96:6e:56:29:
         34:27:36:06:a4:5a:4c:a9:40:3a:f3:13:9d:76:e1:c0:84:d9:
         bc:b2:05:3c:a7:af:ae:ff:7a:0e:f6:d0:32:86:f5:60:b7:fd:
         e7:6c:57:16:03:aa:9b:ec:77:44:a5:ca:90:57:08:f6:97:05:
         b0:39:f9:9b:32:ca:61:ec:2a:22:6e:ce:5d:63:ac:3f:83:91:
         61:b2:f0:ce:e2:7d:94:cb:da:d0:10:ef:99:cf:80:5c:e5:0d:
         bc:73:17:5b:5d:e9:a5:45:f5:b9:a0:87:af:b7:23:0a:ad:19:
         9e:67:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org