Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/1f706669-3254-3c64-9e61-445a9543a8e0.roa
File:                     1f706669-3254-3c64-9e61-445a9543a8e0.roa (raw, json)
Hash identifier:          11JyTF4NBbyjnZ3LWk6jyIbE5lwHDyvubvISn9lQe08=
Subject key identifier:   6E:0C:8E:E1:C3:7A:95:03:C0:4F:10:55:AB:F8:EB:91:B8:1F:7E:F1
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F432858453FA8089F1F59DCE2D3AE5B40
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/1f706669-3254-3c64-9e61-445a9543a8e0.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     11426
IP address blocks:        64.79.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:08:9f:1f:59:dc:e2:d3:ae:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=40e7a7ee-c8bd-48e8-9071-e0445a293aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:b3:62:14:85:b0:77:89:e8:52:8e:3a:63:
                    aa:7e:d0:e2:8c:ca:a3:29:0a:b4:2b:d4:21:62:21:
                    ca:86:06:ab:27:a1:76:30:60:41:03:82:5a:d9:da:
                    de:e6:79:70:3d:27:3b:1d:9f:4f:7a:74:a4:b9:6c:
                    2c:51:81:73:93:5f:d7:98:b5:7d:06:d2:54:c9:3a:
                    3b:c9:97:b2:c4:ea:d6:3f:d3:0e:92:b5:43:a2:92:
                    0d:3f:3f:98:ce:ec:91:4c:b3:4d:ed:77:62:90:69:
                    c1:63:00:77:fe:8d:86:cc:8e:21:d0:3b:86:7d:0f:
                    96:4b:c9:49:63:f2:84:ef:58:5c:32:e3:61:e1:66:
                    ef:fb:65:f0:90:9b:77:3b:b1:68:53:b3:bf:f8:a6:
                    d7:d2:de:63:56:68:28:a6:c1:4f:23:82:dc:d4:50:
                    16:ed:37:9f:43:6d:9f:97:9a:9e:e6:f5:e5:b3:ae:
                    cc:e0:2a:7e:1a:38:35:3f:d5:51:5f:9b:90:b9:2b:
                    ef:f2:59:b3:a5:a1:4f:7a:ea:a1:06:61:53:10:2f:
                    94:65:82:f8:21:88:9e:dc:67:18:83:85:20:71:18:
                    66:98:bf:bd:ff:57:00:a1:7c:5a:15:c2:1c:6f:42:
                    9f:a4:46:cd:94:30:a9:0d:3f:f8:22:69:fc:70:b7:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0C:8E:E1:C3:7A:95:03:C0:4F:10:55:AB:F8:EB:91:B8:1F:7E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/1f706669-3254-3c64-9e61-445a9543a8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:ad:68:0e:c8:19:30:66:38:31:71:4f:6b:e5:bf:9f:3e:
         57:18:e9:6d:82:47:0f:9f:61:fb:68:63:62:76:5a:ec:b1:28:
         f6:7d:7d:ad:aa:6d:bf:f0:64:90:1b:67:56:33:d9:a3:e7:89:
         94:28:9e:05:df:1f:50:39:ee:8e:a4:03:0c:fa:94:59:25:45:
         c6:38:18:cc:51:25:d6:bc:ba:49:ec:c4:df:c3:15:42:88:a7:
         60:59:f4:c7:5e:1d:8d:77:20:36:38:1e:84:19:5d:63:3e:9e:
         d9:6f:6b:3e:51:dd:88:88:ca:f4:31:5e:64:f3:04:de:8a:8c:
         5c:f8:8b:fb:ea:39:79:e8:ea:d4:0f:42:cf:01:a0:fe:f2:14:
         48:4a:33:72:8f:57:ae:20:45:61:bf:0b:e3:72:06:7d:73:8b:
         01:58:51:db:65:60:cf:91:b5:69:40:0d:59:fc:85:ce:cb:0d:
         c0:62:e4:2a:39:60:b9:ea:bb:77:c8:dc:59:52:73:1e:33:2e:
         62:c0:73:c9:93:77:0c:8f:4d:38:7f:73:83:46:19:f7:f2:44:
         70:15:78:45:46:e8:c7:88:b1:38:d1:cf:72:f6:88:3a:d4:d5:
         06:e8:ea:b8:d9:e7:dc:e1:18:34:3a:2d:03:f3:ab:04:7b:74:
         30:ba:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:36:42 2024 by rpki-client on console-fra.rpki-client.org