Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa
File:                     37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa (raw, json)
Hash identifier:          uZbz9KrPDe76gjC3izVJVuqA+rzzvYbSf1XjsIOXp98=
Subject key identifier:   55:5B:55:44:4E:DC:1C:0F:B0:B5:F8:DC:70:7C:EA:EC:B5:91:65:9A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845883DDA3AC2321F3A00305DA0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     6404
IP address blocks:        64.209.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:da:3a:c2:32:1f:3a:00:30:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=c829bced-19ed-4360-b606-715f1cc9814f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:d8:79:90:18:fc:61:3e:c0:6e:e2:ce:37:
                    21:f2:b2:18:d3:fc:d4:60:ec:54:13:96:ad:da:ec:
                    95:1d:7c:12:d9:10:4a:0e:6e:43:d2:84:05:3b:95:
                    fb:d4:bb:cd:c1:d2:32:52:25:f9:93:66:ac:88:a1:
                    a9:c1:16:d2:81:77:cd:f2:04:2b:56:1f:da:34:41:
                    cb:83:b8:6f:3d:0a:f4:36:16:ec:99:f6:7f:72:32:
                    70:92:77:1c:de:b9:94:f5:eb:21:64:b0:fd:d8:79:
                    a7:66:3d:ba:df:3f:b8:d1:da:82:6b:61:d1:a1:83:
                    9c:7f:4f:7b:79:26:5d:1a:71:b8:9f:63:c7:8e:66:
                    1a:8c:ec:04:f7:62:1e:54:a2:e3:57:b1:7d:8f:12:
                    89:d7:18:36:3f:a9:4e:4a:46:ca:7a:81:62:a2:4a:
                    4a:39:8c:6f:af:67:8d:ee:7c:36:cc:6f:e5:3f:a8:
                    56:71:08:98:e6:0c:5f:7f:10:1e:e9:b4:02:da:19:
                    63:7b:40:b1:f2:fe:cc:d2:5f:20:55:cb:b1:d2:c1:
                    ed:e9:ff:c3:ec:f9:1f:3b:ef:2b:1b:ef:dd:d4:1e:
                    5d:14:3e:bc:42:8f:0f:60:08:12:b4:0a:61:c7:88:
                    72:26:e4:f7:2d:6a:7a:6b:30:5f:6f:e9:c1:78:a3:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:55:44:4E:DC:1C:0F:B0:B5:F8:DC:70:7C:EA:EC:B5:91:65:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.209.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:da:f8:5c:82:f2:e4:c0:bf:97:2f:fc:31:8d:f9:19:62:40:
         82:3f:53:77:3c:a3:69:b0:ba:2e:6c:96:49:1d:9a:51:89:96:
         dc:02:49:2b:e5:29:90:b4:25:8a:cc:ff:16:ba:61:a0:14:54:
         a2:a9:d9:8f:9b:ba:8a:7f:5c:e2:e3:8f:ea:99:20:d2:45:5f:
         14:a5:be:7f:9c:2f:7b:6c:f5:d1:e1:7c:4b:29:ed:be:b4:53:
         29:f7:ec:3b:22:d3:35:c3:5f:2e:d6:43:33:65:0a:47:0b:58:
         0e:96:90:e8:ec:d4:80:e9:75:b6:0c:11:3b:1b:07:e3:b1:06:
         61:3c:56:fd:99:6c:24:a8:5e:0a:47:e3:b6:f2:90:c0:29:39:
         3f:66:05:72:6b:c8:80:fa:59:62:82:ac:38:21:d4:59:89:17:
         18:6f:21:58:16:30:da:f3:d3:da:70:98:3d:cc:c7:8a:5f:e4:
         9b:a6:c5:13:18:49:27:11:e1:e3:ec:20:b5:98:0b:a1:b9:35:
         78:16:95:0f:35:50:75:49:87:cd:44:7d:29:cc:81:41:89:c0:
         5a:e9:75:ff:9c:43:70:58:47:30:2c:61:e9:f0:a5:5c:77:9e:
         6d:bf:5a:c3:06:d6:55:cb:28:0b:ce:62:a4:74:87:8c:1e:de:
         23:40:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:06:10 2024 by rpki-client on console-ams.rpki-client.org