Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa
File:                     8c35d617-cec2-3448-87cf-b812bd3bee7f.roa (raw, json)
Hash identifier:          kir0uKQTdTFK3sqC+gZNkdwAtmM7Xk9TFm8f395HSFQ=
Subject key identifier:   87:F5:38:85:15:36:D6:05:37:20:DA:A9:6F:54:32:7C:09:33:D7:63
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F432858451A158F2FF546A5D444526520
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     19381
IP address blocks:        64.119.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8f:2f:f5:46:a5:d4:44:52:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=6805456b-e936-48d6-bdc4-7ee4ca20317a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:c9:dc:fd:30:b5:75:84:da:51:d9:77:43:
                    29:05:47:9a:e2:01:9d:fd:d6:40:b8:06:79:2b:96:
                    af:d7:c7:1d:47:81:95:30:f9:3d:8b:51:47:1f:75:
                    6b:85:43:b2:28:91:d2:a0:e9:cb:8a:98:78:d9:79:
                    60:04:f1:62:88:84:b5:30:d8:78:18:cc:5e:b8:71:
                    bd:fd:ba:3f:7a:a7:a7:fa:bd:67:24:19:98:c5:3f:
                    24:49:a6:66:b9:a3:10:c9:a2:9d:d0:55:63:20:89:
                    8e:28:db:24:6b:1c:0a:04:00:fc:f1:bd:6f:98:24:
                    69:33:09:9d:22:78:89:b7:5f:2d:a2:b6:15:8a:09:
                    c1:af:4a:78:4e:8c:37:bf:8d:d6:70:0a:c2:86:b9:
                    fc:a7:f4:84:09:16:a7:bd:19:7a:a6:c4:42:37:95:
                    a4:cf:f7:48:5f:cf:53:cf:ba:fb:ad:e9:e9:ee:e2:
                    c5:e4:1a:fc:f7:ec:53:84:6b:31:76:63:30:80:0b:
                    a8:b6:9e:5a:80:74:b7:3e:06:93:a6:2b:3c:b6:28:
                    d6:fa:a3:5a:05:22:5c:53:91:6c:b3:c3:3b:43:31:
                    63:6c:44:68:97:19:f7:ab:13:e6:81:da:dd:6c:8f:
                    09:76:58:d1:0a:fa:76:4f:c2:69:ff:43:4e:3b:ba:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F5:38:85:15:36:D6:05:37:20:DA:A9:6F:54:32:7C:09:33:D7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:dc:d9:f8:9f:7e:3f:95:66:c3:27:4b:1a:9a:ae:e8:a0:
         8f:1b:92:da:0c:09:fa:93:ae:04:eb:24:fc:9e:09:30:d5:4e:
         97:23:01:0a:16:44:59:d3:37:8e:2f:2e:f0:9a:69:35:16:10:
         92:85:0a:db:bc:da:a9:9d:74:30:c1:5b:fa:3d:ef:e2:3e:ed:
         a6:94:66:f2:30:9a:09:1c:fe:93:43:a0:31:cc:4b:a0:65:1b:
         a9:23:9d:5e:42:eb:fa:e7:f5:e6:de:47:f5:02:1a:2a:af:4f:
         f4:53:28:73:d4:90:b0:0b:f0:cb:7f:81:ae:d2:d9:32:77:40:
         ee:e3:fb:0d:72:f8:77:72:1b:21:70:01:aa:13:a7:ab:1d:32:
         f2:e9:93:02:88:f7:bb:c1:de:ff:c9:e4:79:f5:fd:17:57:30:
         7f:7a:27:7f:27:01:c3:99:74:c3:2b:0f:b1:16:a3:7d:dc:5d:
         2c:4b:2e:8e:5d:4e:21:e0:f6:2b:5a:a2:7d:39:c6:8e:39:c1:
         33:f0:c1:4b:85:c6:0f:28:88:ae:16:16:26:fb:eb:fb:0a:32:
         49:16:68:c1:f7:94:83:e5:9c:6a:26:2a:2f:5f:9f:d3:26:92:
         b1:73:f1:77:cf:bd:e2:9d:89:ad:b7:0e:32:23:30:3e:28:6d:
         f5:51:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:50:38 2024 by rpki-client on console-ams.rpki-client.org