Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa
File:                     3735a2b4-9557-32d4-99da-5348757f8b91.roa (raw, json)
Hash identifier:          5jN8qYFZeTQAs4qsL0z6JsIv+AU251qU0JoMCHqIa24=
Subject key identifier:   22:58:88:B8:AA:47:B8:D0:D8:8E:06:7C:DC:7D:E4:F7:43:6F:63:1A
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F30BF00E12AABF883A7740
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11164
IP address blocks:        64.57.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0b:f0:0e:12:aa:bf:88:3a:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=da037154-85d2-463e-92fd-a6c52eebd238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:ce:1a:83:72:b9:ba:bb:f3:fb:9a:09:e1:
                    8b:97:7e:5c:30:b3:2a:7f:72:67:9d:87:ed:b6:9a:
                    a1:45:e0:9e:02:c4:7a:a3:b8:31:01:22:d8:43:c8:
                    0a:11:3c:8f:22:2e:ed:1d:1a:f6:8c:93:3a:2f:f8:
                    08:56:56:d7:ad:39:46:89:ee:86:65:d7:27:d6:c1:
                    8f:8d:78:ab:8b:fb:a1:29:bb:17:05:4d:86:e9:04:
                    e0:76:50:9c:2c:31:32:24:10:92:80:d3:70:45:9e:
                    0e:46:72:43:84:60:cf:aa:d9:84:ec:5c:3c:e4:38:
                    f8:f0:d3:46:f6:76:9d:23:c7:f9:36:0a:b6:97:6f:
                    63:d2:73:18:9f:d1:e5:76:5f:87:8e:5c:7e:94:5e:
                    00:e0:46:47:11:ed:7f:ce:b1:62:cd:04:e3:47:6a:
                    7a:ae:d1:0a:35:7d:d8:e3:b9:95:7a:89:2c:fb:88:
                    8d:0b:1b:e9:95:5d:86:d1:12:ce:8c:cc:bd:cb:83:
                    f2:99:c5:59:96:ba:bb:4a:8a:57:ef:c5:1d:d8:0a:
                    6f:b8:a6:c4:64:9f:11:d5:a7:de:27:48:a0:82:be:
                    47:36:90:d8:5f:bc:e7:a3:29:bf:ee:43:f2:92:69:
                    84:14:35:dc:dd:92:18:61:86:49:bf:b5:44:bf:3d:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:88:B8:AA:47:B8:D0:D8:8E:06:7C:DC:7D:E4:F7:43:6F:63:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3735a2b4-9557-32d4-99da-5348757f8b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:25:f8:48:f9:6b:a2:8b:5d:bb:99:82:c3:8a:1a:01:c4:dc:
         5c:64:89:6a:d9:ee:3a:47:af:40:47:cb:77:8e:63:1e:8c:87:
         23:39:da:a3:d3:df:c3:95:04:86:1e:d0:f5:ca:51:ae:b6:ca:
         76:c8:76:d5:e3:15:02:a0:81:38:3b:cb:fa:45:b8:5c:73:82:
         12:76:96:74:4f:ba:38:6a:fc:57:0d:0a:6a:e6:8d:fa:59:d5:
         4b:77:75:a2:90:3a:0d:c9:f3:55:8a:0f:87:db:82:86:f4:fb:
         4c:0f:2b:a6:7e:99:23:e4:46:16:f6:5d:84:a5:fa:06:5d:c0:
         fa:86:ba:20:99:a1:4c:56:24:6b:19:ea:b0:82:20:25:79:18:
         35:a2:4e:0d:23:c2:18:a3:59:10:8a:a9:c8:67:2e:90:31:50:
         dc:ab:49:24:5b:f8:5d:b0:e5:84:8e:e6:c4:1b:88:58:92:b0:
         e2:58:f9:90:77:c8:28:1b:60:81:a4:25:77:f2:d6:09:60:b1:
         e4:6a:4b:89:3c:74:cc:1b:6b:a6:e0:d4:43:95:c9:a3:b7:cf:
         2e:11:fe:57:d5:ab:05:ea:4b:f0:ee:be:cd:a7:69:44:d5:78:
         a0:60:b4:a0:99:c2:f1:2f:ae:8c:16:a1:2c:3c:0e:1b:a0:b7:
         01:87:e3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org