Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa
File:                     a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa (raw, json)
Hash identifier:          xz9z7wRZspcuYB2qSlBOY69IdT0ZqRrMExR2tPSy/IM=
Subject key identifier:   EF:F1:19:6B:01:32:F0:5A:F9:C3:32:1E:4D:5C:27:AF:22:C3:50:26
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F30BD8BCF8E02F8CC4F8A0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11537
IP address blocks:        64.57.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0b:d8:bc:f8:e0:2f:8c:c4:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=49dcfdce-daff-4be4-a7a8-ceb0bcf47c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:6c:5b:90:00:a5:c4:90:70:5d:fd:53:98:
                    62:2f:5a:e8:a0:09:c6:23:a9:83:65:0c:33:bd:69:
                    7d:9a:d3:b8:6c:47:d3:ad:00:fa:b9:8e:4d:22:ee:
                    6a:f7:76:62:42:07:77:0e:a8:b5:03:f0:21:29:40:
                    0e:01:42:87:8a:8b:cf:77:70:ef:f8:2b:15:f5:00:
                    4c:fb:97:4f:a5:cb:9d:e2:9f:da:76:0e:7a:e9:92:
                    e4:16:b6:34:6f:d8:65:a4:39:a0:bf:57:f5:8b:ad:
                    c8:78:57:05:4f:0c:be:05:d8:13:0d:a3:21:a9:7e:
                    f6:28:2c:ea:5a:5c:e3:ba:7f:ae:57:80:c1:e3:84:
                    1c:f7:c3:3b:2c:f0:d6:00:df:7d:1c:87:0e:c2:3c:
                    94:8b:4f:5a:ab:de:67:56:04:b5:3f:a9:ed:33:1b:
                    d8:dc:7b:53:b4:ee:e5:77:82:35:d8:31:4b:26:a7:
                    40:bb:05:f2:8b:b9:6f:67:26:ab:0b:f1:1e:f8:0e:
                    4b:4e:3c:cf:56:b8:02:be:45:0a:ca:f3:8a:14:92:
                    22:f9:63:f2:c9:ab:6e:cd:d4:3b:cf:df:8a:2c:ce:
                    15:c9:12:ed:41:3d:a4:d2:e9:42:74:66:0a:26:ac:
                    99:c4:fe:62:25:a9:35:2f:e5:d1:dd:9a:40:83:6a:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:19:6B:01:32:F0:5A:F9:C3:32:1E:4D:5C:27:AF:22:C3:50:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a4e2c6c9-4771-3952-9bd3-9922cc6d46a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:0c:77:9c:c4:82:40:63:54:3b:69:15:d0:34:08:c1:b9:
         9b:03:87:0d:63:35:d5:92:8d:35:4c:38:c7:82:38:90:90:6c:
         81:5f:9f:9f:cf:1e:8d:e8:e7:04:da:b8:40:1e:2c:56:97:1b:
         9c:22:6c:14:17:e6:ad:bb:d4:ff:63:35:94:12:0a:6e:d0:51:
         27:b7:75:ae:7f:3a:5a:dd:e5:90:15:0f:e4:2a:aa:56:c8:db:
         06:5d:a5:27:22:cb:06:56:1c:82:fb:e1:83:ee:60:19:dc:bc:
         d3:7b:18:46:19:0e:ea:c6:8f:22:59:6c:1b:d3:53:10:64:28:
         f8:ab:73:24:07:3f:51:c0:1b:d8:7a:72:9f:6e:3e:2c:18:5c:
         a4:6c:5c:b2:df:af:cc:cf:32:78:d0:35:90:f2:ab:7d:18:8c:
         4d:9b:50:8e:45:19:47:32:fa:87:90:64:81:b4:f4:59:42:c5:
         83:54:d5:36:86:0a:11:d5:a2:4f:c4:7a:ae:51:0c:df:c3:e5:
         6e:2e:11:67:3b:aa:e8:9a:87:13:a1:68:a2:60:cf:53:1a:f4:
         79:ac:88:f8:bf:04:5e:5c:29:71:b9:0d:07:ff:37:92:40:89:
         e7:8a:b2:17:a0:d5:66:5e:ae:e1:7e:bf:f8:02:17:c1:a0:73:
         16:1b:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org