Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa
File:                     0ba38926-bad3-374f-8c49-9231dc94f5e6.roa (raw, json)
Hash identifier:          mk6Fs9SDHz0GSf4dNYRchyYcW5X31EfkSnCANgNCbag=
Subject key identifier:   3B:F3:B6:FF:E8:C0:7F:77:5A:55:80:1D:89:3C:D4:D8:BA:A8:9B:17
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F43285845B7B37A2E3EE88E9B0FF52340
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     393474
IP address blocks:        64.90.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7a:2e:3e:e8:8e:9b:0f:f5:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=d7661384-63a1-4a0b-a883-0a0ab462750b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:bb:37:44:83:35:32:0c:20:84:52:19:dc:
                    6c:40:48:df:2c:04:c0:71:26:50:12:7e:4a:e8:bd:
                    37:69:be:49:56:9c:ec:91:20:ce:0c:4c:2d:eb:02:
                    f4:b7:1d:31:ea:8c:d3:7e:ba:52:7e:91:6b:f8:e2:
                    98:72:74:d6:a4:e9:0f:61:79:ff:58:21:a6:58:ff:
                    44:b4:9d:ec:0d:03:34:99:d5:d0:5b:ee:df:8b:fe:
                    e2:2a:31:e4:f4:6d:08:6e:b3:ae:ce:be:51:05:1b:
                    2b:92:9c:29:fb:14:89:c6:7f:06:72:ff:72:69:e3:
                    73:08:aa:5e:bf:5f:2d:e6:1f:10:2f:b7:8a:01:45:
                    8e:03:a1:4f:f2:c5:95:ab:fb:fc:d8:50:7e:bc:9b:
                    ad:04:a6:b9:05:a0:35:0a:de:da:2f:09:34:62:24:
                    b3:c7:cb:fe:68:91:2b:2f:1a:c5:9f:a0:16:7d:2a:
                    8d:9c:ac:1a:56:c5:b7:04:4b:a3:63:b1:6e:96:b7:
                    8e:4d:83:7a:e2:d6:f1:31:6f:25:db:b6:00:fa:4c:
                    27:d7:f1:54:0f:bc:8a:4e:1d:d3:b0:cb:89:23:9b:
                    a5:06:fd:a7:f2:92:af:0d:c1:dd:4d:0c:8a:86:8a:
                    e7:3d:fd:be:80:3e:c6:11:1f:db:75:cc:62:08:27:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F3:B6:FF:E8:C0:7F:77:5A:55:80:1D:89:3C:D4:D8:BA:A8:9B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:90:ed:3b:c8:17:8c:eb:b4:25:91:85:d9:66:69:17:94:c9:
         af:ed:1b:43:16:ab:1a:73:ed:39:37:60:9c:b5:b2:12:53:25:
         9e:50:ce:f2:03:e6:6b:e2:a1:df:55:b7:4c:77:53:91:00:c5:
         23:11:72:ab:c9:fa:00:96:34:23:1d:d0:95:7a:53:a5:f9:69:
         22:2c:c6:11:74:ce:cf:1d:38:22:51:c2:bd:1f:3f:01:10:13:
         87:36:01:c7:6e:cf:8c:5d:a0:74:11:67:4d:09:b7:59:3d:64:
         02:42:53:f8:04:0b:67:c4:0a:3a:a6:50:44:6a:dc:68:bf:26:
         c6:bf:a7:a5:65:81:e4:bd:39:c8:fc:ba:bd:b7:93:ae:8d:25:
         4c:18:c7:d3:22:8d:3b:bd:ac:31:5c:bb:40:d9:f0:c8:4c:9c:
         33:c1:82:82:1e:43:c9:99:af:7e:b1:36:9c:b4:d6:b7:fb:49:
         62:2d:e2:e6:8f:c9:e0:e5:31:d2:90:8d:dc:e3:6e:40:77:4d:
         00:7e:06:bd:e2:5b:bf:73:22:68:ce:1e:bd:a0:01:56:64:69:
         31:fa:e6:5f:28:91:40:47:36:28:d5:77:87:48:c3:6e:28:83:
         d3:52:0b:c5:de:55:65:21:2e:42:22:14:a3:e1:53:49:6e:58:
         40:e4:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:54 2024 by rpki-client on console-ams.rpki-client.org