Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa
File:                     c9f55b10-d847-3053-8482-6552dbbdb29b.roa (raw, json)
Hash identifier:          djyygeEYs/RlFvMMrU1dbFqCRE75eAPzaZrgBviBFLo=
Subject key identifier:   07:2D:F9:14:FA:AE:87:55:B0:9B:5F:D7:EA:42:26:D4:E5:32:ED:CE
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F43285845B7B37B27A03830D5DF5D6A00
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     393474
IP address blocks:        64.90.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7b:27:a0:38:30:d5:df:5d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=fa047ba0-463d-423b-a351-43f70f5305e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:69:71:2f:a9:c6:a4:46:3d:9c:68:fd:ce:
                    df:ed:3a:e3:f6:ed:7a:9b:7b:c3:d8:02:a9:c4:3d:
                    ef:4c:40:ac:3c:3f:96:c9:2a:2c:9e:2a:dd:7f:4d:
                    22:cd:3e:92:a0:12:68:cf:9d:67:bf:7f:55:19:d9:
                    3e:31:cf:b0:1c:d1:cf:4a:f2:84:c7:91:70:4e:f8:
                    26:8e:e5:99:1a:28:6d:d1:ce:a3:a8:23:16:60:f1:
                    17:f7:44:59:37:67:37:42:b7:42:1b:14:46:84:f0:
                    1d:70:92:1e:f1:f2:8d:2a:70:2f:73:6b:e5:2a:a4:
                    82:19:5c:92:65:95:b3:d8:e3:97:d1:94:ba:d7:89:
                    11:d5:75:f3:0c:57:85:3b:be:61:fe:26:c5:9e:0d:
                    e7:65:c9:80:79:cc:e0:b8:54:a8:a5:4c:31:23:db:
                    fe:bf:98:f4:b4:d0:b6:4d:4a:82:e6:34:9a:d9:5f:
                    b3:aa:7b:c0:d2:3e:a5:9f:77:50:8c:54:bc:12:71:
                    14:b5:f2:b5:5d:12:38:99:0d:9d:5a:04:bc:c8:42:
                    32:0e:f4:82:24:5a:37:7a:f3:11:db:f3:07:79:ae:
                    73:16:ac:56:67:22:9d:49:c7:7a:82:08:ed:e6:7d:
                    00:8c:1e:e6:d7:be:1e:ee:1b:93:62:5b:71:4a:76:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2D:F9:14:FA:AE:87:55:B0:9B:5F:D7:EA:42:26:D4:E5:32:ED:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:83:8f:b3:22:be:cb:69:3a:a7:65:a5:97:7c:d6:e1:48:25:
         c3:43:4b:5e:aa:41:b9:08:90:97:46:bc:fb:5e:10:35:6a:cb:
         e5:ce:aa:24:72:c7:a2:4a:7e:f9:fb:b7:24:01:04:37:85:6f:
         24:9f:03:f2:a1:59:a4:82:34:ad:9f:54:a9:f9:a1:4f:6d:15:
         f0:49:23:e6:92:06:66:80:2f:31:ca:78:f4:ce:4f:c3:4e:fb:
         a9:4a:ba:60:77:5c:22:eb:73:53:40:fc:9f:67:73:22:e6:a9:
         9e:70:33:66:7b:f0:50:93:2e:b9:d0:dd:2c:bb:c9:89:3b:ab:
         cf:98:6a:98:bc:0c:0b:ec:e7:0b:9f:6f:5c:92:b1:ee:b0:e4:
         7e:6e:97:d6:3d:97:56:d0:d9:f4:a7:f4:6f:67:f3:2b:52:de:
         39:34:e5:e5:ec:6d:0a:50:a3:53:b7:23:f2:03:e9:1b:74:b2:
         fd:de:33:1d:0d:e4:02:e8:3c:cf:20:1a:9f:5e:94:ea:3c:d2:
         46:47:83:a1:d4:e5:f2:bd:df:b7:a1:94:80:61:14:72:cb:53:
         dd:cb:fc:24:06:c0:a7:4b:43:52:c5:00:f5:25:3a:74:3e:a9:
         e3:84:f2:c8:cd:32:10:24:5e:cc:06:36:68:89:9e:b9:f5:90:
         08:e7:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:57:24 2024 by rpki-client on console-fra.rpki-client.org