Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/79df11aa-7888-347d-9b74-69228cc5b83d.roa
File:                     79df11aa-7888-347d-9b74-69228cc5b83d.roa (raw, json)
Hash identifier:          7LxoYtYohrYlK21gsimxVQW9UKReSNqzLf3bMXLXOTQ=
Subject key identifier:   2F:D8:AD:99:66:A7:19:5B:6A:09:6E:0A:37:9E:4C:03:FE:75:35:C1
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858450ABAD41B0763EEB16DFC5B00
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/79df11aa-7888-347d-9b74-69228cc5b83d.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     32133
IP address blocks:        64.98.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d4:1b:07:63:ee:b1:6d:fc:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=38a48428-96c6-4994-9fca-40d9083b828f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:25:57:e9:b0:38:b3:60:d8:7c:4f:46:09:
                    c4:7e:14:30:b1:e3:15:da:be:f6:55:9e:f8:93:a6:
                    07:c7:de:27:a5:cb:94:dd:7b:28:1c:ac:90:c8:63:
                    f7:26:61:ff:fb:23:12:67:b9:a1:46:45:b4:38:3c:
                    3b:fd:94:de:91:7e:a2:3c:13:66:ab:fd:ac:58:6f:
                    ad:26:20:06:e5:e6:72:11:f1:18:ad:bf:0d:a0:41:
                    13:1b:ff:7f:0e:ca:33:e1:ce:41:20:ce:ab:a1:4d:
                    b7:69:26:52:05:48:e8:c5:c2:7b:f9:6a:39:fa:31:
                    3b:28:e1:a7:21:e1:be:3b:e4:d8:8e:94:c3:e2:8f:
                    84:4c:60:16:cf:b9:42:39:d2:15:6a:64:ae:3f:07:
                    0d:e8:db:81:87:53:f8:30:1e:74:26:51:e8:b3:62:
                    92:ff:6c:72:33:88:0b:96:c3:f5:74:c3:72:4d:1c:
                    f7:2e:c6:c4:93:13:3f:fc:fc:f7:76:4f:d7:51:23:
                    4c:d2:7f:dc:b5:40:73:88:d1:ba:c8:77:bd:e3:9f:
                    3f:be:fd:15:91:2d:b7:78:27:c1:a4:ec:0c:d9:be:
                    41:5a:56:c4:90:f2:cf:fd:43:0b:aa:73:c5:56:81:
                    df:90:7c:eb:23:14:3a:7d:3f:a5:e9:3c:97:63:2c:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:AD:99:66:A7:19:5B:6A:09:6E:0A:37:9E:4C:03:FE:75:35:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/79df11aa-7888-347d-9b74-69228cc5b83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:3e:43:94:7e:f5:b4:3c:5c:46:97:73:1b:46:ea:b2:87:
         e5:cc:46:bf:16:88:9a:d2:25:59:75:7d:7d:d8:45:6d:46:dc:
         a7:1a:07:d5:82:1d:52:80:45:35:e2:1c:ab:53:ef:9a:9b:bc:
         e5:19:ae:9b:24:b0:28:81:28:27:10:23:35:48:ed:ec:17:57:
         a6:e1:55:08:67:47:5f:7c:ab:3f:c2:68:33:51:55:fb:5c:34:
         cb:84:ab:aa:1d:05:bc:0b:14:6a:7a:08:1a:39:5d:63:b0:ed:
         c7:73:5d:80:89:80:58:39:a7:b2:e7:ca:cf:e9:7d:38:05:54:
         ab:46:f2:67:93:49:51:74:4a:88:b3:10:e2:fb:cb:19:2b:f2:
         05:a5:32:55:7d:7f:d4:45:e9:d3:8d:9c:e1:5a:98:d9:7c:9c:
         d6:ef:f1:43:5e:54:9e:ae:33:bc:d2:d4:95:e9:33:8c:46:f1:
         fa:c3:63:80:ea:6e:8d:a3:dc:8f:76:66:13:6a:66:5f:4c:41:
         f6:5a:f8:00:b7:be:25:2c:31:ff:aa:5d:6d:07:84:e8:cd:61:
         3d:99:95:6c:48:05:49:75:1d:26:b6:f6:c0:32:62:b1:bf:ce:
         6b:6c:1e:b5:3b:52:fd:3b:03:1f:22:04:21:40:07:44:aa:e7:
         72:4a:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:15 2024 by rpki-client on console-fra.rpki-client.org