Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa
File:                     64b38fb6-7e65-3d80-ba8e-62585efad38a.roa (raw, json)
Hash identifier:          8iB88lfCx7K9KFEOkFp5rzQcAStuXaCgeQnicKsosD8=
Subject key identifier:   3C:39:8D:09:95:95:1A:3D:EF:03:0C:2D:BA:1B:EA:0B:55:DD:B3:45
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285845AB23553AE9289263C2445A80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     13768
IP address blocks:        64.34.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:55:3a:e9:28:92:63:c2:44:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=beaf60d5-42e4-4fac-b459-f12573985bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:38:c2:a0:13:32:79:ff:61:53:f3:c0:5d:
                    ac:63:21:83:bf:62:a4:e8:2b:f1:f0:59:5f:3a:c4:
                    a6:1a:32:37:4b:f8:3d:d1:45:b6:33:31:60:9e:5f:
                    9c:84:0c:e4:32:47:03:ee:4b:52:55:a1:53:d5:73:
                    d7:79:e9:bb:a1:32:db:4e:ae:6d:68:55:f1:04:07:
                    8d:c9:ea:a4:91:09:f9:60:0b:3d:81:7c:d2:5c:0d:
                    a9:88:63:ac:5b:59:2e:59:00:02:43:b1:bc:41:6d:
                    a9:46:96:1b:0b:22:8c:29:05:db:0e:e3:76:86:f6:
                    4a:ee:1c:12:45:b8:38:22:8b:45:74:e7:94:82:15:
                    52:c9:26:c8:8d:d6:c9:38:a1:76:ed:09:29:51:08:
                    4a:d1:c8:7f:49:26:3b:49:57:70:a5:0d:f0:44:b9:
                    1a:16:4b:a7:72:49:93:43:5a:47:d5:a9:db:b8:16:
                    2c:fd:d6:6c:62:fa:33:a6:fe:09:ca:64:e0:90:62:
                    08:98:11:6a:11:95:c0:5d:f4:0a:ff:43:9d:a8:5e:
                    30:1b:c7:c2:06:ec:00:93:c4:08:3d:72:61:de:11:
                    5d:a0:1d:01:d1:03:94:de:2d:11:49:08:89:a8:1b:
                    28:3a:ef:af:a6:3d:09:32:dc:98:d6:9a:c8:aa:5c:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:39:8D:09:95:95:1A:3D:EF:03:0C:2D:BA:1B:EA:0B:55:DD:B3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/64b38fb6-7e65-3d80-ba8e-62585efad38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:46:70:01:49:2a:78:5d:a6:6b:56:89:67:a3:25:3d:e1:22:
         db:a2:6f:6a:e0:6b:ba:cb:3c:90:21:30:ce:9b:c7:44:08:6b:
         4d:7a:42:b2:19:1a:7b:e8:e9:5a:dd:c2:69:ff:c6:9b:73:b7:
         95:d7:52:d8:1c:d2:8b:d7:b3:36:6c:e5:69:20:ae:a4:29:02:
         2f:cd:ee:e9:0e:2d:5d:de:9b:2d:21:13:76:bb:73:98:6b:57:
         71:b1:f1:97:7e:c6:be:30:6f:c2:e9:5d:a5:96:a2:38:9c:70:
         9f:3b:da:54:99:e3:a4:78:b5:37:d7:53:f1:f6:07:a9:ee:c1:
         3d:04:f3:0b:bf:7d:71:6c:15:af:62:52:f0:ef:7a:e1:d0:67:
         f5:f1:54:27:61:73:58:7a:01:3e:2c:ff:17:54:36:9e:53:9f:
         5a:0d:9d:35:0f:de:fd:34:c9:65:0c:bc:23:d5:3e:36:34:75:
         85:27:e9:b2:3d:13:de:b9:97:ff:6a:fe:08:23:f1:f5:a8:7b:
         28:24:74:b7:b8:6a:e7:99:df:07:04:4c:13:be:ee:64:65:96:
         60:5c:3d:5e:dd:8a:27:d9:a6:c7:ea:fc:0d:ab:bc:e6:c3:9d:
         e7:8b:66:fa:18:7e:ee:f8:0e:dc:ad:bf:6b:db:3d:ae:98:f4:
         07:b4:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:33 2024 by rpki-client on console-fra.rpki-client.org