Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
File:                     2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json)
Hash identifier:          6KYDyXCuEr2OpDyw3llLJSLVpXy2NSbp7DWv8oWpV2U=
Subject key identifier:   E1:A9:CC:F3:AB:54:29:4B:04:1D:3E:A4:A1:D1:D9:62:42:66:52:A2
Certificate issuer:       /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
Certificate serial:       010D0C9F43285845909DE5A5EE6684185FBBFA00
Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     399717
IP address blocks:        64.112.106.0/24 maxlen: 24
                          23.179.176.0/24 maxlen: 24
                          2602:fc7e::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e5:a5:ee:66:84:18:5f:bb:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=184caa27-d0a8-4aa6-923c-663ebfcfa744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:ec:57:a9:97:1a:c8:b6:12:82:79:b6:78:
                    d8:16:97:e3:9d:7e:db:90:11:75:97:66:cc:cd:4f:
                    1d:2a:03:8a:1c:23:35:0b:3a:ab:d4:f7:0a:73:d8:
                    0a:25:71:1f:29:42:8c:f8:e7:f4:96:54:80:56:a7:
                    4c:99:26:7c:0f:cc:b8:16:47:c7:77:17:d4:95:36:
                    58:3a:4e:c7:99:8a:7b:97:e6:84:9d:51:41:9b:20:
                    d5:6f:2d:09:64:0f:ea:12:96:60:53:75:a8:5b:49:
                    03:10:0d:7f:7f:29:63:4d:83:5b:0f:a4:e6:f0:2a:
                    52:35:cc:73:55:da:b1:67:4b:5d:d1:2e:f5:c1:61:
                    3a:4c:ff:41:a3:70:6c:34:bd:35:2e:8c:08:92:07:
                    55:c2:46:a3:b0:e8:4f:4f:56:5d:09:c9:34:67:e7:
                    b7:03:ba:78:38:c0:5f:49:29:c9:a7:b2:67:88:23:
                    e4:79:cc:cc:c7:8d:35:12:d8:19:b4:5f:cf:40:2f:
                    2c:7b:f9:2b:85:62:9d:e1:29:5a:9d:b2:a1:44:57:
                    91:13:da:13:49:e9:75:16:fd:45:9e:06:d4:aa:dd:
                    9e:7a:c5:b0:57:08:7c:14:ff:f0:b0:b6:04:74:89:
                    93:b0:c5:e5:9a:6e:02:55:f4:17:2b:1f:2e:49:d4:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:CC:F3:AB:54:29:4B:04:1D:3E:A4:A1:D1:D9:62:42:66:52:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl

            X509v3 Authority Key Identifier:
                keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.176.0/24
                  64.112.106.0/24
                IPv6:
                  2602:fc7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:15:0a:6a:d4:20:4a:ec:d7:c9:78:e2:b5:cb:63:b2:6f:
         f6:5e:00:c6:df:a1:91:8c:e0:85:4c:4c:ab:55:aa:75:61:80:
         6e:c1:28:47:33:ac:9c:e8:6b:86:b6:ff:43:94:0f:6f:13:8a:
         a4:60:f8:25:cc:aa:9d:0f:96:71:83:13:9f:85:c3:51:cf:86:
         66:7b:92:05:5d:d0:06:f7:5b:42:db:81:be:2b:d6:33:d6:5d:
         e8:0d:e8:d5:50:a6:7f:8b:d1:17:96:36:39:02:2c:b0:1c:50:
         6c:e5:95:f2:78:2f:75:ab:33:c4:f7:db:eb:1c:2b:5c:94:0c:
         aa:e4:7f:bf:8a:25:5d:1c:ea:db:9c:1a:8f:84:0a:55:8d:85:
         cb:05:df:7a:f9:01:82:f4:08:59:c9:f3:4f:87:0e:d6:e1:13:
         cf:59:cb:9e:57:af:cc:ec:f9:c4:a8:49:d6:ae:a5:de:fd:e4:
         68:88:23:8e:e7:a5:f3:14:aa:20:e0:2e:19:50:47:10:a1:0a:
         bd:e6:98:d6:39:d1:a3:b2:b1:a9:97:f4:75:dc:51:58:10:a8:
         5b:e9:aa:39:6c:e7:e1:f0:3a:b1:f9:d5:83:0e:7c:b4:3c:ca:
         d0:47:d7:92:3f:2a:df:91:57:d6:a8:98:91:fd:09:97:35:7d:
         ee:d7:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:18:36 2024 by rpki-client on console-ams.rpki-client.org