Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
File:                     31237730-031c-3a34-8009-f2ad063f0d88.roa (raw, json)
Hash identifier:          067ud+tDdX1ZvbKpUSWCRobktt/+oHx5gOR2exUqvtA=
Subject key identifier:   CC:34:E2:63:83:34:AB:AC:03:7A:DB:23:C9:16:75:43:7B:C8:BB:CE
Certificate issuer:       /CN=85154141-f81d-4a16-94db-ba21a7f28a12
Certificate serial:       010D0C9F432858459EEB4C32878399F86B7DC400
Authority key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
Signing time:             Sun 21 Apr 2024 15:57:53 +0000
ROA not before:           Sun 21 Apr 2024 15:57:53 +0000
ROA not after:            Sat 20 Jul 2024 15:57:53 +0000
asID:                     53464
IP address blocks:        64.20.212.0/22 maxlen: 24
                          216.38.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:eb:4c:32:87:83:99:f8:6b:7d:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154141-f81d-4a16-94db-ba21a7f28a12
        Validity
            Not Before: Apr 21 15:57:53 2024 GMT
            Not After : Jul 20 15:57:53 2024 GMT
        Subject: CN=63bbace1-9b1e-4db7-9b7b-34ee6d921411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:9a:46:0a:fd:cc:f0:a3:7a:a9:2c:18:96:
                    f2:ce:af:02:f9:3a:c2:86:9c:7d:a3:f4:f7:2c:e3:
                    d8:e2:10:f8:6e:ab:d0:ce:c3:2b:4e:22:8c:71:7f:
                    80:84:ee:2e:b9:ec:45:69:39:8e:4c:5d:a5:20:59:
                    fa:ed:5e:3a:d2:dc:cb:02:a2:53:e3:9d:39:1f:ca:
                    90:c7:40:94:ed:df:e1:fb:1a:e7:00:15:f2:2c:19:
                    61:96:7d:82:63:11:f5:f5:73:c0:60:d3:67:78:3d:
                    3d:1c:5f:0d:a6:65:15:ec:8b:1f:2e:73:7a:d5:b1:
                    be:70:ca:35:97:91:c8:98:ce:79:61:b6:9b:cd:8d:
                    75:44:07:a0:dc:e7:ef:12:4d:bc:f5:00:89:2f:36:
                    1a:1d:5c:89:43:06:82:a4:78:9d:61:7f:0d:67:30:
                    3b:55:e9:dc:a5:58:9c:1c:6d:b0:99:d5:d2:bf:1a:
                    99:09:30:06:51:76:ba:b6:56:f3:99:d7:16:41:1b:
                    ec:9c:29:26:55:42:75:a8:7b:8a:df:ac:9d:19:c5:
                    0d:72:bf:c8:eb:a4:71:63:cb:10:b7:94:21:2a:93:
                    fc:37:8c:65:1e:e1:22:36:01:3f:fa:ef:c8:29:ef:
                    a0:d1:13:4c:40:c4:14:88:86:a7:8e:98:51:c5:54:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:34:E2:63:83:34:AB:AC:03:7A:DB:23:C9:16:75:43:7B:C8:BB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl

            X509v3 Authority Key Identifier:
                keyid:48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.212.0/22
                  216.38.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:69:22:dc:65:74:1b:5b:e9:aa:6e:b7:8c:b0:e9:0f:d1:
         d7:9f:3d:79:8a:e0:34:d7:13:3e:b0:14:d8:4a:05:34:d3:32:
         fa:8b:a5:a4:fd:46:95:2e:e7:a2:36:6d:77:ad:a8:27:74:3e:
         04:16:e1:8d:8a:88:e8:4a:e2:07:60:59:12:52:df:f4:f7:1f:
         90:4f:f7:41:75:9e:02:c8:98:79:09:f9:f0:a0:43:20:b2:7b:
         11:39:52:5f:47:52:5b:92:9a:97:1c:33:3f:2e:62:0a:15:de:
         5b:74:68:59:e4:9a:23:8b:dd:7d:1a:bc:b6:3f:1e:5d:a8:80:
         16:50:95:1e:74:a0:46:dd:81:7d:1a:4f:e8:8b:e2:ce:19:95:
         0b:f6:74:18:b3:aa:79:a8:30:5d:58:eb:65:fe:d9:67:09:6d:
         cf:13:75:59:08:cd:62:d7:3a:62:69:1c:37:bf:36:98:3d:f1:
         3f:56:2f:a5:3a:2d:b3:61:b5:90:87:e5:69:54:ce:8d:27:bf:
         80:7e:51:c2:bf:6b:9b:aa:87:d6:92:ec:00:d6:0c:9a:9c:dd:
         b4:5c:76:b2:29:3d:fd:76:e5:29:e3:83:d3:b3:70:13:27:fe:
         34:ca:f7:ba:9c:40:30:d1:49:de:85:39:b4:48:99:5f:36:81:
         39:fc:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:50 2024 by rpki-client on console-fra.rpki-client.org