Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa
File:                     9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa (raw, json)
Hash identifier:          0/0AuE++4K7EBDUg5cjPtWEdT4NNTEvq7mbddlUxRVQ=
Subject key identifier:   D5:3C:86:10:AE:30:80:17:F8:97:0C:F6:E1:7F:E7:0E:0E:1C:C6:F8
Certificate issuer:       /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
Certificate serial:       010D0C9F43285845AF53712C857ED365ED6464B0
Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     13880
IP address blocks:        216.230.48.0/20 maxlen: 24
                          64.57.32.0/20 maxlen: 24
                          2620:110:7000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:71:2c:85:7e:d3:65:ed:64:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=4b77aa08-c0cc-4a3a-91dd-63c1fe14861f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:76:bb:f2:13:68:72:c5:b0:23:26:cb:83:
                    b0:43:d1:c3:9a:a1:dc:a7:85:40:72:d9:f5:d3:d1:
                    3a:35:b6:30:49:95:14:38:6a:1c:78:22:52:6c:ec:
                    b3:1d:57:8e:a2:bf:78:61:08:94:bd:f1:42:fb:bb:
                    68:9e:9d:e5:04:84:06:60:cb:0f:2e:aa:c6:63:4d:
                    65:de:6b:34:81:81:f0:62:ab:86:55:b8:0f:36:54:
                    00:2d:e7:ef:62:b2:26:44:f9:82:86:3f:a2:41:ac:
                    83:8e:1f:ef:27:a9:c9:f5:e9:f5:51:20:dc:f3:03:
                    f9:5b:0d:96:72:c6:9a:2f:16:be:6b:0f:60:e8:78:
                    57:5b:d2:12:71:7a:91:65:1b:f4:8e:32:8a:58:fc:
                    6e:cb:89:93:54:e7:f6:04:7d:7c:2a:c0:69:9f:af:
                    99:0b:4d:69:7c:20:15:41:1f:c2:b6:80:25:ff:bb:
                    c5:f3:76:dc:a5:85:5e:f9:48:93:b3:59:ea:08:f2:
                    6f:97:6e:cf:65:b5:fd:16:03:5e:89:7a:56:a6:4a:
                    ea:fe:1d:23:7e:82:24:3c:8d:00:d4:de:1d:6d:22:
                    82:97:c4:e1:d7:36:11:9a:8a:04:19:ff:ee:40:b6:
                    8d:22:ba:e6:e7:70:20:6c:91:eb:e3:c3:0c:6a:ce:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3C:86:10:AE:30:80:17:F8:97:0C:F6:E1:7F:E7:0E:0E:1C:C6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl

            X509v3 Authority Key Identifier:
                keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.32.0/20
                  216.230.48.0/20
                IPv6:
                  2620:110:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:fe:ba:bb:06:2a:5d:84:69:48:fa:cb:64:2b:5e:a6:9e:
         38:91:eb:b7:02:c3:e2:48:67:f6:84:f5:d4:fb:38:6d:45:a4:
         7c:ca:bd:2e:75:ef:33:70:41:b7:ca:f9:cb:5b:ac:98:4b:7e:
         f1:2d:75:4b:69:ef:5d:9f:e7:dd:d7:a7:d2:72:54:bf:a2:9e:
         a7:47:85:35:43:75:9f:7d:cb:7c:e1:35:da:3c:04:d2:b1:ed:
         fa:74:d9:d1:10:b5:27:4b:d9:e1:0c:21:46:75:d1:02:50:55:
         c9:01:5e:c1:02:44:a6:2b:d2:be:3f:51:b5:47:f6:ca:63:b3:
         50:23:57:96:45:a7:3e:58:b4:4a:3a:77:03:62:27:f5:63:18:
         2f:4a:8b:9a:49:6f:dc:ca:56:a8:34:bd:86:c2:35:28:26:b2:
         8c:ec:fb:2d:e2:e0:ee:ba:0f:27:35:fd:32:aa:ca:aa:39:e2:
         89:e9:1c:30:f9:2f:15:d7:6c:ee:3b:5c:93:34:f2:43:83:ec:
         a9:46:88:f1:1a:c3:31:46:d9:ef:69:41:2c:0b:83:b7:ad:fe:
         3b:f0:51:43:42:b2:25:5a:33:25:61:2f:a0:86:f2:9a:59:b1:
         f4:d7:ee:96:0f:e1:a4:7b:0e:ec:2c:21:82:61:e3:41:6d:bb:
         53:98:4f:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 10 03:03:54 2024 by rpki-client on console-ams.rpki-client.org