Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa
File:                     0c238eb0-5671-3c71-9597-92d5851254f0.roa (raw, json)
Hash identifier:          xrQQSJYF/hHF/52OQfhBlRpt1XOGuXh/HreIAOQncTY=
Subject key identifier:   D5:9F:8B:08:8A:6F:32:68:76:B2:18:AD:A9:F7:C4:8E:D1:6D:25:72
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858454C38114AB727146C8A58CB00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     11090
IP address blocks:        64.4.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:11:4a:b7:27:14:6c:8a:58:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=28fcad79-03a5-43d4-94ac-3668b4d5eee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:f4:99:5f:44:bb:27:16:82:f5:5f:c4:36:
                    18:a9:1f:0a:92:f3:20:e3:61:6e:4e:d5:b1:6e:28:
                    eb:06:29:2d:42:60:2f:c7:e7:eb:b4:ec:da:b9:b9:
                    04:7c:42:a9:2a:ff:55:17:af:d9:c8:82:57:80:dd:
                    d6:38:d2:81:20:70:ae:64:21:12:f7:14:9c:f8:bb:
                    39:a8:c4:12:0a:9a:7b:3e:52:04:af:71:4b:48:61:
                    12:95:d0:9a:db:d0:6e:a2:28:53:3f:8f:61:4e:39:
                    68:e1:83:3a:bb:fc:5e:da:fc:84:2e:4f:1d:ef:72:
                    7d:8d:f7:4f:56:a7:46:d9:ad:52:01:e3:2c:99:0a:
                    83:25:71:6d:33:d9:54:d7:3c:80:30:ca:94:50:8e:
                    14:a8:7c:c0:37:cc:a8:c5:35:f0:9e:9e:b2:fc:28:
                    7d:0c:38:7a:b8:03:c4:7b:a2:9f:00:7a:24:bb:50:
                    53:4c:aa:64:bc:5a:ff:41:c8:11:a6:2e:30:c3:ad:
                    23:af:fd:fd:fd:7e:95:74:4d:6b:4d:0f:32:bb:7b:
                    40:78:07:9b:52:e7:23:51:9f:ca:35:65:ab:ac:47:
                    75:e2:28:bc:8f:48:40:88:16:64:7c:3b:74:a7:59:
                    9a:2c:c4:ed:72:4b:2f:fb:18:b9:42:6c:20:bb:57:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9F:8B:08:8A:6F:32:68:76:B2:18:AD:A9:F7:C4:8E:D1:6D:25:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:4a:29:21:21:8a:32:07:6c:eb:bc:2b:f5:3d:8f:9c:72:9c:
         0c:b6:e7:c3:18:2e:3a:e0:d2:ed:0d:48:97:28:14:2e:1e:9b:
         a8:0b:f9:79:5f:57:e1:81:81:43:10:c0:41:af:9f:1a:61:15:
         24:53:8a:ca:26:f2:b8:18:18:24:35:f7:4c:26:a6:e7:33:15:
         6b:3f:f3:40:cc:ef:c5:a5:47:98:36:37:c4:61:c7:f2:5f:bb:
         92:d4:64:7a:26:46:f0:ce:6f:95:04:1a:a9:b8:76:f7:92:2d:
         0c:df:de:47:85:63:35:6f:72:bc:4f:9c:65:05:34:c6:49:d4:
         07:50:11:85:cb:60:50:97:56:fa:49:7b:30:28:e9:30:b3:a2:
         41:db:16:86:a3:9e:7e:b7:db:b2:45:a9:8b:cd:3e:d0:2b:f3:
         35:02:ca:07:8a:c3:5d:9a:a1:bd:ed:b6:21:62:ed:23:09:0e:
         1e:ce:2a:fe:69:74:ae:b7:99:d9:34:83:cb:f7:17:9a:4c:7f:
         53:c1:ca:62:c3:9e:21:0d:60:5f:a0:bf:46:ea:05:bd:68:6c:
         fe:ae:da:42:13:e4:0f:96:4a:c8:38:f9:70:15:ae:0b:14:5d:
         a8:ac:ce:37:30:ab:58:ff:6c:72:16:05:c4:60:86:a6:70:8e:
         cf:3b:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:21:09 2024 by rpki-client on console-ams.rpki-client.org