Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa
File:                     a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa (raw, json)
Hash identifier:          Rsocen/pfq8nB6dmJ2AWYGpE6Ab77oNyLKKoUek/VF4=
Subject key identifier:   99:D6:FC:45:FD:E4:70:F0:59:58:1C:6E:5A:33:3B:84:BF:9B:A4:68
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285847ED24C028B05FDBA8EADD9520
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     11090
IP address blocks:        64.4.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c0:28:b0:5f:db:a8:ea:dd:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=8cbc1e92-d567-48e8-9540-49d80ea68088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:27:33:1d:29:f8:35:59:d2:4f:ca:00:b9:
                    6d:4c:c4:a6:f6:74:84:41:d8:db:19:b8:a5:45:68:
                    12:6d:32:37:a6:5d:f2:02:19:74:5e:90:30:df:3c:
                    b9:ab:f8:c1:fd:29:e6:a8:26:e8:13:f0:93:2b:79:
                    37:cf:ae:06:2f:c9:c5:76:f3:5d:0b:40:7b:d1:d4:
                    9b:e0:33:a1:cc:51:51:6b:c8:0d:4b:22:02:66:7c:
                    ae:15:1a:66:6d:0a:6e:63:3c:3d:6a:88:34:b7:7b:
                    80:e5:30:4e:ec:85:1b:a3:56:13:b3:13:b4:9e:66:
                    0e:07:db:6e:8d:83:43:1d:6a:f6:14:8a:54:63:01:
                    5f:35:cb:10:bf:23:9d:2c:ea:92:6b:13:74:cc:70:
                    c6:cf:eb:ad:a9:7b:12:61:7c:39:b8:74:6a:a0:5b:
                    a5:75:14:7a:ae:2f:d1:3a:cf:9c:f3:71:70:dd:df:
                    18:2c:1d:a2:63:96:b6:e6:f8:dc:f5:5f:0c:c3:8f:
                    ba:fa:94:fc:45:53:73:90:fa:8c:81:4e:a7:59:e3:
                    f2:27:c7:ff:41:60:cd:ea:72:d2:ed:f3:8f:28:6d:
                    0b:ca:7b:b5:87:fc:89:53:27:3c:42:49:b8:ac:b6:
                    cd:c6:b2:0e:89:0c:0b:c6:1a:1c:54:fd:12:45:7e:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D6:FC:45:FD:E4:70:F0:59:58:1C:6E:5A:33:3B:84:BF:9B:A4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a5d66a87-f8a9-36cc-b9c0-506ca03e6618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:02:60:21:7b:28:dc:c0:02:fc:65:86:3e:43:24:0e:cc:23:
         0c:ef:3c:a7:a3:e6:e2:7d:e4:d3:cd:c6:b3:a9:25:3c:26:33:
         17:f0:dd:ba:89:8b:cc:63:d2:8e:df:5a:ec:ed:57:6e:1a:ae:
         20:a1:5e:27:67:3f:c4:62:87:aa:74:9f:6a:23:ac:75:ea:3b:
         94:37:70:69:5c:d1:fe:21:ca:72:63:ce:06:c2:9e:29:df:0f:
         ad:56:ba:f1:46:3d:77:59:75:32:17:56:db:9b:00:5d:f6:86:
         2c:ce:24:79:8b:47:d5:01:0f:93:25:7a:b9:2c:74:63:7e:d4:
         ed:7b:a9:23:e1:ab:67:a2:36:cd:a7:0f:4c:49:6d:f1:9a:0f:
         a2:11:54:3c:72:c0:68:93:78:fd:9b:25:e9:f2:78:d1:94:0d:
         58:bb:42:ef:40:95:f4:85:35:40:37:5e:47:50:57:4d:25:b7:
         14:d6:4c:9a:9d:17:be:72:53:28:ef:a0:61:5b:2f:cf:c7:d1:
         79:29:83:ad:43:5d:7c:b5:30:42:cb:e3:8c:63:05:ea:71:24:
         96:7d:bf:1a:20:9c:b2:97:ae:08:a4:ef:35:17:2c:f2:35:1b:
         7f:a0:be:9f:9a:ec:ba:36:60:8a:65:e9:e0:15:70:92:0f:b4:
         fa:94:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:08 2024 by rpki-client on console-ams.rpki-client.org