Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa
File:                     d51fd254-9132-3c5e-9f20-b890540aa448.roa (raw, json)
Hash identifier:          56bMJhQgxlL6S+AsVIYncTzuQZkiLC1H1ln5HaQ07S4=
Subject key identifier:   68:E4:56:1C:D3:48:36:DE:E4:2C:B4:4D:6E:52:4B:8E:E3:D8:C1:92
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858454C38115B01D2BB44F7DFE300
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     11090
IP address blocks:        64.4.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:11:5b:01:d2:bb:44:f7:df:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=9c6831f8-33d5-49d0-8545-6d25d52e06c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:24:66:67:8d:8c:6b:3d:6e:c7:d9:1d:48:
                    da:34:32:9c:ad:b2:94:60:78:70:fc:dd:f5:c6:f5:
                    23:71:23:d0:57:8c:b8:d7:a3:7e:f4:15:66:41:a1:
                    aa:48:55:fa:17:2a:dc:44:fd:7d:96:f6:ba:82:3c:
                    3b:d6:8f:ef:ed:0b:44:51:79:76:f2:57:bb:4d:b6:
                    ed:af:fb:59:50:af:9f:ea:62:7b:19:5d:18:af:28:
                    a5:02:91:0c:e8:56:ed:5e:8c:a0:69:1c:3b:27:83:
                    12:a8:b3:f2:da:63:b0:58:7a:fe:f3:40:36:be:7f:
                    0d:9f:0f:cc:86:5f:e6:dd:2b:2f:c2:87:a1:c4:60:
                    53:6a:36:9f:0a:a0:08:a5:b0:c6:3d:4e:b6:3a:cc:
                    fb:36:33:5d:6e:23:44:6b:2f:4c:4a:c1:a4:cc:03:
                    1c:15:a3:d6:7a:80:e2:f4:af:e3:2e:a1:96:a5:12:
                    71:70:4a:3c:c2:52:d6:0a:b4:28:ec:d3:85:ff:f1:
                    54:d5:c1:32:3b:42:11:9d:5d:0e:93:02:9c:3e:e7:
                    6f:42:98:44:d4:e6:50:18:6b:93:b8:b7:81:6a:6a:
                    72:ca:f5:a1:97:ed:33:02:47:17:c7:59:c5:af:03:
                    d0:c7:b0:d5:2d:b1:94:38:ba:9a:23:e8:94:7a:d0:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:56:1C:D3:48:36:DE:E4:2C:B4:4D:6E:52:4B:8E:E3:D8:C1:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b0:1e:3d:10:02:16:69:ce:2f:a7:55:81:36:82:d9:be:17:
         26:40:95:f1:43:c1:45:0b:48:a3:06:e1:79:66:fe:cd:18:0b:
         37:73:32:ab:f3:4b:16:09:a7:16:16:bd:8c:5a:f6:80:e5:e1:
         f1:ae:0c:5b:dd:4d:8d:f1:5e:f4:b4:7c:8a:e6:ce:e4:c2:a8:
         ed:1d:52:84:e4:9b:89:3d:70:0b:9e:ea:36:89:f6:af:7a:d2:
         44:12:f2:28:47:fe:98:22:2a:d3:52:b2:6d:91:e3:ab:0e:92:
         de:ee:17:a1:04:2a:d4:1f:b5:11:09:7d:2a:3e:b9:0e:87:27:
         78:bc:ee:a3:08:ea:8d:76:91:cb:27:e8:cb:79:ac:f2:77:a5:
         92:b2:0c:4a:e1:5b:97:ab:b5:38:e3:01:42:cd:bf:6e:ba:29:
         7e:f4:f9:97:1c:6f:1f:92:c5:6b:38:77:3e:d5:40:f6:79:85:
         db:78:9b:58:31:f7:46:98:7d:be:49:ed:dc:55:dd:88:74:fe:
         86:82:07:f2:cb:0b:0f:28:fc:41:77:fd:75:19:76:98:c6:06:
         ee:9b:a4:40:8a:4c:50:1c:d0:1a:fc:d6:11:5e:f2:94:71:2c:
         d3:50:c1:87:78:42:4d:be:30:41:92:1c:de:d7:0b:4a:43:e1:
         59:7b:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:36 2024 by rpki-client on console-fra.rpki-client.org