Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa
File:                     ef290b1f-5b52-39da-9484-acbda5333639.roa (raw, json)
Hash identifier:          XQp2D2M2LyDia0ngqfFNgtdrtp+Uzz0436rmMTnJyew=
Subject key identifier:   21:1A:9A:BC:B9:B0:B6:84:42:40:1A:0E:92:7A:A2:E2:20:98:12:0D
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858454C38117D1E5CBF44CE9207E0
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     11090
IP address blocks:        64.4.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:11:7d:1e:5c:bf:44:ce:92:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=56edb79b-47a9-42a5-aaed-ab80051d005f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a4:dc:02:01:41:d5:fd:47:0f:89:37:33:77:
                    31:a7:79:dd:c2:09:9a:4e:43:07:fb:5e:75:88:06:
                    6c:b8:d7:1f:75:94:90:d0:8b:45:57:08:cf:0a:9e:
                    7f:7c:bd:e7:19:29:2b:88:17:53:d7:14:73:61:99:
                    7c:03:9b:2f:75:86:e1:06:d9:ef:46:b5:7c:98:94:
                    91:7c:f2:53:fd:47:6e:57:75:69:12:18:d5:5d:82:
                    21:ea:0e:c6:37:9a:84:8d:5f:8c:ee:64:8b:07:97:
                    f9:76:80:88:16:70:6d:7c:20:76:f3:8b:ff:5e:e3:
                    17:46:f4:cd:47:22:8f:62:8b:6b:8a:41:83:56:f3:
                    d5:8e:12:16:ee:b0:43:f2:78:ce:a7:7b:4f:ea:7c:
                    de:b9:ad:cb:a7:79:a9:6b:a4:f2:99:9c:98:d3:1d:
                    95:52:f7:b3:6f:3d:aa:61:5e:bc:07:9c:67:b8:99:
                    8f:46:e5:5e:7e:f4:7c:59:b5:3a:47:54:44:15:8d:
                    3b:ac:02:86:2c:cb:90:db:7f:22:95:eb:9f:bf:df:
                    28:3c:58:e5:8d:b3:f3:d1:f4:96:98:b1:42:d4:2a:
                    45:27:2c:76:fe:23:1d:76:b7:ad:a5:e5:10:56:27:
                    5b:d9:3b:98:4f:ae:bc:0e:86:01:47:17:66:d5:60:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1A:9A:BC:B9:B0:B6:84:42:40:1A:0E:92:7A:A2:E2:20:98:12:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:56:96:d6:6a:0f:9f:7b:0c:9b:ec:bb:24:a6:94:b7:bb:
         2d:74:99:07:40:cf:f9:ff:a4:b9:85:99:85:c6:08:e1:65:81:
         20:be:ad:41:17:11:03:a1:d4:f3:f8:f3:2a:fd:92:2c:ad:4b:
         4c:e5:41:e4:d9:d1:bf:2f:7d:56:f6:81:4c:66:7f:43:4a:48:
         59:84:b0:91:ed:b1:48:f8:68:86:13:ad:c1:a5:89:70:73:86:
         f5:3e:af:c2:29:ac:99:3b:01:a0:68:5d:9d:fd:e8:37:44:8c:
         75:80:71:25:56:df:32:20:f9:cc:a8:4d:f9:66:3c:01:29:72:
         57:e4:62:cf:ed:ca:1d:7d:a4:18:fe:90:63:54:db:3a:3c:73:
         6b:4a:c2:7d:68:f4:f7:ad:33:08:78:67:dc:fa:cb:4c:a1:c1:
         12:2e:b2:4f:2d:88:9c:cf:87:71:56:8c:45:98:ff:ad:97:c6:
         b8:66:05:f0:fb:51:d6:5c:0d:72:bf:3b:b9:d2:c2:6f:30:1e:
         00:ce:bc:32:9b:5e:6c:6a:ff:bb:dc:dd:3b:20:f9:b8:c4:f5:
         2c:0c:d5:4d:01:85:e4:13:58:2e:da:0a:2b:7f:fb:25:a8:19:
         3f:7e:77:48:bd:cc:7e:8b:22:3c:b2:7b:e2:6b:70:ab:dd:d8:
         ea:ce:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:37 2024 by rpki-client on console-fra.rpki-client.org