Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2df008f4-9165-39db-aadb-70bcfaaaa611.roa
File:                     2df008f4-9165-39db-aadb-70bcfaaaa611.roa (raw, json)
Hash identifier:          0yBFCAfgRRHA2Wufh2cGcVuA2Us7TL53+sd+KgZ9POY=
Subject key identifier:   F8:6F:0E:7A:8D:38:0F:8B:B5:91:45:9B:A5:29:FB:00:2B:37:7F:A6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858459A6336B6EE8CD73D43BDBF40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2df008f4-9165-39db-aadb-70bcfaaaa611.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     16503
IP address blocks:        64.20.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:36:b6:ee:8c:d7:3d:43:bd:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=b30a4129-2631-4bc9-8233-cb0a5836c3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:16:1e:ab:3c:e0:e0:78:e7:29:84:b1:8c:
                    e6:1e:28:5a:d9:ac:41:13:60:3a:1b:69:25:bb:9c:
                    c5:ec:8d:8a:10:f8:85:82:12:07:dd:80:1b:0c:32:
                    12:4e:54:0d:eb:e0:ce:34:45:bc:25:4c:db:a2:b9:
                    2d:94:b6:f9:5e:1c:f9:a4:52:9a:f7:eb:d6:25:33:
                    0c:60:82:a4:ae:e8:a8:e3:75:44:24:54:c0:a5:9f:
                    0e:c0:99:52:a8:0a:7a:dc:7b:e5:3d:5a:09:4d:62:
                    e4:91:bc:3a:82:0d:b3:ca:69:0b:4e:e5:87:bf:13:
                    58:75:13:af:cb:cc:96:8e:5c:36:c3:75:28:0a:a5:
                    e5:8b:fd:d9:5d:de:ed:10:ac:47:fe:a9:f4:90:36:
                    3f:ce:48:7d:c5:8c:0a:0e:e9:bf:aa:23:af:5a:b7:
                    f1:71:dd:67:86:d2:6e:00:75:6f:10:08:f7:99:0c:
                    7d:95:52:cd:8f:76:3c:89:f5:0b:82:71:35:9c:31:
                    02:b0:b1:1e:c2:2e:cd:75:7d:99:6c:af:20:04:87:
                    e7:15:de:a8:0f:a3:ae:a3:1a:3a:5c:82:8d:2a:95:
                    ef:f1:72:27:d0:a5:b4:fe:51:de:bc:f7:8c:ab:f0:
                    07:07:da:6f:c4:c5:65:c3:f4:a9:83:36:18:8d:c6:
                    5f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6F:0E:7A:8D:38:0F:8B:B5:91:45:9B:A5:29:FB:00:2B:37:7F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2df008f4-9165-39db-aadb-70bcfaaaa611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:ae:2e:7c:67:4b:6a:c6:d8:de:b1:39:10:a9:92:2c:52:
         c9:35:35:ee:18:a7:21:f5:bf:7a:27:27:c3:e5:4f:a1:05:4c:
         8f:37:32:92:ae:fc:41:23:c7:62:a3:3a:f2:5e:ef:25:c9:e0:
         52:3a:19:1b:2d:d8:d6:da:fc:1d:7d:63:04:24:89:8e:d0:ba:
         9c:c2:94:61:b2:3b:6d:87:51:0d:c1:6b:e4:51:f8:35:f6:26:
         f7:30:bd:ad:8c:29:a1:76:17:04:d4:8e:24:ed:be:4b:5b:5d:
         ed:fe:cb:0f:50:22:c6:3b:74:0b:b8:f7:c5:67:fe:a8:18:e0:
         b3:7f:28:1f:96:19:26:c2:47:d3:dd:18:70:b4:e0:37:e5:0b:
         eb:f2:cb:2f:79:1d:44:99:03:d4:9f:c6:41:c8:f7:8d:3d:dd:
         03:58:81:4f:33:84:d8:56:7a:b0:c8:bf:9c:84:03:ec:7d:ea:
         b5:28:26:12:67:0d:09:09:05:b3:1a:5f:f2:ab:46:47:03:58:
         04:50:df:ef:a0:3d:d1:d7:97:44:56:fa:fa:03:41:fa:1a:f3:
         78:c4:8d:2b:91:03:6b:fb:58:12:8a:1c:37:a5:08:61:70:77:
         ef:24:8d:96:26:e6:66:dd:cf:2e:98:ff:e5:24:a5:58:80:8c:
         16:c9:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:34 2024 by rpki-client on console-fra.rpki-client.org