Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/409a3f9a-448e-30a4-951e-9fd76c92a86d.roa
File:                     409a3f9a-448e-30a4-951e-9fd76c92a86d.roa (raw, json)
Hash identifier:          O4eE4KOWTbQ3+K4KhaaIllaiPMlDQBTD1k4F0BNfK3w=
Subject key identifier:   91:5B:DE:99:A3:8E:24:25:46:87:17:CB:B7:3B:E4:93:81:D7:B1:6C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285845734DA350A6D0BC55346ED200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/409a3f9a-448e-30a4-951e-9fd76c92a86d.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     395365
IP address blocks:        64.125.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a3:50:a6:d0:bc:55:34:6e:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=2dd4ab55-3bd7-4c89-a117-65bd4f43a1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:1c:dd:69:2a:04:ef:aa:70:84:cc:a5:f2:
                    ac:6f:fc:34:f8:fa:b9:11:86:85:fe:10:07:78:44:
                    fe:d0:cb:5f:30:ba:fe:36:a7:1e:e5:c9:d1:39:ff:
                    47:de:b8:2f:d1:84:f7:76:88:15:e3:70:b1:97:34:
                    c3:f4:3d:93:e6:bc:b9:5b:6a:39:92:54:ef:f3:7c:
                    6a:60:d5:53:eb:a9:7a:91:3c:ee:21:04:ff:8c:cd:
                    e8:e5:85:77:29:bd:d5:df:c2:5e:ac:e0:d1:92:12:
                    b9:a8:4f:19:46:b9:c9:79:f5:1f:12:11:92:93:81:
                    4b:50:85:48:49:1f:a2:8d:2e:5c:6d:00:49:ff:1b:
                    1f:26:aa:20:57:93:1d:01:fb:e3:ee:f0:e7:a1:f8:
                    e5:e2:c7:2b:56:8c:f4:c1:0f:83:ee:76:70:33:f0:
                    53:6c:35:ff:7d:c2:03:c7:c3:b4:f3:f6:7c:ab:a2:
                    38:56:e8:72:ee:dd:7d:37:68:9e:f1:0b:97:c2:0e:
                    ac:c9:64:19:1f:cf:66:2e:dc:d6:fc:63:fe:a6:20:
                    7f:d7:87:16:2b:cb:fe:64:57:fb:7f:7a:fa:37:0b:
                    ee:e3:0e:ae:43:26:c5:fa:a7:c1:4c:24:32:09:eb:
                    97:b1:40:ac:a5:0e:c4:f5:4f:1d:d2:74:aa:ea:22:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5B:DE:99:A3:8E:24:25:46:87:17:CB:B7:3B:E4:93:81:D7:B1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/409a3f9a-448e-30a4-951e-9fd76c92a86d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:c0:66:13:d3:e1:41:57:03:66:87:73:f5:b9:1d:bb:d3:b3:
         fc:34:5d:f9:29:58:f2:19:a3:04:2a:22:32:ee:2b:49:37:75:
         fd:ad:d5:27:f5:a0:cc:46:b4:14:d3:fd:d0:62:7f:18:ac:a8:
         fb:f8:c4:94:64:04:93:75:32:c3:a7:03:a8:1b:09:9d:5a:72:
         58:c4:c2:bf:b7:7f:25:7c:3e:65:9e:07:87:db:f3:d8:f4:0f:
         86:5f:58:d8:a3:1b:19:45:f5:4e:59:37:41:c3:ac:10:69:1a:
         f0:23:da:7d:22:df:16:fc:bd:3a:da:5f:25:f2:a6:69:ef:7f:
         60:69:2d:04:aa:bc:41:08:7a:c3:10:df:de:fa:fe:81:48:d2:
         97:d4:71:ce:3e:fd:b4:d8:15:04:6f:30:f2:ae:93:54:d0:b1:
         50:33:64:7e:e6:5d:cc:ea:cf:9e:d3:6f:2f:b1:55:c9:ee:fa:
         19:7b:c9:d4:46:2d:08:ca:64:33:aa:85:7f:bb:cb:10:13:78:
         bf:a1:b2:62:58:ab:fa:47:34:cf:4a:24:c5:9a:4e:bc:58:12:
         9b:7b:cd:29:15:a6:58:09:36:dd:e9:27:f2:ea:68:70:d9:82:
         ec:1c:9c:39:00:e5:d0:37:c1:eb:c0:44:9f:c7:39:47:1e:aa:
         04:93:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:29 2024 by rpki-client on console-ams.rpki-client.org