Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa
File:                     430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa (raw, json)
Hash identifier:          2EjM/8jVQgFXHusNUSSDTJdKTxRncbY2vQiTYlU3dco=
Subject key identifier:   1F:C3:4A:22:BD:5F:F6:76:64:E5:07:26:D4:1B:E9:36:D1:26:86:7D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D86DC55442F59ABF323600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     53256
IP address blocks:        199.36.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6d:c5:54:42:f5:9a:bf:32:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=63e08737-5325-4ff1-a030-4f0b0a4a4bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:39:7d:d6:61:90:9d:11:e0:7d:29:d7:81:
                    4f:1e:47:98:f5:c9:49:19:00:e0:67:20:23:03:2d:
                    db:77:72:70:3e:3e:88:ba:96:85:d6:e9:65:68:e7:
                    63:2a:08:84:b6:8d:6a:43:c8:fd:b7:e7:47:eb:54:
                    e1:d1:07:c3:99:6a:3b:d0:2b:02:83:a0:8c:c6:7d:
                    10:ad:90:59:77:5b:ca:e7:94:9e:30:b1:9c:87:27:
                    4c:bc:73:a9:f9:99:67:8d:de:fb:ae:f5:97:ee:89:
                    3e:66:f6:8f:be:f2:1e:60:2f:36:09:a0:f4:4b:01:
                    56:65:80:b5:03:02:c6:4c:fd:c5:dc:35:77:b4:03:
                    b1:55:86:14:86:f1:1c:d2:4e:25:c6:9f:64:be:a7:
                    3b:29:fd:90:29:45:97:84:fe:5b:16:fc:ca:95:6c:
                    85:fe:79:b3:11:75:4a:89:60:37:15:58:33:6d:dd:
                    5e:b2:39:49:50:73:1d:fc:ec:22:5e:18:72:8c:46:
                    b7:05:fb:18:01:43:c5:e1:85:76:5c:22:6d:a9:1e:
                    5c:ad:d2:4c:ed:f7:17:ce:56:1b:b2:de:c5:0d:a4:
                    5f:01:28:72:4d:02:25:b2:4c:37:1a:9f:6a:c0:75:
                    ed:9a:ce:8d:17:0c:94:d9:e7:12:53:91:d3:bd:f8:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C3:4A:22:BD:5F:F6:76:64:E5:07:26:D4:1B:E9:36:D1:26:86:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:42:e8:54:2e:58:d4:4d:0f:78:7d:00:1e:e0:05:8b:fd:
         07:64:d5:5d:66:e9:04:7e:33:09:f0:d5:12:fc:5a:fc:73:36:
         3f:f7:aa:56:6f:4e:a6:ca:66:5a:68:80:d0:62:d8:b3:50:f8:
         b5:eb:ac:2b:66:2c:2e:20:18:71:64:e9:b3:27:7d:57:8e:f8:
         48:ca:be:56:8c:25:a0:5a:a8:ec:77:ce:58:4e:d7:8a:1b:50:
         07:71:eb:3b:81:eb:c5:09:f6:a6:8f:9d:a9:28:b3:03:1d:e3:
         53:dc:cb:e4:cc:a6:b9:51:cd:20:54:ee:22:e9:b2:85:9a:be:
         01:bb:b7:17:dd:5c:15:6c:5d:05:ed:5f:7f:bd:3b:ec:9b:07:
         79:c3:e5:17:5f:1c:d8:6c:07:0b:c3:41:a4:1d:18:8b:06:c7:
         fc:39:22:04:06:bd:fd:9f:c9:fd:5e:59:c6:d3:c6:2e:81:31:
         0e:df:14:af:48:f0:a4:d2:16:e2:99:2d:07:33:82:bb:84:6d:
         47:59:1e:d4:36:2e:b8:da:b3:b0:5a:7e:81:be:e7:e6:b1:16:
         fe:c1:bd:d0:69:dd:08:32:72:34:f6:23:98:53:e1:e0:00:f6:
         f8:9e:bb:8f:b7:37:e6:83:2c:23:52:e4:8d:fa:f2:79:65:b8:
         2f:8c:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:11 2024 by rpki-client on console-ams.rpki-client.org