Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a7ce4e86-5d35-31d4-9183-5e896f0126d7.roa
File:                     a7ce4e86-5d35-31d4-9183-5e896f0126d7.roa (raw, json)
Hash identifier:          b1pDsej+85vICByY4HoLl1v2UhRypL1e2fwJalbaekw=
Subject key identifier:   33:AD:AE:6F:66:66:33:84:E5:FD:F0:C9:22:46:98:56:26:37:3E:80
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858457DA970E3EE10180C1DE6DE40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a7ce4e86-5d35-31d4-9183-5e896f0126d7.roa
Signing time:             Tue 09 Apr 2024 18:03:31 +0000
ROA not before:           Tue 09 Apr 2024 18:03:31 +0000
ROA not after:            Mon 08 Jul 2024 18:03:31 +0000
asID:                     6461
IP address blocks:        64.124.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:a9:70:e3:ee:10:18:0c:1d:e6:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  9 18:03:31 2024 GMT
            Not After : Jul  8 18:03:31 2024 GMT
        Subject: CN=019dd624-eb0c-4154-8cd9-ecd752c4bd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:e2:77:86:14:7f:6c:20:fd:ee:75:0b:6c:
                    64:1b:9a:7a:d7:77:7d:8a:f7:40:16:eb:b5:d4:48:
                    e5:64:71:38:0f:9c:53:92:d1:54:7b:ac:0c:8c:f1:
                    1a:ee:bb:51:7f:63:48:05:f6:85:e3:0c:1b:47:1e:
                    be:aa:9c:4c:1c:f3:4e:e0:12:e2:9d:33:9a:e2:77:
                    3b:30:47:c5:5d:08:30:73:05:37:64:81:34:13:d0:
                    db:c5:73:18:80:a3:1e:7a:52:81:82:ca:14:8f:50:
                    11:1b:33:51:32:fd:01:b9:66:bf:58:22:37:17:45:
                    9f:1f:0c:96:e2:49:23:0e:22:1f:af:d4:c2:f8:74:
                    82:e2:77:26:b7:e3:f4:c6:ff:8e:f3:e9:92:73:25:
                    b2:b1:04:2d:bc:68:21:d8:c0:81:47:55:97:fb:3e:
                    2e:19:65:e5:b1:95:bf:6e:41:ef:2b:51:cc:5c:89:
                    ac:db:97:74:79:6a:9c:3f:f6:b9:16:19:f4:eb:33:
                    1b:1e:95:ee:16:38:4e:0c:d9:16:db:d5:da:03:c3:
                    6b:6c:28:3d:ef:60:c1:ab:af:89:a8:4d:2a:91:71:
                    a3:7f:06:a2:48:c1:65:c3:a2:29:9a:ab:3b:e0:2f:
                    26:f8:8f:e1:09:62:9d:ad:29:be:b3:8e:f3:f2:3a:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AD:AE:6F:66:66:33:84:E5:FD:F0:C9:22:46:98:56:26:37:3E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a7ce4e86-5d35-31d4-9183-5e896f0126d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:38:ff:8a:98:b0:6e:d3:5e:91:0f:46:bc:6a:8a:5c:77:b3:
         05:c4:20:29:9c:45:28:de:ac:33:2c:7f:d8:26:e1:37:e2:ac:
         97:bd:50:f7:eb:18:8d:26:83:fe:a8:ad:21:46:1c:02:93:b7:
         23:1a:15:8a:8d:ec:d7:12:25:ad:4d:8f:f0:8f:c6:c6:cd:c2:
         08:a2:b6:8c:9b:b2:36:99:5f:d6:37:a9:0d:d8:db:1d:f1:33:
         75:25:ad:08:f0:c3:65:f1:d4:14:0c:22:37:de:e2:8b:15:c3:
         e3:a5:20:95:c3:3d:ba:7a:e0:0d:81:87:c9:cd:0e:08:86:e5:
         88:e5:4e:0f:c9:00:c1:49:68:28:39:8c:16:a6:a4:8a:4b:b3:
         81:f4:af:26:eb:0d:1f:6a:f0:dc:dd:01:d6:53:b5:79:cf:e4:
         e7:8a:17:76:5e:40:ec:d0:e4:7a:27:41:b5:aa:45:57:e0:ad:
         fc:70:08:19:d1:06:a9:19:8e:18:05:77:4b:88:5b:f4:ab:ae:
         15:87:9a:ad:7a:33:6e:fe:72:07:d4:9f:c1:50:39:71:0c:b8:
         b3:19:fd:55:19:ae:d7:42:4e:16:88:56:9a:3e:e2:c5:d4:04:
         60:3f:2a:3d:58:72:8f:ea:8a:f4:e3:51:76:68:4e:78:54:23:
         30:ee:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:57 2024 by rpki-client on console-fra.rpki-client.org