Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa
File:                     bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa (raw, json)
Hash identifier:          IizEXicnNUoSOrmFgH270soVw94GC0uGO4NHis5yjyQ=
Subject key identifier:   D1:84:70:E1:DC:F9:4F:C1:94:D1:05:B4:81:7D:2F:8E:F7:46:DB:30
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D86B9F0ED2362977EF0E38
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     63397
IP address blocks:        209.66.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6b:9f:0e:d2:36:29:77:ef:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=555a0d4f-91b9-451a-8942-d88a96666251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:ee:4b:af:83:1b:77:19:4d:3f:ae:74:d2:
                    b6:dd:7e:be:9a:d0:be:38:81:91:1e:3a:c5:e9:c4:
                    59:96:65:29:70:85:2e:51:4a:81:b3:e7:55:31:e4:
                    7b:c1:f8:cf:aa:32:8b:dc:b2:ec:9e:a8:df:a1:85:
                    a5:0d:8e:00:94:9e:48:81:94:fa:bb:aa:95:ce:52:
                    9f:8e:a5:e8:22:a0:35:3b:b0:63:ab:e4:01:64:dc:
                    f2:be:b5:e0:c9:41:0d:a7:fc:8a:22:47:59:71:36:
                    b4:98:8a:61:b0:01:87:86:49:28:bc:6e:f5:75:92:
                    27:2e:10:af:c3:56:2d:2e:49:6b:11:28:53:a1:96:
                    c5:64:17:35:0c:40:94:a3:fa:fd:24:63:45:56:1d:
                    3f:84:8f:35:f3:50:f5:14:f7:f0:4c:cc:51:bb:6b:
                    b4:29:c5:e7:79:a7:10:46:df:63:33:fa:e5:37:52:
                    76:30:d4:89:f8:5b:13:90:43:d0:a5:c4:2d:4a:30:
                    5b:03:e8:8e:5e:eb:56:3d:c2:79:66:6d:3a:32:87:
                    cc:9e:7c:9c:1b:dc:69:2f:9e:a6:b4:67:34:fd:19:
                    5b:4e:a5:49:69:8f:06:92:b3:31:8e:11:aa:e2:d2:
                    dd:02:70:17:b3:c8:3a:a2:89:f9:11:b2:86:bf:a5:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:84:70:E1:DC:F9:4F:C1:94:D1:05:B4:81:7D:2F:8E:F7:46:DB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e7:bd:66:cf:72:87:0c:2e:24:7d:ef:7e:02:a7:60:85:42:
         af:41:3c:48:37:ce:37:47:7a:ab:32:9c:9e:10:3b:0d:79:58:
         3b:ce:f4:fe:1b:80:6b:12:f7:2b:cd:b7:a7:1d:df:4e:f5:b9:
         4b:23:a0:67:ae:b2:d4:bf:44:e9:28:7a:54:5d:67:71:95:37:
         d8:73:7c:d1:39:76:8f:d3:83:d9:31:39:8d:fe:97:b2:7b:bb:
         7b:30:d4:ff:45:0c:65:a6:0d:00:d5:f1:b7:29:9f:b3:96:6a:
         3a:30:6d:0e:43:5c:4d:c1:0b:93:3f:5f:58:d3:3e:e5:b2:2f:
         46:04:9a:0e:41:63:b9:19:f3:75:aa:f6:b2:bd:c6:d8:d6:0f:
         34:b3:de:85:01:8e:11:6a:2a:8a:6c:f0:e6:73:fb:47:fd:8c:
         4b:3f:89:51:80:a1:07:28:d4:5b:f2:91:a9:ec:01:94:f7:e6:
         0b:26:be:ba:22:a1:4b:4c:89:79:c5:ed:40:50:e2:4f:fa:dd:
         52:c2:34:01:9c:f5:63:b3:b0:3b:5a:79:d7:12:b8:2f:92:2a:
         5a:b9:ab:62:43:cf:fc:1e:75:25:35:9e:04:fd:aa:a2:35:a3:
         13:41:88:e5:5a:1e:41:20:a4:d4:e7:fe:97:c1:cd:8c:b7:80:
         f4:c6:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 17:33:16 2024 by rpki-client on console-ams.rpki-client.org