Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff1fd84b-06b7-35b2-8f96-6708889ef001.roa
File:                     ff1fd84b-06b7-35b2-8f96-6708889ef001.roa (raw, json)
Hash identifier:          fPit30tIrUaImFZi73Xy4xSGNBD3dokOkt4GEBW04IQ=
Subject key identifier:   09:5B:67:B3:45:5C:47:70:C3:DA:6F:94:1F:B3:02:0B:EA:36:BC:5D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858457DA87FEB0656251CDA7C0A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff1fd84b-06b7-35b2-8f96-6708889ef001.roa
Signing time:             Tue 09 Apr 2024 18:01:37 +0000
ROA not before:           Tue 09 Apr 2024 18:01:37 +0000
ROA not after:            Mon 08 Jul 2024 18:01:37 +0000
asID:                     6461
IP address blocks:        64.124.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:a8:7f:eb:06:56:25:1c:da:7c:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  9 18:01:37 2024 GMT
            Not After : Jul  8 18:01:37 2024 GMT
        Subject: CN=88036144-8f1b-4d43-b28d-4cb3848815e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:fb:ad:d6:ee:04:0e:cc:99:8a:be:3e:b9:
                    25:6d:60:fb:3e:83:05:9e:56:d5:6d:58:3b:26:f0:
                    cc:33:c9:b6:24:61:03:3d:7b:14:04:f3:13:89:0f:
                    63:40:8b:5e:e5:16:f6:c2:84:5a:3f:ad:77:df:d8:
                    39:de:96:53:1c:4b:b5:53:08:52:e0:00:ac:1e:ad:
                    ec:30:20:32:97:96:c1:11:63:7a:2e:7b:be:7b:d4:
                    82:34:1b:bf:8b:a6:1f:89:c0:cb:eb:65:d1:46:08:
                    21:46:78:64:48:9d:99:b1:5d:bf:da:ae:3b:f8:b1:
                    0a:6b:54:9b:a7:f3:f0:87:f2:c6:d9:4b:e5:96:c9:
                    70:63:b7:b9:7f:03:d9:48:9e:33:49:67:64:b2:82:
                    aa:90:ec:20:d2:66:fb:89:89:bd:42:87:5f:74:f9:
                    3e:08:6c:a4:d7:e2:40:76:22:47:ef:4c:8e:59:5f:
                    a4:65:63:6e:db:34:35:05:37:d3:46:e1:f5:aa:f6:
                    77:78:e7:ae:08:7d:cd:ad:5f:78:0c:b3:d1:9d:16:
                    d9:cf:fe:10:68:43:7f:05:7c:68:e0:c4:32:1c:f0:
                    c0:9b:8c:d3:3b:55:96:36:ce:a5:3a:cc:34:e9:bc:
                    e4:53:49:11:91:7d:0b:3a:db:22:cb:a3:8c:e4:f5:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:67:B3:45:5C:47:70:C3:DA:6F:94:1F:B3:02:0B:EA:36:BC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff1fd84b-06b7-35b2-8f96-6708889ef001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:44:6a:94:fb:0b:b5:88:cc:d0:2f:4f:e2:e8:11:df:ad:43:
         ea:cf:82:04:12:11:c0:32:3d:e5:56:6b:e2:aa:f0:8f:46:d6:
         06:0b:d3:7f:f7:d4:9f:92:1f:7d:b5:f3:6b:0b:12:8d:f9:bb:
         33:77:ee:e6:c0:5a:8d:a9:ec:1d:25:ad:af:b4:86:9a:39:4a:
         f9:f2:95:43:61:c7:ff:b9:c3:d3:c5:4e:97:b7:a0:99:5e:36:
         a7:26:bc:12:a0:f1:d2:48:3b:25:af:30:77:e0:36:ee:78:2f:
         86:77:d6:fe:88:38:29:b2:de:77:7f:f7:a4:fc:50:a2:9d:7a:
         e5:4e:f5:f7:ee:d4:0a:ed:31:04:9d:28:01:b9:08:aa:7f:6f:
         0f:03:87:62:77:9d:fd:c6:3f:65:58:70:d2:8b:ab:ad:53:68:
         21:6c:45:12:5b:86:da:3b:a7:e0:26:6f:61:c4:6b:77:4c:2b:
         8c:90:ea:0d:b7:2f:ed:5d:f2:95:d9:96:8c:f1:c8:fb:1b:36:
         e7:d8:d8:e6:50:3d:04:87:02:1b:c6:fe:ab:9e:fe:5d:14:64:
         2a:f9:cc:cc:79:14:4e:3a:3f:0c:81:e5:91:81:33:e9:5f:90:
         cb:94:6f:be:df:39:c0:e6:83:3c:64:2a:77:b7:74:db:8e:63:
         72:ac:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:58 2024 by rpki-client on console-fra.rpki-client.org