Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
File:                     7942817f-a176-37e5-8911-6f29c62a1537.roa (raw, json)
Hash identifier:          PuwZa601zDOo6gESNOg/6wy0gupQUlVeHD8zmz9nvyI=
Subject key identifier:   A1:8B:5A:2A:D6:14:3A:BD:EE:55:9C:ED:BE:2C:D1:A4:BE:A2:F1:72
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F43285845CB3E49ED9F8FED8965B8E880
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     393885
IP address blocks:        64.71.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:49:ed:9f:8f:ed:89:65:b8:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=53dc6c42-2d0e-4528-87d9-675d87460209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:a8:c9:a4:ff:c7:88:b1:f4:0d:4e:1f:d2:
                    15:a5:e8:a2:34:a3:8d:6c:0c:2b:1d:74:ca:fb:f8:
                    9f:47:ea:76:d3:96:4d:43:93:22:1f:42:44:fa:5b:
                    4c:11:dd:5a:e8:cb:c9:c9:f1:cf:23:a6:55:3e:bd:
                    35:16:e2:ab:33:e1:39:3d:bc:f0:dd:b0:7d:0c:07:
                    66:62:ab:6c:e1:50:03:6b:67:7b:77:b6:f1:dd:3f:
                    ef:73:bb:f6:60:cd:1b:94:a4:57:37:a0:85:de:88:
                    c8:99:e6:2c:6a:4f:1d:2e:b0:66:b2:ff:60:0f:b5:
                    bf:38:f5:0c:5a:34:58:fe:99:76:8f:93:98:4a:f6:
                    74:d7:37:ec:b8:b7:da:b6:b5:9d:45:1d:fb:00:87:
                    ec:e1:69:f4:1d:3a:81:21:5c:83:76:b6:6c:f8:1f:
                    c9:49:e0:8c:98:23:e1:f6:d1:8e:66:da:a7:c5:a2:
                    7a:1e:10:0d:d3:7c:db:1a:39:86:18:55:74:f4:90:
                    ed:3d:93:e1:31:ba:c0:25:09:1c:1a:0e:b4:8b:50:
                    ef:6e:d4:9a:c7:69:ae:a5:3a:6c:43:6d:18:f0:c8:
                    dc:c6:f0:c2:1c:b4:4f:69:af:c1:f7:a2:37:6c:39:
                    55:94:74:9b:40:82:cd:2d:76:96:0d:1c:91:77:c9:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:5A:2A:D6:14:3A:BD:EE:55:9C:ED:BE:2C:D1:A4:BE:A2:F1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:17:ca:db:c4:53:ab:8a:80:aa:5a:0f:c7:68:22:0a:b8:
         bc:4e:26:e3:0e:f7:06:ba:60:11:73:b8:90:77:7e:5d:15:67:
         3b:3b:1d:02:57:75:f1:c0:90:c6:ac:b2:68:ba:9f:1d:9c:a2:
         6f:85:c3:4e:8d:ab:03:19:53:3d:c7:b6:f3:ab:f8:e5:10:e8:
         a0:54:ff:9a:da:30:30:c9:09:8b:28:bf:37:00:71:02:6a:52:
         79:68:9f:91:af:0a:51:3b:57:6a:37:d8:1a:b6:bb:10:ec:69:
         9b:8e:68:73:3a:29:31:a9:2f:1f:75:67:bf:8e:05:40:f9:fb:
         bd:b5:ca:5d:ec:0d:f3:b2:f6:37:67:91:40:80:62:ab:97:f9:
         0d:bf:11:78:eb:7e:b5:e3:17:b1:aa:9f:0d:61:b3:33:40:4b:
         99:b1:b6:03:b0:19:da:eb:53:df:3f:dd:29:68:91:25:1a:62:
         81:d8:2f:44:8a:ec:91:24:f7:b9:88:1e:75:e3:08:30:67:5c:
         6b:73:ac:bf:c7:b9:d7:22:b5:c6:1f:7d:61:4b:8c:16:39:a8:
         98:65:a3:9b:f0:4d:54:56:37:15:70:bc:b4:da:81:c9:e6:f1:
         92:af:a2:9b:e3:f0:26:b4:51:cb:ad:45:a2:2d:df:37:14:cc:
         cd:b1:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:37 2024 by rpki-client on console-fra.rpki-client.org