Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa
File:                     42218378-fc67-3b7b-af80-93064b4e7d2a.roa (raw, json)
Hash identifier:          BZ5dcUgkJJLBggBKh1XJCMAsWnYhNojEcLoumKUFQCc=
Subject key identifier:   FC:96:87:C6:50:AC:35:0C:A1:58:0B:44:4F:6D:C2:46:6C:AD:73:16
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845734DAB1A7B6BAC0D0D74E3C0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     7131
IP address blocks:        64.86.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:ab:1a:7b:6b:ac:0d:0d:74:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=f94bb4d2-e455-4352-8ae9-32710cbb9436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:3b:1b:79:5f:74:c0:5f:5d:60:be:05:7c:
                    ce:38:37:e0:38:86:28:3f:b0:94:36:32:62:fa:8f:
                    88:ae:4f:82:fd:e7:03:28:f1:1a:2f:62:13:d4:67:
                    62:26:7a:0e:0a:41:82:7e:fc:29:6a:41:df:5e:c1:
                    a8:b9:ff:e6:8e:2d:5e:8e:5a:70:12:4f:cd:7d:23:
                    e6:35:a0:5b:be:8f:f5:9c:36:42:ea:e5:94:c9:65:
                    66:08:e6:9b:97:d0:02:0c:c8:7e:f0:61:0a:3c:d9:
                    05:8f:04:fc:fa:9d:47:4e:37:86:f1:16:80:9d:88:
                    74:c6:5a:57:2a:48:19:e5:4f:98:0c:6b:20:75:5a:
                    16:ed:1e:12:0b:d5:73:96:8f:44:34:ec:35:4e:7d:
                    7d:d6:c3:94:20:d2:ce:ee:b7:56:6b:0f:43:c6:2d:
                    9e:6c:4d:d8:74:81:02:2b:fc:5d:91:71:62:2b:6e:
                    7c:3c:c6:c4:c0:16:ca:20:71:1b:8a:7e:63:fd:11:
                    93:a1:37:4d:2d:91:27:bc:d9:2a:78:24:28:ca:bb:
                    24:cf:8c:00:ab:3b:4f:61:7c:96:70:23:3b:01:ec:
                    43:94:fa:a5:13:87:e3:c9:49:4b:33:a2:7e:f4:8e:
                    bb:f0:e7:12:5d:22:03:9d:db:ed:1c:ff:e9:07:d4:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:96:87:C6:50:AC:35:0C:A1:58:0B:44:4F:6D:C2:46:6C:AD:73:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fe:9e:77:64:fd:02:92:26:e8:06:54:b5:61:54:f1:d0:53:
         90:b5:d2:a0:27:40:e3:ce:f5:e5:e5:4f:13:31:e4:6a:f0:07:
         01:72:1f:05:a2:a5:77:d7:fa:41:3a:cf:eb:ea:d8:8b:fd:53:
         f9:b6:74:7e:c8:8f:85:78:1c:7a:28:8c:04:ba:7f:d5:34:64:
         87:99:fd:f8:8c:32:4b:4d:ec:55:c1:2d:fd:97:e2:1a:01:04:
         5c:57:79:59:de:3d:6b:9a:83:76:67:6a:3a:a8:2b:8d:42:d2:
         af:ae:ab:a0:9f:69:f9:57:15:dd:43:00:b2:13:2b:9b:40:5e:
         c1:c7:e8:11:64:f1:55:57:38:e8:70:da:6a:42:a6:f8:36:ee:
         51:f4:43:c7:6e:b2:82:55:3f:90:0c:ec:05:f4:ce:b2:a9:6b:
         0c:12:88:9c:3e:f8:85:32:7b:a0:37:32:ee:e7:02:0a:44:8f:
         d6:10:0c:bd:e9:47:dd:5f:5d:23:9b:c9:11:9b:64:21:42:ee:
         28:9c:47:46:b2:ca:8a:bf:4d:c3:77:58:44:b0:f7:19:90:63:
         da:e1:4c:8d:60:94:f1:c9:58:c9:52:5f:b4:ae:83:a6:11:e8:
         13:3f:03:63:82:31:09:fd:83:ed:7d:ae:20:77:de:92:28:71:
         a8:52:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:03:49 2024 by rpki-client on console-ams.rpki-client.org