Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/07cd378e-37c1-3477-8a9b-b32130d30e61.roa
File:                     07cd378e-37c1-3477-8a9b-b32130d30e61.roa (raw, json)
Hash identifier:          AvkETaXfBq5EqRHOulcklXV/87c60WawF826Dx7RNZM=
Subject key identifier:   42:F5:88:64:7D:D7:66:D0:66:0A:75:97:AD:C4:CB:A9:36:0A:BD:4C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858454902ECF99836F20F6AB9CA00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/07cd378e-37c1-3477-8a9b-b32130d30e61.roa
Signing time:             Thu 21 Mar 2024 21:25:59 +0000
ROA not before:           Thu 21 Mar 2024 21:25:59 +0000
ROA not after:            Wed 19 Jun 2024 21:25:59 +0000
asID:                     36492
IP address blocks:        64.9.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:02:ec:f9:98:36:f2:0f:6a:b9:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:25:59 2024 GMT
            Not After : Jun 19 21:25:59 2024 GMT
        Subject: CN=3f8d18b7-bb62-45dd-8e5e-5de1bcffdb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:12:91:62:52:2b:8a:a2:8f:f3:ed:4d:03:
                    be:ae:1e:96:92:54:f0:83:be:ec:1b:74:15:1e:ba:
                    8c:f9:e6:c6:1b:c8:ad:c2:1f:15:f2:b7:bd:b2:50:
                    be:cb:80:3c:ff:76:c2:6a:01:d4:fe:30:bf:a6:75:
                    46:44:05:59:7b:4f:1e:ac:34:08:68:20:dd:48:08:
                    d3:fb:15:5c:c8:44:f3:e3:bb:9c:3f:6b:e5:f7:1b:
                    8b:df:f1:e1:77:d0:81:64:a3:20:25:f4:f0:ca:2d:
                    f4:37:3b:63:78:bd:db:1e:18:79:74:09:7a:79:72:
                    c4:e1:41:53:13:6f:54:dd:5c:39:c0:70:70:af:0d:
                    25:46:f0:86:00:99:93:39:4b:00:cd:08:da:bb:d6:
                    91:72:eb:2e:e4:a3:53:f3:2b:9a:cb:0c:c5:e8:48:
                    8c:67:ed:6b:75:d0:56:31:15:b5:88:24:eb:74:8f:
                    57:64:2c:b4:0e:ee:dd:3e:ce:b2:90:bc:0c:c2:90:
                    3f:b6:ca:01:6d:95:20:76:e3:28:a6:bd:d2:e4:9d:
                    1e:88:63:ba:da:2e:f9:f4:5b:bb:d7:5c:a5:83:4b:
                    d7:40:64:81:f3:4d:7c:c8:42:b3:3e:f0:41:31:ff:
                    a8:d1:39:0e:48:d2:8c:ab:17:cf:e5:79:24:75:d7:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F5:88:64:7D:D7:66:D0:66:0A:75:97:AD:C4:CB:A9:36:0A:BD:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/07cd378e-37c1-3477-8a9b-b32130d30e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:1c:fc:ea:8d:ee:39:a1:84:bf:bf:8b:32:21:d6:53:2c:
         62:f0:b0:b7:c8:1a:d0:a5:53:2d:31:0d:42:5e:f7:16:c9:9d:
         99:50:71:37:37:ea:12:f7:68:aa:b3:c5:68:bf:72:ad:a3:b0:
         ef:cf:49:10:a6:7c:4c:72:b1:f1:66:ca:0f:d3:ce:31:81:4d:
         57:00:4b:c1:6a:ee:d6:ce:72:4c:c6:e3:6c:3b:03:49:0f:15:
         b0:62:c5:a7:24:82:eb:59:f6:7f:20:db:13:91:9d:87:cf:2f:
         64:34:13:a6:a1:4a:ea:12:eb:98:99:a5:31:3f:6d:51:80:20:
         03:0e:74:e4:7c:ca:eb:b6:ad:cf:b2:c2:fb:86:d6:46:65:ee:
         3b:d3:ae:f2:7f:01:53:44:c0:81:75:20:b6:d1:7c:2b:8d:fb:
         70:be:7f:6f:a1:86:0f:c5:6b:cb:21:69:a8:dd:d1:fa:6a:d2:
         6b:40:5a:ba:00:64:4b:14:4a:0e:97:0f:cb:7b:d0:3e:44:45:
         4a:3d:ce:f9:b9:d8:b8:59:82:03:6e:a5:db:7a:7c:05:ef:01:
         7e:d0:6c:19:f0:42:58:0b:65:6a:e6:d2:18:bb:a1:b7:38:40:
         c2:44:85:c6:23:85:e6:49:ae:59:f8:b7:e4:fc:92:45:5f:90:
         b9:62:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:40 2024 by rpki-client on console-ams.rpki-client.org