Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa
File:                     4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa (raw, json)
Hash identifier:          NhoP5atIceHSC0OdoIgdbNKaadeb1iTLx/LTDJOQYZM=
Subject key identifier:   DA:9A:76:71:37:9A:F4:0C:BF:B1:E5:DA:E0:0E:4F:64:59:48:2D:5D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845490C98DCE060712E84750980
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa
Signing time:             Thu 21 Mar 2024 21:45:28 +0000
ROA not before:           Thu 21 Mar 2024 21:45:28 +0000
ROA not after:            Wed 19 Jun 2024 21:45:28 +0000
asID:                     36492
IP address blocks:        64.9.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0c:98:dc:e0:60:71:2e:84:75:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:45:28 2024 GMT
            Not After : Jun 19 21:45:28 2024 GMT
        Subject: CN=3fa42628-c2e3-4da9-a9cf-1a2e00de0429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:be:85:ef:55:f7:62:81:53:a3:5f:bd:f9:
                    b6:46:dd:4e:ec:fb:7d:f6:a6:d5:c5:40:d5:69:a9:
                    49:5b:ef:5e:0c:68:ec:9e:b6:7b:43:93:74:5d:d7:
                    fd:be:4e:41:1e:f1:c1:e2:72:38:b2:fd:c8:bf:3d:
                    6c:3e:d8:01:12:5c:b3:6c:b6:6f:c1:f9:5f:6d:ca:
                    5d:bb:cb:07:e9:26:e4:ab:60:a6:fd:54:f7:8d:87:
                    95:b9:2c:bf:7b:be:33:54:05:b3:05:8b:53:5a:4f:
                    e3:d2:85:8f:77:2a:be:4b:2a:fc:e0:85:a5:a7:a7:
                    dc:ba:b1:f8:b5:4e:39:33:e1:68:20:dc:60:a5:6f:
                    89:bc:33:ba:23:a1:e2:39:fb:bb:c9:1f:9b:92:83:
                    04:77:18:d7:01:e2:9d:8a:90:48:97:3e:15:f2:34:
                    e4:a9:6c:e9:e6:c3:a5:f0:68:a2:67:84:a6:9b:7e:
                    d9:49:b1:ab:78:4c:07:d2:f3:19:43:72:4d:20:8f:
                    f2:6d:71:9a:db:85:b2:02:a1:4c:30:dc:55:23:d3:
                    77:7e:03:89:75:e4:85:5c:31:fd:22:2c:b6:ec:f9:
                    95:65:3b:a4:9b:d5:59:ec:e4:13:ca:96:4a:bf:7d:
                    b6:ec:28:a0:6f:cb:e9:46:7b:22:33:e9:df:a1:3e:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9A:76:71:37:9A:F4:0C:BF:B1:E5:DA:E0:0E:4F:64:59:48:2D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:b6:bf:de:e6:ae:65:aa:da:b4:89:bf:b9:e7:95:93:06:
         59:6e:fd:e5:e9:99:d8:71:1a:af:49:24:e1:87:d7:8a:13:d5:
         dd:ed:b2:87:40:83:b4:c2:7d:b7:08:4c:31:82:d0:77:bf:43:
         27:49:7d:7b:21:83:3c:65:82:3e:e8:0f:42:1a:6b:ed:b2:d8:
         e6:ef:c9:90:a8:27:bc:bd:93:a5:32:f8:ae:97:99:5f:2c:33:
         37:5a:70:c9:c8:10:0e:cd:7b:5a:f4:13:cf:d4:fb:3b:0a:f2:
         bb:f7:02:74:a7:27:b0:18:c1:fb:23:84:70:b4:da:20:a6:ac:
         21:56:e0:22:72:90:24:4a:ac:6e:15:79:40:d4:f1:c1:81:a4:
         c8:24:8f:62:61:08:1b:fb:e0:4d:75:48:e5:0a:1c:c4:07:79:
         4a:73:05:6a:02:68:8e:ad:12:68:27:20:63:5e:2b:75:2f:e0:
         35:1b:2b:bb:14:07:bb:be:ea:0d:94:f4:20:eb:19:a6:30:bd:
         29:fa:3c:22:9f:d0:f6:9a:a2:04:3e:ef:5c:ca:47:06:69:70:
         eb:71:c1:87:91:5d:50:89:92:02:de:18:4d:a4:d1:da:e2:3d:
         cb:7b:8e:27:b6:3d:0e:f3:7c:aa:72:f1:6a:b9:5f:63:e1:a5:
         2d:00:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:19 2024 by rpki-client on console-fra.rpki-client.org