Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/65ba6040-2dea-3276-a591-a49c78752230.roa
File:                     65ba6040-2dea-3276-a591-a49c78752230.roa (raw, json)
Hash identifier:          zO4kZ9Bl8waZ57Sb7kAYfC5SYHoxxD2PLY8dnxrMGHg=
Subject key identifier:   BB:D7:B6:83:D6:52:CE:26:DF:A7:39:BC:9C:4C:97:50:2F:DC:BA:B3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845490036886C037D4B6BB0A900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/65ba6040-2dea-3276-a591-a49c78752230.roa
Signing time:             Thu 21 Mar 2024 21:20:31 +0000
ROA not before:           Thu 21 Mar 2024 21:20:31 +0000
ROA not after:            Wed 19 Jun 2024 21:20:31 +0000
asID:                     36492
IP address blocks:        64.9.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:36:88:6c:03:7d:4b:6b:b0:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:20:31 2024 GMT
            Not After : Jun 19 21:20:31 2024 GMT
        Subject: CN=305245ed-79b2-4beb-a8a8-eedbf96049a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:d1:47:6c:9b:6b:5d:76:08:0f:d5:4b:b4:
                    69:da:e3:3b:25:07:54:95:49:dd:e4:fb:2f:ec:31:
                    88:d6:63:18:5b:5e:19:1e:c9:11:81:e0:b6:09:9e:
                    f1:27:18:5b:c7:2a:e4:ce:83:5c:03:c8:d3:bf:53:
                    99:39:17:77:de:9a:b0:55:c6:4b:0f:fd:ed:da:06:
                    b1:29:15:52:02:cf:50:d3:40:07:a9:25:5f:ac:d5:
                    f0:19:26:57:b4:2c:88:f5:be:ed:8a:e1:e0:24:8e:
                    05:5d:d2:f0:57:e2:fe:84:33:55:26:e8:ac:06:92:
                    e2:63:b3:44:f9:35:d6:3e:65:de:ac:f5:0a:3e:1f:
                    93:0a:a7:50:9e:a1:46:1d:75:0e:1c:db:0f:d7:20:
                    6f:d2:ee:7f:82:3f:a2:36:be:a1:8f:4a:95:69:d0:
                    6a:a4:02:0d:2a:dd:80:1e:74:72:aa:a5:e1:ac:54:
                    cd:1b:49:3a:a4:bd:68:8e:77:6a:4e:f5:53:6a:cf:
                    0d:a9:87:64:21:5a:e9:c7:27:22:a9:18:0c:5d:9f:
                    3f:c7:d2:6c:a2:ac:0d:31:47:34:55:7e:dd:ad:a0:
                    90:f2:40:e7:df:72:19:f4:54:17:1b:b6:70:68:96:
                    51:a0:77:17:82:89:19:77:da:9e:85:a1:cf:bd:6a:
                    8a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D7:B6:83:D6:52:CE:26:DF:A7:39:BC:9C:4C:97:50:2F:DC:BA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/65ba6040-2dea-3276-a591-a49c78752230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:85:8b:e7:2f:5c:54:37:df:7c:40:51:31:b2:3a:28:3d:
         22:c9:1f:02:99:19:05:78:9d:75:3c:7b:54:46:c0:bc:b5:95:
         ae:96:ce:26:35:13:b3:ab:be:d9:96:92:88:0c:71:ad:50:81:
         90:72:3f:b7:3c:50:a5:3a:fa:d8:d0:b9:c1:a7:fb:c8:95:aa:
         cc:05:93:5d:3d:84:19:7c:08:7f:79:35:d8:23:68:85:6d:48:
         d1:2a:26:c1:e3:33:e4:2b:82:fe:0f:6e:61:28:4b:8c:09:23:
         74:d6:b3:8a:42:f6:b6:95:89:12:57:a7:b9:ac:f3:62:74:fd:
         43:c2:82:7f:19:18:6c:2d:02:bc:b7:26:27:20:21:18:9b:03:
         71:df:1c:fd:43:fa:83:1e:fc:d3:6e:98:23:e5:56:a6:43:3f:
         20:06:bc:7b:7e:e6:14:ce:2a:db:b1:85:17:27:00:9b:39:61:
         27:53:ff:25:27:92:24:ba:85:51:db:8b:9d:dc:b9:08:d2:9b:
         86:a8:f4:ba:89:60:18:52:00:41:84:ee:1d:cd:ab:b0:d4:90:
         67:04:6f:72:d6:c7:bc:13:5e:a4:22:c6:22:ab:d6:26:19:06:
         ab:86:1b:35:48:2f:36:35:9e:d0:00:46:8d:a3:64:b2:57:61:
         6d:0d:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:19 2024 by rpki-client on console-fra.rpki-client.org