Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa
File:                     fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa (raw, json)
Hash identifier:          AjvMWm5MpzyxfedkTuxBky8xUD7cyfzQfx7EwNOzEbk=
Subject key identifier:   14:EE:A8:B6:5B:17:98:40:43:BC:BF:2B:46:1A:7D:A5:99:49:2A:6F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584549083AE1856DDF297C842940
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa
Signing time:             Thu 21 Mar 2024 21:36:40 +0000
ROA not before:           Thu 21 Mar 2024 21:36:40 +0000
ROA not after:            Wed 19 Jun 2024 21:36:40 +0000
asID:                     36492
IP address blocks:        64.9.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:08:3a:e1:85:6d:df:29:7c:84:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:36:40 2024 GMT
            Not After : Jun 19 21:36:40 2024 GMT
        Subject: CN=0fa85dda-3e02-4247-a3f3-3c2e4d71f3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:f9:7b:8c:77:70:54:5a:a9:fe:a5:51:10:
                    b3:9e:9e:68:9d:37:27:38:1f:40:8d:0a:a9:c7:23:
                    a0:ac:c5:6a:89:ec:4e:c6:a7:19:7e:a7:e9:3c:81:
                    9d:db:6e:fd:b4:9c:b1:cc:06:80:a0:49:0c:ab:d8:
                    ec:16:b2:0a:a7:2d:1f:0c:2c:bb:2e:8b:85:eb:0d:
                    97:73:1d:04:33:ee:3c:c3:e8:d6:35:93:5f:8d:da:
                    9f:80:9d:c0:70:fb:93:b7:7e:10:47:8b:52:58:7c:
                    30:e6:65:65:b4:c0:64:5f:b8:c1:32:e9:a0:e4:84:
                    2f:bc:20:6f:e2:d1:6e:35:22:32:76:7a:20:c2:54:
                    71:60:ad:09:f5:8f:8b:7b:b5:7e:f7:e2:b0:b2:9c:
                    5d:78:aa:b0:92:26:17:cc:ee:0e:72:7b:5e:c5:7c:
                    a8:76:6d:d7:f5:62:5a:f3:e2:10:3b:4c:ca:76:62:
                    7b:24:43:5c:67:4b:39:3c:5a:89:ba:35:6a:41:c4:
                    ce:97:3d:48:a1:e0:da:62:5d:18:31:93:90:4f:32:
                    35:b4:b1:a3:c0:59:ed:c5:2b:b8:4a:9a:fa:ee:62:
                    6d:8b:20:e3:e6:93:8d:f6:ab:7f:43:27:6a:ff:a1:
                    a3:ca:c7:e7:ca:c3:93:8a:af:f0:ae:86:2f:6d:69:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EE:A8:B6:5B:17:98:40:43:BC:BF:2B:46:1A:7D:A5:99:49:2A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fdb157a8-cc0a-3de6-9c08-b7d4a03808c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:49:23:06:e2:97:78:1b:83:94:fb:5c:77:dd:2c:a4:64:54:
         9b:3f:14:6f:f2:65:52:12:33:23:c3:c7:2a:f2:a4:1a:a4:9f:
         ec:01:7a:91:99:a1:85:e5:b2:59:44:a1:5e:6f:3a:b1:be:a1:
         a3:b9:16:5d:a3:18:27:a4:1e:3f:82:6b:3c:30:04:e9:65:0d:
         29:62:af:79:4b:d4:c8:8e:0a:07:68:0f:a8:1f:55:e4:13:da:
         c5:91:55:ba:7d:b0:f9:8e:10:1a:19:55:b4:4e:93:c4:6e:31:
         7f:c6:1c:bf:10:2e:72:ca:07:9a:1f:b8:58:d3:87:0f:76:fd:
         4d:3d:88:55:e2:69:04:ca:1c:73:49:5b:6c:6e:2b:9b:6f:47:
         17:a0:0b:f3:23:53:b1:bb:23:da:6e:44:6b:b6:24:46:7c:6d:
         44:aa:02:4e:b2:47:e6:a3:9f:aa:74:bd:ad:a7:b2:07:18:ed:
         cf:18:ba:81:30:e8:19:e1:fd:e1:25:88:3d:20:ec:62:a2:0b:
         6e:45:33:47:8a:d3:e3:51:4f:76:3e:5b:27:68:16:1a:b9:0c:
         7d:be:76:c0:d7:c9:5a:34:6a:21:9c:a8:e0:ac:02:86:ae:98:
         a9:c5:ef:02:04:b3:5a:c6:68:43:f8:08:13:d0:e9:fd:35:3b:
         1c:a6:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:41 2024 by rpki-client on console-ams.rpki-client.org