Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/349483ad-6aa6-3640-8b37-45ede995a1aa.roa
File:                     349483ad-6aa6-3640-8b37-45ede995a1aa.roa (raw, json)
Hash identifier:          hWaMUga9NtzXCOaOwTf3PLY8CmBV2WW+Xv5kOakAiSI=
Subject key identifier:   B4:DA:5D:D6:F5:58:21:7C:EA:E2:92:F1:F6:58:7D:3F:33:9D:7B:8D
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F432858451B7C37284D54269068EBA110
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/349483ad-6aa6-3640-8b37-45ede995a1aa.roa
Signing time:             Tue 05 Mar 2024 14:03:11 +0000
ROA not before:           Tue 05 Mar 2024 14:03:11 +0000
ROA not after:            Mon 03 Jun 2024 13:03:11 +0000
asID:                     398391
IP address blocks:        64.226.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7c:37:28:4d:54:26:90:68:eb:a1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar  5 14:03:11 2024 GMT
            Not After : Jun  3 13:03:11 2024 GMT
        Subject: CN=5412ea46-80d9-46b4-bfbb-8864d53250aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:f4:98:18:3d:56:6f:fc:1a:f4:d7:83:83:
                    01:ca:42:8b:df:12:14:2d:76:10:c4:dd:4b:5a:8f:
                    1f:fe:4d:f1:00:bb:d5:82:78:8a:96:5c:2a:f8:8f:
                    96:7a:e2:c3:b5:f8:fe:21:dd:53:cb:7d:f3:43:e6:
                    b8:13:3f:8a:47:df:8b:50:00:58:b1:f7:57:05:09:
                    5d:3b:30:ca:9d:81:c1:e1:ca:57:a8:31:1b:44:11:
                    8d:ed:67:95:41:39:a4:00:42:d8:2d:aa:98:eb:84:
                    9d:90:9e:5e:d6:e7:24:ab:d9:52:49:a7:5d:bd:15:
                    ae:18:38:ca:4b:2f:d9:ff:70:9a:59:9c:d1:9f:86:
                    3e:49:51:3a:64:71:9d:94:66:4c:5d:17:1e:c3:68:
                    51:4b:55:53:0a:69:bd:8b:81:cf:36:4d:85:80:a5:
                    17:07:4b:14:42:83:2f:b3:1b:95:dc:b6:40:27:b1:
                    35:6b:bb:25:9b:f1:e4:6a:f8:0c:30:b3:12:16:34:
                    20:a2:cf:42:27:f0:81:ff:09:52:23:b7:20:48:b6:
                    0d:6d:1a:78:6a:f5:c1:86:64:8f:ec:55:54:cd:27:
                    0e:d3:54:33:cb:d4:fc:28:e5:6c:15:99:f4:0a:1c:
                    75:41:db:94:f7:dc:c5:2c:47:4c:05:fa:6b:66:ca:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:5D:D6:F5:58:21:7C:EA:E2:92:F1:F6:58:7D:3F:33:9D:7B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/349483ad-6aa6-3640-8b37-45ede995a1aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:26:22:5e:3a:3d:d2:1e:cf:f2:67:53:a8:fd:dc:22:65:
         69:c8:b7:c2:36:6e:bc:38:3a:f0:d6:a1:a8:35:71:6a:17:9f:
         4b:d5:33:2a:ec:d8:d8:0c:32:c5:dc:ce:98:d1:eb:8d:3b:3c:
         f7:59:a1:e0:fa:6b:fc:c1:fb:03:23:2c:84:3f:24:b9:8b:cf:
         24:f7:70:63:41:49:bc:bd:af:47:bb:6e:c2:fa:45:54:7f:87:
         7a:8d:26:7b:ec:7c:36:9b:cb:8b:93:0a:9e:90:34:18:4e:5a:
         aa:15:27:76:e0:35:66:88:00:53:d5:9a:1e:00:db:1c:af:6c:
         19:72:97:3e:f1:a0:16:5b:ba:f1:b7:f9:ff:42:b8:ec:07:05:
         8c:48:07:92:7d:b8:19:80:e0:f5:cd:12:04:c1:a7:4a:95:85:
         2a:d7:87:f9:d5:a0:fa:f1:25:48:24:63:38:a2:c6:10:b2:54:
         2a:ae:dc:98:f2:1f:84:82:73:f1:04:c4:2a:2d:ae:82:66:0d:
         42:ac:4b:37:7f:4f:8c:76:ca:9b:7d:1b:88:68:2d:31:97:96:
         97:78:0c:9e:3b:9d:d7:14:0d:11:2e:5b:d6:dd:13:a2:f2:a8:
         16:ee:30:10:c2:a4:4d:a9:79:50:79:d2:77:ba:d7:0e:c9:eb:
         31:8b:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:12 2024 by rpki-client on console-ams.rpki-client.org