Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa
File:                     6b8157d7-528a-355c-8d23-f69435bf6d41.roa (raw, json)
Hash identifier:          rdZ8uvyDAht5nZSCYeeLpT0Jl3aHj8OingfUAxqH078=
Subject key identifier:   4B:5A:AB:74:9C:3A:80:4D:3A:08:B5:AC:CE:3A:5E:E8:FA:02:C5:26
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285845AC8A1A8E620F7222A09C6918
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     398391
IP address blocks:        64.226.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:1a:8e:62:0f:72:22:a0:9c:69:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=932c05e3-ad36-47a6-9629-3d2e0d3f8654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:48:57:c8:a9:9b:3d:57:8a:0a:c7:82:45:
                    b4:e3:08:91:57:98:89:e0:70:c5:dd:05:61:36:f3:
                    aa:f5:0b:8c:b4:c2:62:f9:01:f3:70:07:5c:64:51:
                    30:39:ca:e9:34:bf:ed:4c:c6:ff:20:c4:73:a6:24:
                    81:91:7f:61:5e:f9:33:ec:08:a9:19:b6:2c:2f:35:
                    b0:ee:22:0a:9b:52:54:a9:1a:91:d9:58:ca:ee:42:
                    92:ac:36:25:29:96:4d:35:8c:4f:89:e0:63:1f:cb:
                    c4:af:25:79:9f:32:6c:0b:68:29:d1:6a:6e:88:ae:
                    0a:f1:2d:a3:c1:9f:82:3c:b6:04:1b:fb:eb:a8:e1:
                    f2:40:0b:23:11:5a:b7:a4:fd:15:2a:3c:c0:3e:cd:
                    cb:a0:24:41:46:57:a9:02:5d:c2:b9:16:51:4c:47:
                    3f:5f:3a:7d:cc:8a:db:92:61:8e:83:3c:ec:28:11:
                    30:d9:48:0f:68:6f:72:b3:2a:01:b1:7b:30:a7:5f:
                    b5:49:f2:31:01:bc:f3:2d:10:cc:c5:ba:99:62:1b:
                    aa:ef:32:c0:cc:1b:a6:55:f7:cb:96:a1:80:59:94:
                    a0:83:cb:23:e5:9c:cf:09:1b:6c:d8:67:f9:d7:48:
                    b2:86:0b:28:4c:a5:b5:2a:fa:f1:5e:65:a5:07:80:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5A:AB:74:9C:3A:80:4D:3A:08:B5:AC:CE:3A:5E:E8:FA:02:C5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c7:46:cc:95:be:90:44:1e:eb:5a:33:93:18:ad:2c:e6:0e:
         db:3b:68:4a:3c:6c:6f:2b:39:5a:d9:a5:b4:97:b3:e7:c5:70:
         07:e8:23:fc:a0:4d:ad:66:12:aa:f4:4d:4f:a8:e5:35:e7:4c:
         21:a1:7f:61:e0:ff:19:42:9d:6a:ba:64:d6:2a:48:9d:44:cc:
         2d:f5:22:8a:ca:b8:42:93:72:93:3a:eb:b6:f6:b3:5a:1f:0b:
         f6:d6:01:7b:58:a0:7b:36:2e:87:24:53:b7:6f:28:70:bc:10:
         89:53:52:e6:fd:e2:e5:4e:b7:bb:24:48:49:bb:d4:ee:6a:64:
         4c:cf:29:31:d6:18:fb:fa:85:10:9e:e7:8d:49:9e:01:bf:06:
         e0:be:d9:91:22:62:c6:b2:a7:25:5b:40:65:f2:9d:94:dc:7a:
         04:7c:a4:fb:74:4a:c0:7d:c3:d8:5a:6a:2b:bb:64:73:8f:5a:
         2b:37:6a:47:d4:f9:d2:bc:7f:d5:9c:a2:3c:30:1e:da:3d:30:
         20:a1:c8:fa:e3:f9:bf:37:8b:8a:5e:9b:fa:38:44:0a:52:da:
         d2:63:97:62:6a:cb:b4:3d:22:4c:7a:89:a2:56:13:45:11:29:
         33:c4:9a:b7:25:5e:f7:3e:cc:62:c5:b0:5c:c1:66:9a:92:b5:
         5d:2f:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:12 2024 by rpki-client on console-ams.rpki-client.org