Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c05c172a-4114-3558-b221-9e9d748676b1.roa
File:                     c05c172a-4114-3558-b221-9e9d748676b1.roa (raw, json)
Hash identifier:          3dmV6k+c5vyxYMobJDrU5crOL1pr7ZyPegZPfN2SbWE=
Subject key identifier:   48:EE:93:CD:20:7B:FD:5B:B6:69:69:08:77:CA:31:8B:94:ED:96:58
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F432858455B92ED38B6B2A400B84914D0
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c05c172a-4114-3558-b221-9e9d748676b1.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     398465
IP address blocks:        64.112.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ed:38:b6:b2:a4:00:b8:49:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=1be1f5f1-84b9-4275-b4bd-46c79a858ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:7b:ab:6f:ae:b5:86:0f:2e:20:3b:6d:d1:
                    49:ff:a7:de:af:d0:6a:14:ef:cb:25:1a:9a:e6:12:
                    0e:f1:5b:84:d7:01:be:71:7a:a9:6b:b5:c4:62:e5:
                    80:ce:cd:e2:f2:5c:a4:6f:d1:5a:63:b4:fb:8f:21:
                    d3:e0:81:44:62:95:b3:bf:c9:c4:68:89:ea:f2:91:
                    cf:da:bb:22:1e:6f:6f:af:86:a4:ce:a1:af:a4:fd:
                    e6:6a:66:88:c5:84:58:80:c5:2e:86:8e:68:63:91:
                    aa:1e:2d:9b:ea:dd:77:32:00:eb:74:36:2b:01:5e:
                    39:87:f1:f5:44:78:9d:64:b2:20:49:08:58:ab:d1:
                    db:12:16:b1:a1:7d:58:fa:01:e1:18:68:07:cf:f4:
                    7f:bd:59:21:2a:8e:ff:94:0e:5e:a9:63:05:bd:67:
                    ab:ca:69:2b:2a:62:4e:35:79:3d:23:4c:8f:72:30:
                    c0:1f:5a:ba:48:15:05:72:7e:2f:91:67:58:4c:10:
                    bb:48:9b:67:fd:ce:c4:d9:24:fc:49:df:36:2a:47:
                    a3:af:66:a9:47:24:27:aa:8e:0d:f1:2e:bb:34:33:
                    5e:29:d9:c0:3b:fb:67:b0:7f:32:b4:5d:0e:cb:d6:
                    35:42:11:0a:2b:48:e8:a9:5f:eb:7a:5d:96:51:19:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:93:CD:20:7B:FD:5B:B6:69:69:08:77:CA:31:8B:94:ED:96:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c05c172a-4114-3558-b221-9e9d748676b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:50:39:c3:8d:4f:0e:76:3e:f7:2a:7b:1a:84:35:9f:c6:f0:
         3b:da:03:01:d3:8c:22:df:f0:55:05:fb:fa:f0:d1:b7:8d:90:
         fe:75:b4:a8:17:c8:2c:87:63:d1:d6:11:04:90:fa:33:76:49:
         21:70:27:89:5a:85:b1:1b:9a:2b:38:08:39:55:94:f8:35:9c:
         cc:f6:17:e2:60:f7:42:09:39:89:a7:2b:dd:c8:dc:4a:2e:a8:
         7c:a0:e4:8e:86:36:ed:62:b3:68:c1:54:cf:d2:0c:fe:1a:6d:
         1e:7d:3b:fe:64:3a:12:c7:54:d6:da:a3:20:a7:98:e5:ea:a1:
         3b:c0:93:26:d5:bc:54:f9:c3:70:7d:23:cd:76:fe:c8:2f:4f:
         06:0f:ab:8f:34:cd:39:cc:01:ad:e9:04:88:44:40:96:e9:8c:
         47:34:c9:b4:07:a0:65:0b:a5:e9:31:49:de:bb:88:f5:b3:23:
         27:87:b2:38:f3:10:e2:0f:aa:86:97:68:57:3d:9a:ef:6c:b5:
         69:ff:80:bb:d7:41:a9:0a:1e:dd:4b:14:0c:76:52:31:36:e6:
         e7:f8:5e:29:d1:1d:0f:67:74:70:8f:f2:71:a0:c9:f0:1d:14:
         bc:b3:dc:a5:8c:53:75:19:32:f1:bf:82:ed:5b:94:ba:e7:3c:
         6a:07:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:15:12 2024 by rpki-client on console-fra.rpki-client.org