Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa
File:                     5770cdd8-1ebd-3582-874c-5afa608b6756.roa (raw, json)
Hash identifier:          56i3daRtYNZv1jgLKUN/pxQEh7cGeENnZJfNrwjHJt4=
Subject key identifier:   A7:B1:C3:C6:7D:EE:60:74:14:48:C3:E9:03:3A:CE:9C:A1:11:77:B8
Certificate issuer:       /CN=44b5f84d-3917-4ce9-99a1-9bded53bb862
Certificate serial:       010D0C9F43285845777DE0BF118A18BEE6138940
Authority key identifier: F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     398841
IP address blocks:        64.190.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e0:bf:11:8a:18:be:e6:13:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b5f84d-3917-4ce9-99a1-9bded53bb862
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=caea09e4-9654-42cd-bf02-c571c51b607f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:2e:91:ad:b4:56:d2:ea:b2:d1:5a:fd:63:
                    28:d4:55:c8:50:1a:93:b3:31:5e:a6:c8:99:7b:b8:
                    09:31:c6:ed:60:cf:e2:ed:3d:f4:95:ff:1f:32:49:
                    9f:82:60:b4:5e:93:d1:02:c7:69:0b:81:e2:55:ea:
                    75:1e:b8:88:e7:d7:58:9e:9e:26:82:ae:b6:7b:a3:
                    65:f7:37:32:68:32:41:09:40:70:e4:7e:3a:c5:16:
                    89:ec:5f:2d:49:7f:ae:b5:85:7e:09:60:82:84:3f:
                    24:2e:c8:17:73:93:d8:24:88:c3:15:2b:6f:96:4f:
                    c4:f5:c7:65:11:8b:28:b0:26:0e:ed:32:41:04:29:
                    d6:81:12:cb:bb:a4:4d:84:af:c3:68:0e:18:db:8e:
                    b3:eb:4c:38:b0:72:f3:e0:f7:08:1b:8a:04:91:28:
                    95:f0:c7:95:a0:e0:2e:ad:ff:a2:f3:3f:65:73:5a:
                    6b:99:f5:d0:d0:61:b5:84:d9:a2:d5:d0:d4:d0:ca:
                    1d:b5:d2:23:90:37:a2:40:34:63:d8:9c:99:93:94:
                    64:63:9e:29:d5:47:74:e1:ce:ab:ce:71:82:72:8d:
                    1c:f8:2b:9d:ee:b6:f8:81:ff:68:83:38:3c:da:8b:
                    3f:69:01:23:dc:00:32:01:ee:c3:9c:11:ee:ca:89:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B1:C3:C6:7D:EE:60:74:14:48:C3:E9:03:3A:CE:9C:A1:11:77:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.crl

            X509v3 Authority Key Identifier:
                keyid:F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:61:40:91:4e:74:5a:a2:d5:be:42:b7:e3:d1:f6:dc:b3:
         85:ca:6d:ff:d1:73:aa:b7:b0:da:72:17:c0:5a:04:5b:17:bf:
         ec:b6:1a:0e:e0:01:1e:7c:87:04:74:86:03:73:91:ee:7e:a0:
         ec:ea:0f:84:74:96:86:90:f8:87:0f:94:2a:83:06:f3:cf:28:
         f9:ff:1c:07:6e:6c:66:57:08:50:3b:49:05:dc:f3:8e:c1:d9:
         9a:91:7b:5d:da:9b:06:5e:4a:3f:db:f3:02:89:a0:66:93:99:
         4a:df:f0:a7:cb:d8:e2:ae:19:41:ba:66:5d:c3:9b:0c:ee:9d:
         71:33:09:fe:51:c4:80:3d:01:47:b3:9b:ab:d1:6c:05:1a:39:
         88:98:32:60:ec:03:38:fe:9b:48:43:9b:36:8b:4f:93:7c:af:
         70:4d:f6:b0:95:d0:c5:5c:e8:47:b5:cf:0a:44:db:07:ba:61:
         bc:2c:31:57:cf:ca:fb:fe:e8:ca:9b:2f:19:fc:c6:e0:59:89:
         23:08:26:ea:68:06:72:0c:e3:db:77:3b:7b:12:e8:c8:53:c6:
         8e:df:9e:fc:3d:23:f7:a1:37:46:fe:f0:6c:6f:d3:66:5a:fa:
         9a:6c:11:68:c0:79:de:24:ba:55:fb:b6:07:ab:cd:d9:b1:a3:
         8b:b8:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:22:20 2024 by rpki-client on console-fra.rpki-client.org