Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ecc140c9-a18a-390f-ad34-f4c3d58bcb02.roa
File:                     ecc140c9-a18a-390f-ad34-f4c3d58bcb02.roa (raw, json)
Hash identifier:          quX4uc8sMkD0kT2+pFZatWvjIL3Debb5Sxy7XtX/ZNg=
Subject key identifier:   68:5A:63:53:46:9C:BB:F2:67:8D:59:05:2A:3F:3A:8C:9A:78:E1:9B
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F432858459368BF385FA5E950C8328CC0
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ecc140c9-a18a-390f-ad34-f4c3d58bcb02.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     32164
IP address blocks:        64.38.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:bf:38:5f:a5:e9:50:c8:32:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=3a0f340e-a31a-4d1f-b706-e036c2100852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:a2:9e:a7:df:87:a9:5e:b0:a7:66:5a:9e:
                    d7:8e:f1:e6:c9:66:bd:80:59:e5:c1:ff:28:52:62:
                    87:48:d5:99:16:e7:ec:72:3a:12:d4:74:aa:9c:08:
                    7e:2e:d3:83:35:3c:2a:ac:f3:86:e5:f7:a4:9d:21:
                    26:7b:5c:2c:d3:5d:58:74:63:a4:17:81:7d:30:1c:
                    1e:c8:38:c5:5a:0e:23:fc:9b:2d:ff:73:6a:30:c5:
                    6e:2d:76:8d:84:b6:c4:9c:74:e0:8a:39:e6:dc:3e:
                    50:ad:9f:dd:f3:f8:6e:c5:f0:ca:5a:5c:80:19:a4:
                    34:c6:99:4a:1f:ef:27:8f:21:6a:5f:81:99:08:93:
                    c7:8d:e5:2e:df:a3:31:97:f8:c2:6d:48:fa:2b:ea:
                    d7:40:93:fa:ad:23:35:53:90:db:54:bf:52:dc:3b:
                    32:e8:28:4d:e7:ea:b3:8b:dc:d9:6b:6e:72:2c:02:
                    b4:f4:2f:d6:53:f9:30:01:bf:91:49:14:9c:79:0d:
                    29:44:a6:9c:da:1b:95:b4:6c:38:b8:1c:2d:eb:aa:
                    3d:1a:46:59:67:74:08:b8:e7:4f:52:ec:fe:f4:4b:
                    b3:0b:06:ac:28:db:8b:40:2e:31:92:1f:11:32:3b:
                    e9:93:65:ba:5e:b2:b0:b0:61:e6:4e:02:4c:0a:1f:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:63:53:46:9C:BB:F2:67:8D:59:05:2A:3F:3A:8C:9A:78:E1:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ecc140c9-a18a-390f-ad34-f4c3d58bcb02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:13:d3:ea:e6:fc:c7:06:02:04:52:dd:23:f3:37:51:9d:5f:
         16:a6:b0:5d:97:d9:4f:ad:7c:8e:88:98:1d:1d:61:65:23:d7:
         9e:02:af:e0:8d:f2:fc:ee:f5:93:52:8c:74:5d:68:dd:3a:23:
         68:fb:e1:bd:32:be:0e:d8:b6:c1:84:46:9c:9f:c3:b0:36:d9:
         1f:0e:1a:b2:c7:a9:5f:2e:3e:b9:50:42:8d:80:a6:14:c4:a3:
         9e:69:d6:df:ef:96:1f:d1:b3:6a:48:e2:b5:19:9b:1a:c6:0a:
         59:4e:ae:c3:29:3b:4d:71:42:c7:04:07:db:13:12:79:8a:1b:
         db:13:4f:99:76:ae:e2:b7:12:31:58:bc:8e:77:fe:ea:8b:a0:
         7e:b0:58:92:c7:41:4f:53:27:40:ca:c5:04:de:ce:6e:c1:50:
         07:a1:1f:a4:7a:e1:de:46:7e:37:0c:ed:53:d2:a9:c0:4f:cf:
         3f:5a:f0:ec:10:06:94:5e:f7:b2:21:60:f7:df:f1:04:03:1f:
         b3:cb:eb:34:c3:2c:33:fb:52:5d:80:7e:18:52:10:49:02:ed:
         0a:53:cb:47:eb:0d:7b:7a:e0:07:53:59:f4:7e:44:40:c8:84:
         76:0c:09:73:92:90:d1:4b:7c:e9:4d:7a:5b:95:07:da:be:c2:
         5a:93:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:38 2024 by rpki-client on console-fra.rpki-client.org