Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa
File:                     ff23613f-b262-34dc-8e04-9c24922a8957.roa (raw, json)
Hash identifier:          xAhrneWci1/FuSWZk/p+wRPLvrmJmKe6GkyvgdTixoU=
Subject key identifier:   D8:85:B9:94:2A:90:9F:22:85:3F:5A:9B:57:41:10:1F:0D:FA:59:1A
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F43285845883DE7517D5D98C1E90FBB60
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     20454
IP address blocks:        64.38.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e7:51:7d:5d:98:c1:e9:0f:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=36c897cc-5dd6-4cd4-b5be-1594f5a4136c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:64:e3:39:3c:b5:21:3e:05:f7:fe:1c:5f:
                    a6:27:4e:97:3f:b2:ff:2f:07:63:d2:f4:2f:83:c1:
                    f1:0a:05:3a:25:c0:d2:ec:72:2d:80:b0:63:d9:0c:
                    71:85:d2:d8:45:0d:3a:22:50:3f:71:6c:bc:52:c5:
                    eb:e1:ac:1a:59:6c:e7:fe:df:27:8c:af:52:51:e5:
                    eb:4a:00:2a:8f:8c:41:0a:63:ac:18:93:53:ec:55:
                    02:b3:c8:33:60:53:2a:42:77:c9:11:d2:37:01:f7:
                    c1:ef:52:8c:ff:63:9a:7e:04:fa:b6:2d:26:ee:d4:
                    53:24:56:4b:23:97:47:fb:f0:5c:cb:85:8f:25:d3:
                    d1:5f:a7:66:58:ed:6a:d4:cb:a6:f9:5b:6a:a8:96:
                    ad:02:41:a6:2d:d9:23:07:17:1f:6e:31:13:b3:bf:
                    6b:ba:be:2b:3d:ea:6c:b0:b5:41:33:b3:ff:3d:b9:
                    6a:2b:6b:7e:23:75:57:d4:d6:1b:f0:8c:ae:33:df:
                    36:9a:2c:1a:51:8f:c0:ec:10:af:7a:4c:62:49:00:
                    10:e1:4b:87:c2:dd:67:bf:bc:60:06:ca:89:1a:39:
                    2b:d3:cf:61:2b:76:f9:de:eb:e2:31:14:1c:21:e6:
                    4f:c8:c9:03:63:c8:1b:d0:11:60:ea:af:ee:71:68:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:85:B9:94:2A:90:9F:22:85:3F:5A:9B:57:41:10:1F:0D:FA:59:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:be:13:6f:8b:90:3b:2e:88:7a:d0:09:58:54:41:a5:47:13:
         c3:ab:08:1d:39:f5:10:ae:34:51:26:64:78:27:4c:79:6d:d5:
         b2:33:f9:8c:13:44:b5:96:3f:b5:53:0b:a7:81:af:c5:96:01:
         23:26:dc:9b:65:27:4f:82:ae:2e:c3:6e:dc:c6:e7:86:f3:c0:
         ca:42:b7:ae:42:65:08:03:99:1b:e5:14:ad:06:27:e1:01:67:
         81:1d:24:aa:a3:2d:24:96:6f:e2:51:3a:85:e1:cf:b9:44:be:
         87:a3:b5:71:5a:68:ab:84:76:68:19:b0:53:2e:71:47:1a:3b:
         02:a0:b7:a8:03:1a:24:9a:e0:d3:ab:3e:ed:51:7e:88:52:97:
         75:24:3e:5d:e7:09:f6:91:75:55:61:eb:8c:3f:66:db:00:b5:
         7a:1b:dd:e4:64:88:3e:c7:5f:c8:cc:b2:85:ca:d0:73:79:df:
         fd:a5:95:61:14:6b:76:fb:71:85:01:94:3d:4e:a7:7f:2d:8a:
         11:39:df:f3:d0:9c:73:bf:e9:a1:d0:99:4c:3f:a2:1d:69:02:
         98:78:c2:4e:6f:8f:7c:22:fc:7d:c0:23:cd:3f:1f:ee:71:40:
         87:52:67:ab:00:c8:35:6c:3d:65:d6:2a:63:90:14:fc:b3:77:
         eb:14:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:36:34 2024 by rpki-client on console-fra.rpki-client.org