Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/6aa9575c-6077-3533-80ea-cd584143b27a.roa
File:                     6aa9575c-6077-3533-80ea-cd584143b27a.roa (raw, json)
Hash identifier:          EoAeDnprBXqX3BMA5AYbQzDgAuj34DM7sa3kZc3b0y8=
Subject key identifier:   B6:01:1A:B2:31:2B:93:A8:3C:A9:00:7F:9A:3C:84:0F:36:86:B5:FD
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F432858456F1DCB68BAF8F10A80C2EA00
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/6aa9575c-6077-3533-80ea-cd584143b27a.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     27385
IP address blocks:        64.39.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:cb:68:ba:f8:f1:0a:80:c2:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=a01c2481-ee76-4b84-bc25-5ca7d64e7c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:7b:a7:ff:80:4a:32:cf:28:de:7e:d2:3b:
                    2b:f0:2e:dc:59:74:fa:a5:a5:9c:9e:62:95:55:91:
                    d7:30:01:31:60:4a:cf:75:e3:c7:78:a2:4b:15:7d:
                    63:30:b4:d6:7f:d4:57:cb:4b:49:52:e6:3b:52:f2:
                    dd:62:25:c8:33:6f:b8:00:48:d1:5f:c1:36:11:7f:
                    d8:77:dc:48:78:15:20:1d:6f:5f:db:04:6f:e0:d3:
                    cc:73:ab:0c:29:76:66:0a:a1:9d:ad:ea:95:b9:31:
                    a4:01:a4:cb:0a:d2:53:a6:af:e6:1b:6a:ad:af:6a:
                    ec:1f:58:f2:64:e7:ac:9c:2d:76:7b:34:df:bb:e0:
                    8e:91:44:ab:01:5e:4f:aa:3a:d3:d3:41:52:23:47:
                    f4:ce:f6:85:ab:69:df:cc:ac:14:2f:cc:ca:9c:43:
                    e6:ba:1a:a2:89:e9:65:77:d9:29:39:fd:00:f4:73:
                    92:02:f2:7e:40:36:ed:96:59:38:d3:20:44:fc:a2:
                    44:b2:87:94:ce:45:e0:0c:93:fa:a0:e8:23:7e:93:
                    fe:c4:01:1c:94:25:3a:a1:83:9a:94:03:dd:a2:32:
                    70:bb:ff:ac:76:dc:f8:21:7f:f0:aa:96:aa:bd:e3:
                    44:4f:e6:36:d1:37:fd:f5:6d:16:74:05:13:4f:6a:
                    5f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:01:1A:B2:31:2B:93:A8:3C:A9:00:7F:9A:3C:84:0F:36:86:B5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/6aa9575c-6077-3533-80ea-cd584143b27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:34:81:ad:b6:eb:b0:aa:73:ee:90:8d:de:8a:21:be:32:f0:
         97:25:ec:65:5b:9a:1c:5a:d5:9b:f2:2d:12:4b:3e:60:70:a8:
         96:bb:bf:0f:3e:bc:b8:db:09:3c:f8:79:e3:43:c7:a9:7c:f5:
         ad:0f:a5:59:f8:cc:73:f9:d7:c3:4e:60:7b:da:39:2e:fd:a3:
         79:d4:63:a7:ab:33:f0:ab:9e:e0:d1:90:ee:41:5a:d2:4e:4d:
         ad:0a:52:6d:3b:ea:b6:5a:e8:ad:9a:c9:5c:13:39:dd:ed:15:
         0f:76:a6:8f:60:70:ca:e9:7b:50:ec:d5:c3:ef:86:27:0c:f0:
         dd:cf:34:d3:a0:c8:b5:20:da:c0:73:28:34:ec:83:30:d1:67:
         44:c8:e9:f0:ef:c7:48:09:95:4c:8a:f5:b9:1d:7f:74:aa:93:
         41:23:33:48:34:27:25:4b:78:8d:2f:3d:6e:4a:45:25:fa:9d:
         cb:d0:c9:88:1b:ca:cc:ac:a7:1d:b9:ca:0b:82:85:85:68:56:
         55:54:a1:7b:b8:91:5b:1f:76:ca:e6:74:bb:ed:be:a5:61:b7:
         e9:c2:54:4b:f2:38:5f:6d:5d:69:76:dd:51:b9:98:91:1d:29:
         cb:a6:de:fd:39:dd:5b:70:47:d0:6e:52:48:32:7f:6e:fa:0b:
         29:82:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:56 2024 by rpki-client on console-ams.rpki-client.org