Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa
File:                     cc846770-6f1c-3121-a301-e24a6d92d8ce.roa (raw, json)
Hash identifier:          9WyF2oBwIjgqw2wRZ3P4G4l18ra7zIaOXI4GAtDd66c=
Subject key identifier:   B3:6C:AE:96:F0:7E:EC:83:1E:11:C7:9A:BF:C6:69:70:B5:57:35:1F
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285845A15E019D331EB7DEE204F6B0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     6142
IP address blocks:        64.39.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:01:9d:33:1e:b7:de:e2:04:f6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=cb955221-b026-45f2-8858-043cfae33ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:dc:e5:03:29:26:c0:1d:b7:fa:0a:ac:1a:
                    3a:af:1e:00:36:6a:49:f4:d5:d6:aa:d8:ce:50:d4:
                    64:1e:20:0d:96:63:7b:d3:77:99:fe:53:9f:df:87:
                    e9:24:a0:7c:8a:6b:b5:d7:7d:0f:1f:b3:d5:58:8d:
                    af:94:fc:52:e1:93:19:3d:26:54:83:84:bb:06:78:
                    db:16:28:99:03:39:0f:49:7b:96:58:0f:77:55:99:
                    09:ef:56:10:6d:0a:14:34:d0:27:ea:ff:e8:a9:84:
                    37:61:b2:9c:d9:76:20:96:31:fa:d7:de:71:80:74:
                    ba:cf:98:4d:9f:20:0b:e3:38:7e:7b:0e:3b:da:80:
                    15:5b:6a:ed:64:80:51:76:1e:b1:d6:7a:4d:9e:f0:
                    d9:99:b8:51:09:79:f9:38:29:b2:eb:41:06:82:5b:
                    d7:ce:5d:e0:05:6f:27:b8:24:b1:cd:c2:3b:f4:31:
                    41:e3:65:7e:64:75:7a:3c:b2:ec:95:76:cf:d1:55:
                    b1:60:af:19:77:8c:39:b5:08:24:a4:94:ea:59:21:
                    cd:f1:4b:9a:b5:37:f8:a4:74:0c:56:87:9c:81:9d:
                    f2:78:4d:f8:cd:e3:ed:c2:fe:90:a8:89:f3:7c:5e:
                    72:bb:87:46:d9:b6:8c:c7:f8:1f:9a:04:b6:0e:d8:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6C:AE:96:F0:7E:EC:83:1E:11:C7:9A:BF:C6:69:70:B5:57:35:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:97:69:20:f9:23:ab:96:b6:e8:82:fc:f9:a7:dc:a4:76:
         a0:ba:8d:ae:b3:b5:a6:9f:62:b2:64:61:42:99:57:79:af:d2:
         b2:25:24:77:24:41:a1:c8:6e:ed:b5:5a:95:bc:80:03:d3:23:
         51:3e:e3:c6:b0:1f:95:e2:17:db:51:a1:f7:c7:18:7b:69:f0:
         1a:e2:2e:9d:35:c6:42:3f:b1:7a:e6:54:d9:ee:f5:3e:d1:61:
         9c:a2:e3:2f:84:a3:ea:fa:2b:f6:3c:1c:25:d8:25:af:7e:ae:
         99:64:c3:11:a3:b9:b4:77:e2:23:cf:dd:51:17:80:62:55:f9:
         9e:c5:f8:b5:6a:04:77:e8:63:b5:c4:03:e8:0e:d7:23:83:97:
         0e:5f:0b:75:73:40:b8:fc:5f:00:ec:f0:0b:7b:e1:8d:0d:f2:
         01:eb:eb:52:d7:9b:e9:cf:e5:16:aa:68:3a:52:11:fb:f9:bd:
         4a:04:a7:d2:10:b8:d5:b3:72:34:a3:a1:6b:6b:35:17:52:fd:
         5f:73:57:98:54:8c:73:e2:07:cd:00:6f:05:6b:a2:90:0b:44:
         5a:55:d3:49:02:e4:75:8e:cf:74:af:82:45:6b:55:71:df:65:
         af:6b:39:ad:d2:f5:5a:4d:73:6c:bd:44:9c:0a:63:19:56:3b:
         48:72:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:56 2024 by rpki-client on console-ams.rpki-client.org