Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
File:                     34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa (raw, json)
Hash identifier:          H3xKt7MnM5fEZF1EdsFcFd8G9ZOG2eFYFB+bN9maaFE=
Subject key identifier:   52:30:2E:8D:0E:60:2A:22:10:00:64:03:69:19:F8:61:C4:14:D9:99
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F432858459A634BDAB4131BB84EA08680
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     20205
IP address blocks:        64.246.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:4b:da:b4:13:1b:b8:4e:a0:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=960dc688-8503-4f6b-8960-ae00fc81397c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:07:a6:95:03:fc:10:af:fb:50:67:2e:40:
                    81:ea:fc:83:df:a0:81:1d:36:10:54:11:56:c3:2f:
                    b0:25:a2:4a:f2:e3:ec:10:3f:e8:2e:95:86:4b:d9:
                    b2:f5:8c:30:68:36:c8:d3:0d:f2:cc:2b:ba:79:a9:
                    32:06:0e:7e:7b:c7:fe:de:20:89:17:51:b7:55:d2:
                    89:9e:5c:ac:15:7e:84:b8:86:a8:65:01:b5:83:78:
                    4e:ca:8e:f6:a0:53:cd:fe:89:f0:85:96:bc:9c:80:
                    db:bd:e2:b7:91:25:c5:ce:22:bd:6a:f6:5c:6b:db:
                    bb:83:d3:4b:53:d7:40:70:5a:a3:52:f9:41:bb:65:
                    5b:c8:0d:d3:8a:02:51:96:87:5a:40:e9:b2:e4:74:
                    11:fd:70:13:c9:13:89:82:96:a2:61:30:82:0c:f8:
                    35:c8:36:93:96:e1:b0:9e:2e:36:e6:f3:91:af:5a:
                    c5:9f:d3:0c:22:24:de:19:56:01:d9:4b:d5:b6:8b:
                    73:d7:09:43:45:1d:63:3e:b6:39:89:76:ca:d7:a8:
                    8a:48:70:a1:1d:6f:3a:71:fb:01:d1:02:05:ea:ee:
                    b3:60:81:f9:2d:99:81:ad:f6:96:7b:d8:d6:b0:a5:
                    6e:0b:eb:87:da:52:e4:e5:e5:27:04:50:29:e9:64:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:30:2E:8D:0E:60:2A:22:10:00:64:03:69:19:F8:61:C4:14:D9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:18:7c:19:85:66:dc:be:dd:7d:7b:45:b7:66:af:0f:b2:
         92:27:44:a3:f7:a7:ac:10:5e:5b:c1:d5:cc:06:95:0a:ea:36:
         d1:e5:4b:1a:68:1a:f8:7d:42:87:98:5d:93:43:da:94:e3:78:
         7e:c5:76:6b:ff:03:33:e4:df:ee:ca:df:09:e7:35:62:f8:5d:
         69:67:ea:0f:01:58:fc:74:88:c1:ba:77:e4:cd:71:6a:af:cd:
         89:e4:30:ee:bc:0c:b9:08:18:be:f4:3c:db:0b:c1:fe:5d:c2:
         fa:ed:62:02:b0:2c:fa:4d:ce:06:5c:de:c1:0d:ab:82:6a:20:
         87:f4:ce:56:99:b0:98:af:29:51:5a:e6:d8:bc:29:23:76:bb:
         1d:13:7d:0e:7d:30:39:39:a1:1b:8e:21:37:01:2b:76:ab:5e:
         f1:3e:71:b3:79:3b:05:0c:5c:1f:17:8d:11:c8:f4:02:5a:92:
         3c:44:5c:33:0a:81:2b:83:b4:90:40:6d:75:d9:25:78:e9:ba:
         a4:5e:2b:3d:33:21:18:b1:8f:c4:4b:3f:84:63:fe:80:07:79:
         c5:24:cd:a0:b1:63:4f:87:42:14:3d:f1:b9:ff:93:11:42:7c:
         53:1b:5d:93:64:13:78:06:f2:41:8b:53:3a:07:c0:f8:d3:bb:
         9f:a7:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:46 2024 by rpki-client on console-fra.rpki-client.org