Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
File:                     2f245cec-1abd-398c-a715-037e988d18d1.roa (raw, json)
Hash identifier:          HQJJoq8zJEC4ODD1wX/o1HtmuP5Z0p6rFIBHG8iy+CQ=
Subject key identifier:   97:96:7F:94:0B:E4:C9:7D:4A:C1:3D:F0:7C:92:74:5E:21:A7:A5:D1
Certificate issuer:       /CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
Certificate serial:       010D0C9F432858457D13180EF8E2DFF0A157B200
Authority key identifier: BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     10584
IP address blocks:        64.237.108.0/22 maxlen: 24
                          64.237.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:18:0e:f8:e2:df:f0:a1:57:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=1dff45ce-bfb2-40bd-a4e2-652bfeff4333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:57:cf:fb:33:b2:aa:56:81:05:49:e1:10:
                    c3:12:9b:08:a6:d5:a6:ab:d8:5e:c1:ac:8e:20:fa:
                    d3:0a:58:59:4a:fd:d4:57:11:83:0a:dd:4f:40:33:
                    e7:20:ff:98:69:5e:25:6e:0d:51:9c:89:78:15:2e:
                    69:2c:37:ac:c5:24:2e:31:2c:da:52:de:9e:43:55:
                    e8:6d:59:5e:6a:4c:c7:28:ce:cb:9c:6b:79:f9:34:
                    d4:ce:2b:9a:9d:b0:29:10:6a:d0:09:cb:f9:7d:6d:
                    a6:e6:be:58:55:9a:82:b3:d5:07:03:92:42:05:ed:
                    7d:dd:a3:10:15:d7:ce:eb:3e:c6:97:01:fc:bc:11:
                    8d:9b:33:5d:73:42:67:d8:09:9a:48:80:c0:c1:02:
                    23:f0:4e:aa:2e:38:0d:1d:d6:64:c5:3d:56:60:c1:
                    65:06:ef:00:57:86:7c:12:2d:76:55:95:5d:b7:52:
                    4d:4c:47:3f:40:ab:d6:74:3b:1c:b0:70:31:fc:6b:
                    d6:05:a1:a8:54:ed:47:12:d9:22:3c:c7:d4:ce:78:
                    fb:6e:a7:50:18:ec:99:cb:22:28:36:7d:8d:e3:0f:
                    60:68:b6:ee:ad:a9:05:d0:26:f9:85:ee:de:f7:db:
                    ba:e8:af:fe:b5:96:92:ee:ab:bf:63:82:15:00:43:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:7F:94:0B:E4:C9:7D:4A:C1:3D:F0:7C:92:74:5E:21:A7:A5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:81:7c:3b:ab:96:ff:87:ef:00:3c:cf:03:27:9d:5d:f9:1e:
         07:5c:56:27:76:02:40:9e:9b:e4:a4:16:72:b6:a9:08:2e:ea:
         9e:b1:88:5f:96:a3:56:32:5a:b2:e3:33:62:d7:17:e8:c2:18:
         bf:ad:da:4b:ce:7c:37:ac:c3:bc:04:88:59:4b:e6:b3:7e:8a:
         01:f9:f0:96:14:e8:25:a7:66:6d:0c:ec:d9:cc:7e:c5:ea:42:
         d4:b5:a9:48:76:19:ab:23:4c:5b:62:23:92:8c:9e:09:7d:19:
         0f:05:38:0d:13:c4:3f:82:aa:a1:fd:49:a8:14:cd:05:59:e5:
         17:3e:bd:48:25:46:55:4c:82:b5:eb:47:ac:ff:b9:3e:de:d9:
         10:fd:49:74:07:29:6a:16:02:05:4c:0a:7a:a2:b0:dc:90:dd:
         54:0c:ea:df:c9:b8:c6:e7:29:33:23:d4:5e:57:ab:db:e6:dc:
         d1:fe:39:c5:b4:49:f4:5d:4c:22:56:a7:e4:99:1d:ee:13:c8:
         9c:ba:00:bd:82:dc:a2:a7:30:fd:8c:a8:7a:f5:d4:f3:12:41:
         5f:0c:3a:0d:f7:31:ad:71:e1:8f:86:75:c7:68:1a:90:b0:bb:
         52:50:9b:b2:30:97:38:fc:88:81:d8:8e:ce:6e:af:37:23:ee:
         59:d7:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:50 2024 by rpki-client on console-fra.rpki-client.org