Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa
File:                     6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa (raw, json)
Hash identifier:          qpiiyvZBgLdWqz12ey0uM2Zjw2ng9U5qjT4mgFG5D8Q=
Subject key identifier:   C7:80:7B:C3:49:C1:58:E4:6C:BF:C5:F3:FB:06:C2:D3:6E:7F:36:01
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F43285845883DD50EF84B4F9F0BAF3C00
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     53766
IP address blocks:        64.186.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:d5:0e:f8:4b:4f:9f:0b:af:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=ac410c96-92e2-4071-a0a0-f2e1789ae36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:40:e6:d2:8f:54:63:af:2d:fb:bf:ee:d7:
                    4c:82:93:ef:86:0a:d5:6b:d5:76:7a:c8:b9:bb:4d:
                    44:30:99:b1:fb:dc:ae:e9:a8:2e:e5:9a:84:05:49:
                    7c:49:4c:c7:d3:64:f7:47:5a:88:dd:21:62:32:9d:
                    fc:11:68:2e:74:31:b4:1b:50:1f:a3:81:13:44:b0:
                    b8:79:ad:42:f0:55:ce:df:fe:25:86:05:5d:e9:e3:
                    46:1f:5e:1b:3a:14:57:bc:c4:3f:70:b2:51:5a:a4:
                    09:a5:8f:a5:de:de:ce:a0:e3:2d:f8:69:f9:78:47:
                    fe:49:61:b4:8a:01:ba:0d:a8:e2:6a:77:43:89:b7:
                    af:31:96:ae:b9:62:2d:df:a7:b4:b5:49:88:9f:b8:
                    3c:3d:64:20:ea:42:77:10:63:49:3a:51:46:63:35:
                    57:fa:3f:4c:9c:44:64:5f:40:51:89:07:8a:b0:ba:
                    9f:b4:57:19:3d:4c:43:22:ee:ca:cc:c8:7f:b3:4f:
                    17:f4:f6:8d:c6:d3:d3:43:33:4c:df:1b:7c:79:00:
                    11:46:dd:26:fa:93:df:73:26:24:4b:56:fd:f6:f9:
                    1b:e0:12:50:9a:a2:ef:6e:54:65:04:dd:1f:a6:dd:
                    8a:72:49:6b:32:1d:b6:87:25:36:8a:f6:8e:14:cc:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:80:7B:C3:49:C1:58:E4:6C:BF:C5:F3:FB:06:C2:D3:6E:7F:36:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e6:32:e9:de:85:83:be:1d:11:d3:a9:50:97:68:9d:4c:19:
         54:06:08:10:c7:de:a0:c0:b7:03:10:b6:a7:9e:d7:eb:b9:76:
         53:52:51:47:13:ce:d7:a6:ce:14:ee:89:45:32:69:de:8c:c3:
         0c:92:5b:22:07:10:1f:1b:34:c4:46:5d:7a:f4:e9:ed:02:a8:
         58:73:24:4c:f4:c6:c4:b7:9f:ea:8f:ed:4a:d0:0a:6d:2d:8a:
         bc:f2:33:f7:21:47:12:df:d8:9f:07:4a:d8:1f:60:92:5b:35:
         ed:ab:d9:ff:49:64:f8:76:77:ed:02:2e:dd:80:eb:b1:f3:13:
         a7:fb:f2:ae:9b:9f:db:03:1e:bb:5f:99:15:2c:e4:bb:bc:28:
         ad:ab:9b:5b:27:d8:f5:8a:bb:ee:5c:ca:cc:65:58:ee:7d:6a:
         f5:51:5d:b3:8d:7e:3a:b3:84:f5:54:da:af:e4:b5:e8:a4:22:
         0f:85:6a:07:88:0f:61:69:a3:94:32:89:f0:58:96:54:5f:d2:
         51:ad:77:35:4a:3d:de:c2:31:36:72:76:2d:60:0f:81:bc:ac:
         1f:92:c2:1d:6f:89:bc:3b:a0:89:a2:8b:95:19:7f:d2:07:9d:
         53:44:87:af:50:0f:49:ea:8e:5c:ea:38:86:46:50:54:1b:08:
         8d:7d:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:50:33 2024 by rpki-client on console-ams.rpki-client.org