Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa
File:                     ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa (raw, json)
Hash identifier:          g4Z/iyHDRTsZh90mRNjgQ5G2IDtI0I1Rv83D3GNRw8I=
Subject key identifier:   4A:78:50:AE:D4:D9:6B:C2:AF:BB:CA:0E:B4:E9:7A:00:05:38:54:37
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285844ED6A9995898885ACAF40A4C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     397216
IP address blocks:        64.6.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:99:95:89:88:85:ac:af:40:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=91bfb3f9-70f8-41a6-a59a-b2d53e09c57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:4a:40:02:57:de:2f:37:e1:18:4f:35:9d:
                    66:ec:0e:f3:7d:38:78:16:23:89:f8:ac:f2:c5:cf:
                    2a:6c:e4:0e:ee:7f:c4:38:1d:bb:93:06:11:4b:6d:
                    35:12:2a:cd:42:cd:c4:64:a2:35:90:85:a8:e3:ea:
                    be:3e:d8:91:aa:4f:65:b1:b2:3a:d2:66:4d:6b:5e:
                    a4:f3:a3:7d:d1:66:6d:e6:d8:c5:71:3e:af:10:2c:
                    b4:f1:3d:07:b5:89:4b:5f:e2:41:95:ed:b1:01:c7:
                    77:9b:78:27:6b:65:6d:67:be:3c:ad:30:0c:a8:1e:
                    bd:21:e3:0c:0d:49:b2:f8:34:94:80:cc:41:9a:b9:
                    e0:dc:46:10:8b:9b:f1:6c:d8:d6:2d:0d:41:cb:10:
                    6c:90:42:79:7a:5d:c5:e9:46:ef:5e:b8:10:6d:9f:
                    e6:f1:c7:d6:c9:3d:e4:00:d0:91:1b:cf:dd:57:01:
                    27:c5:4c:32:b8:ea:90:eb:ae:67:e4:79:24:80:a9:
                    dd:8a:76:03:e5:58:34:10:4b:03:42:b1:7b:29:05:
                    51:ea:e6:e0:fb:ab:ba:c3:7a:23:57:6d:ff:95:c6:
                    06:a8:69:b7:9a:dc:bb:00:c2:d2:f9:ed:b8:b6:67:
                    89:18:92:5b:01:74:3f:48:79:76:91:60:ce:22:01:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:50:AE:D4:D9:6B:C2:AF:BB:CA:0E:B4:E9:7A:00:05:38:54:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddc35b0c-8916-3da7-8372-7b9cfb3fc22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:02:c6:34:f2:db:b3:c6:9a:7d:31:63:73:81:bf:e6:4c:bd:
         78:8c:77:d2:70:b0:23:c9:f3:e0:10:b6:ae:01:a1:1e:f5:7b:
         f9:14:b3:f8:8c:90:8e:a6:63:a4:1c:f8:a7:f1:54:2d:3d:39:
         44:f0:47:f6:ad:33:97:92:e6:aa:36:c0:85:d8:58:b1:96:9c:
         05:71:e8:30:5b:e9:18:22:36:5d:f5:78:77:02:f2:4b:0a:a4:
         7c:02:a4:7f:26:18:c6:c8:53:4c:b3:46:09:e8:5e:b3:03:ce:
         57:97:1f:2a:65:b1:98:20:da:12:78:f0:5a:c9:ae:4d:5e:90:
         be:98:f9:12:13:5e:7b:3e:29:99:2c:02:76:22:0c:b8:31:6a:
         41:e9:db:8b:9b:66:64:bb:74:27:9a:58:b4:25:51:d4:2b:82:
         fc:98:41:a5:ce:67:35:f7:17:e7:2d:54:ab:b9:67:d7:8d:2d:
         1b:d2:89:41:43:88:6a:95:21:29:e3:f3:03:3c:03:3e:c1:67:
         12:78:76:1d:0a:5f:7a:b7:b6:98:df:a9:e3:2d:e0:b9:ce:9a:
         ef:bd:e6:02:4a:eb:86:ac:00:1e:6f:2a:68:f8:15:37:e5:13:
         2b:1a:ef:bb:43:d0:db:65:7f:77:3b:60:97:bc:f8:92:98:6e:
         60:2e:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:14:12 2024 by rpki-client on console-ams.rpki-client.org