Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa
File:                     400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json)
Hash identifier:          jqZHIev0Wrsax5EmNVKHv3/Vk1rX4M+GJ9WAWGk7tpI=
Subject key identifier:   07:11:E9:22:98:67:04:BC:1E:AE:2F:A2:D1:66:5A:E6:9B:25:79:32
Certificate issuer:       /CN=f29fac19-e536-4e67-a788-6a1d4483389f
Certificate serial:       010D0C9F432858456C531F1E01F1F0838BB73B40
Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     397715
IP address blocks:        64.4.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1f:1e:01:f1:f0:83:8b:b7:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=2c49f727-7b5c-4a31-b547-452d73ed01ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:e0:a4:15:4e:9a:69:6a:7d:36:41:a9:d1:
                    25:98:8f:4d:a6:aa:52:d0:7a:5a:43:72:62:fd:4f:
                    ec:23:49:d1:55:7a:40:0b:e2:4a:81:80:5f:05:5f:
                    81:4a:e0:ab:49:3a:d0:11:14:06:e0:3a:71:43:1b:
                    43:78:6d:ff:ee:82:e9:d4:9c:af:d2:d3:d8:64:ae:
                    8b:9b:7c:d3:83:58:8b:11:4a:21:83:4d:0c:b2:3c:
                    37:be:41:5b:64:51:de:a2:7b:51:e1:ce:cf:d6:67:
                    35:d5:c6:85:38:0e:35:a6:0f:e2:f8:5e:03:e6:75:
                    54:df:1a:53:0c:7f:64:dd:36:63:aa:81:d1:c2:3f:
                    09:60:0b:da:80:67:9e:3b:b0:7e:dc:60:13:0e:06:
                    15:95:45:fc:91:e5:0a:4c:a7:d0:de:72:d0:46:87:
                    97:a0:de:e0:9a:9e:f0:08:d2:6b:4c:51:9a:91:89:
                    26:7b:ff:68:1f:6d:55:00:4d:2f:02:6c:e5:9b:a9:
                    71:c1:3e:a4:5a:91:69:e8:2a:81:5d:92:da:11:84:
                    84:fa:01:7a:b7:36:1c:f7:ef:dc:0e:a9:89:4e:e7:
                    90:86:02:f5:3b:23:62:b6:5a:c3:c8:88:f5:38:4d:
                    62:b0:0c:0a:68:f3:6a:95:d2:2b:8c:65:32:98:8c:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:11:E9:22:98:67:04:BC:1E:AE:2F:A2:D1:66:5A:E6:9B:25:79:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:35:9c:37:0a:a1:a5:3c:c9:cb:01:02:cc:56:2d:bd:a2:
         16:7b:8b:00:b7:8a:e2:03:e9:27:be:2f:fa:11:24:8f:69:09:
         b8:ae:ac:3c:bf:e2:68:97:4d:3c:f2:3d:c7:d9:4d:b4:c6:eb:
         a4:1c:07:a4:32:36:cf:25:f7:ea:5e:14:68:cf:a0:d8:ac:0d:
         09:70:7b:4b:c7:02:89:5d:d1:70:c8:be:8d:3c:38:fc:e9:52:
         47:5b:6e:20:38:6b:82:0c:e5:52:df:4c:02:9e:d1:28:9e:e5:
         95:69:cd:86:45:04:96:2c:32:10:88:b0:8c:2b:3d:f5:66:db:
         68:73:7e:ca:1d:73:47:d5:a4:10:87:a7:b6:bb:b1:86:92:fb:
         33:5e:2c:33:4e:c7:d9:4a:07:dc:62:6e:b5:bf:00:00:31:14:
         55:48:28:db:ab:4f:88:86:d5:45:1a:29:76:18:38:99:83:2e:
         3c:62:3f:4f:1d:9a:40:62:9f:63:29:a3:92:e6:40:ad:3f:18:
         da:36:0a:85:b7:9d:d7:3a:7b:ce:f5:4a:64:7b:9b:6c:5a:0f:
         f9:e8:18:d0:c4:fd:82:57:91:b3:be:9f:72:cf:34:81:0e:93:
         f9:13:0e:3b:a5:8a:f4:7b:b1:6e:a3:12:82:fe:de:63:1d:ee:
         e2:da:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:20:49 2024 by rpki-client on console-fra.rpki-client.org