Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14867db6-f387-381c-bf27-c8bd7ebe12b1.roa
File:                     14867db6-f387-381c-bf27-c8bd7ebe12b1.roa (raw, json)
Hash identifier:          LSP3QulIFLRizeLTlE3R8J0aBqc/mG8cjj1AO4WZeME=
Subject key identifier:   27:95:C2:C3:1C:C2:45:21:C9:A1:05:7F:EE:54:9B:51:56:8A:71:FA
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F43285845734DB86DF35F38C192CFD100
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14867db6-f387-381c-bf27-c8bd7ebe12b1.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     7794
IP address blocks:        209.204.192.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b8:6d:f3:5f:38:c1:92:cf:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=77a4df27-c9fd-40bb-8771-bbcf2e10eae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:0e:d8:8f:d2:d8:51:72:c6:56:21:27:03:
                    76:a0:4e:5b:49:6e:5e:c0:10:6a:bf:fa:ec:4c:78:
                    a6:a0:ce:ac:e9:3e:bb:08:a7:07:19:dc:22:25:14:
                    5f:5f:52:d4:99:e2:65:6d:6b:56:48:bd:14:f5:bb:
                    ac:3b:69:df:b2:61:53:0a:ec:0e:38:b1:13:97:5f:
                    09:cc:a4:98:b8:0a:d6:bd:e8:63:8a:3d:f6:4c:97:
                    df:9d:ee:de:ae:84:cd:a7:df:0f:39:3f:94:b4:d2:
                    5c:1a:2e:6e:6a:3c:16:fe:3c:14:57:39:ed:82:e9:
                    69:66:74:77:fc:d1:3a:98:af:39:31:b0:a7:20:7a:
                    6d:eb:23:13:be:71:f0:3e:c7:65:73:eb:07:95:29:
                    85:39:fc:b4:6c:37:24:cd:21:68:0a:71:37:9b:2f:
                    88:fe:38:73:02:42:ea:ef:61:22:66:2c:24:be:99:
                    e1:8c:65:f1:5f:ae:95:3f:5d:16:34:48:d8:04:e2:
                    8f:99:b2:f9:b5:c2:c4:cb:bc:8e:13:cc:be:c7:b2:
                    e0:39:1d:ad:dd:f5:c0:39:71:11:4a:e5:3f:67:80:
                    6c:cd:f4:ae:b6:2b:d6:22:56:39:3c:d1:f5:a5:6e:
                    ce:c7:18:15:48:ec:b6:cf:8d:42:2a:8a:8f:60:92:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:95:C2:C3:1C:C2:45:21:C9:A1:05:7F:EE:54:9B:51:56:8A:71:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/14867db6-f387-381c-bf27-c8bd7ebe12b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:15:b2:ec:35:c9:bd:ad:b0:20:6c:de:50:72:4d:6f:2e:
         e1:8a:10:be:ea:24:1f:f8:c8:92:a5:60:bd:e2:17:fa:52:5f:
         10:13:82:79:a8:54:3f:ef:e7:51:71:61:23:df:92:22:bc:f0:
         05:e1:f1:b2:64:f9:18:da:b4:f5:52:c2:0b:b7:f2:3a:1c:cd:
         bd:e0:91:55:8d:ce:79:73:38:d0:c2:57:f9:b7:f6:9a:75:f2:
         24:a0:8e:71:15:fb:eb:1a:a7:27:fc:ff:d3:2e:58:53:23:79:
         25:05:27:c3:cf:b4:f6:b2:0e:ae:18:9d:fa:74:04:90:7b:5b:
         a2:30:9e:50:14:97:56:dd:53:12:55:87:13:f1:c6:6a:be:bb:
         31:5b:a4:2e:ed:ad:24:3c:22:01:53:cd:16:5c:be:35:9b:10:
         27:56:92:f3:fa:cf:77:1b:d6:68:5f:67:dd:e2:5b:89:a7:34:
         06:fe:ef:01:5d:97:d0:29:da:a4:b1:0f:c1:08:fb:d3:26:57:
         48:1b:68:30:df:ce:d3:c0:16:9e:f6:09:d0:72:31:32:f9:a3:
         9f:cf:69:86:10:b6:df:c2:a8:b1:51:d5:9c:76:43:7b:3f:36:
         0e:63:e1:ef:07:cb:aa:01:4c:26:62:1d:2b:7a:72:f7:89:fb:
         15:b7:71:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:46 2024 by rpki-client on console-ams.rpki-client.org