Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/7057a2c2-b143-3f26-a2a9-f747f22fad54.roa
File:                     7057a2c2-b143-3f26-a2a9-f747f22fad54.roa (raw, json)
Hash identifier:          a27PnfB060LODqoWfcQCA4SSY9Ip1AtXsH9ooxvEbwc=
Subject key identifier:   C0:B9:D2:57:E2:DD:A2:79:CB:E5:38:C5:39:E9:C5:9C:3C:82:3A:6E
Certificate issuer:       /CN=ae995705-0f5f-4dee-bca0-7f8caa21fe41
Certificate serial:       010D0C9F43285845B4E8DA4052203159690679C4
Authority key identifier: 20:EF:0B:00:80:60:D0:9B:28:53:AA:22:BC:33:C3:B5:EB:CD:C6:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/7057a2c2-b143-3f26-a2a9-f747f22fad54.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     3477
IP address blocks:        204.227.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ae995705-0f5f-4dee-bca0-7f8caa21fe41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ae995705-0f5f-4dee-bca0-7f8caa21fe41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:da:40:52:20:31:59:69:06:79:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae995705-0f5f-4dee-bca0-7f8caa21fe41
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=68df264c-3e27-47b0-9dea-26efef607ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:60:99:e2:5c:be:35:68:ff:86:a0:cb:9f:ba:
                    0b:b0:7f:67:19:96:8d:13:7c:f8:a3:db:49:0e:f3:
                    34:d4:ca:61:ee:67:a6:99:ac:89:1c:47:d1:61:04:
                    77:7d:be:9e:ed:a6:cb:c9:32:bf:99:90:6b:64:12:
                    8f:8f:de:73:81:7f:d4:bc:66:5a:b7:3f:36:fc:f4:
                    cf:8a:98:59:ab:09:56:06:c8:6e:f9:87:1b:60:9e:
                    2a:17:bc:18:36:e7:cb:28:76:c3:19:f0:c9:f2:9d:
                    cc:84:b2:4f:66:45:1a:55:d5:1e:88:65:d8:d4:63:
                    22:12:62:a7:e3:cc:1a:9c:af:09:6f:92:b9:b1:a3:
                    6d:c2:82:17:df:a4:69:51:b0:fc:45:ae:c2:6d:19:
                    3e:51:70:8c:ad:74:f7:fa:99:d8:34:52:9a:34:ad:
                    d4:40:dd:34:d4:a8:9f:c4:f6:1f:43:bf:80:e9:9a:
                    8c:70:be:af:26:1e:2d:ed:2a:c2:6b:3a:bb:be:7c:
                    38:7c:dd:06:6d:dd:df:39:c5:51:c1:b4:96:89:13:
                    3b:7e:6b:5e:9c:96:68:18:78:2b:cf:68:8f:f6:df:
                    46:ec:34:ef:aa:a2:70:8d:e4:74:fb:db:7d:c2:7b:
                    0a:1b:d4:be:7c:c3:c7:48:4a:16:92:27:78:cd:8d:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:D2:57:E2:DD:A2:79:CB:E5:38:C5:39:E9:C5:9C:3C:82:3A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/7057a2c2-b143-3f26-a2a9-f747f22fad54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ae995705-0f5f-4dee-bca0-7f8caa21fe41.crl

            X509v3 Authority Key Identifier:
                keyid:20:EF:0B:00:80:60:D0:9B:28:53:AA:22:BC:33:C3:B5:EB:CD:C6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.227.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:0e:23:c8:6c:87:3d:b3:35:6c:fb:39:58:5a:f7:45:ff:
         f3:e1:a3:2b:63:f1:53:95:84:18:15:6d:10:d6:d2:f7:0a:16:
         df:9b:a5:24:77:bb:fb:e6:08:0b:54:f1:61:a1:01:e4:c5:b6:
         6d:7a:82:29:0f:9a:ab:ca:2f:04:ed:fe:cf:87:47:13:12:87:
         fc:8a:f6:33:a4:9a:b7:6a:96:b4:f9:9c:9b:c1:06:f8:d4:ae:
         66:87:21:34:ed:70:16:b6:e3:8f:e9:53:89:3d:41:f4:af:de:
         ad:6f:87:65:c8:c6:3e:6a:4f:b6:15:3d:61:47:97:7d:2c:2c:
         7f:47:54:c7:77:a5:3d:61:05:09:ba:e0:91:84:89:23:ac:a7:
         29:fa:f3:02:5e:2f:f7:5b:3f:2b:e2:47:f2:ec:71:d2:9b:95:
         43:c5:ff:18:74:bf:56:83:44:20:dc:70:14:b5:58:17:fe:c9:
         56:82:64:2a:f0:48:75:00:a6:c1:ea:fb:30:ed:02:10:b1:25:
         4b:8f:10:39:16:17:f4:a7:0c:c2:e8:b1:51:f0:35:db:f3:67:
         ad:3e:c9:97:ef:67:61:f2:7e:b4:c7:a1:cb:8d:3c:27:e4:5c:
         79:ae:df:20:82:29:4f:2f:a9:f9:97:0e:d4:0f:eb:7f:f4:f1:
         8e:6b:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:54:23 2024 by rpki-client on console-fra.rpki-client.org