Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa
File:                     56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa (raw, json)
Hash identifier:          RI+qRSbPyeymSGLLRGC5CsH5D6jrPdLc9Yu/hg9bL0k=
Subject key identifier:   87:30:BD:6B:10:AC:41:8B:71:69:C0:93:4A:E2:AA:C0:28:ED:8C:D8
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285845C17915268F701CCAE7B5DC80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     400317
IP address blocks:        204.117.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:15:26:8f:70:1c:ca:e7:b5:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=31a659ad-b7c4-4b7b-8693-4b74ba217d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:41:84:77:de:1a:f4:79:01:fb:65:fa:bd:
                    e2:d9:d2:9f:67:b5:2a:8c:c5:7a:9a:d0:97:f5:43:
                    a5:a9:41:bf:63:0e:73:15:3e:8f:42:94:68:3f:89:
                    a9:cb:d8:24:99:26:5f:69:cc:0d:14:38:0e:97:91:
                    ae:0e:66:de:82:c2:0e:b1:c8:2e:46:95:53:35:04:
                    ba:c5:c8:95:65:69:92:5c:c3:8a:c2:77:63:c8:dd:
                    b6:b8:fa:d8:f6:71:b7:8b:74:3b:36:3c:32:cc:21:
                    ae:47:b9:7a:bf:26:db:aa:55:9c:ef:b4:21:ec:78:
                    f1:ca:ff:39:38:ea:eb:05:87:b8:14:44:ba:ff:1d:
                    de:72:0d:93:73:a5:b7:e6:0b:f6:62:53:0d:87:6b:
                    a7:71:ea:9f:8f:a6:42:da:ae:74:8c:fd:13:dc:85:
                    a4:0e:4c:2e:51:9b:5f:30:aa:35:1e:18:b2:31:8e:
                    ee:01:43:11:57:5e:bc:b1:b3:ae:08:bb:63:14:12:
                    83:00:c2:4e:c4:19:85:14:37:ba:c0:a6:77:2f:0b:
                    32:77:28:d7:ea:cd:bb:13:d7:50:b0:00:79:c7:a8:
                    50:88:8a:fe:87:7f:29:22:2b:4e:cd:d7:62:02:d5:
                    7d:05:89:31:72:a8:f6:88:e1:fc:f1:e7:87:c9:4f:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:30:BD:6B:10:AC:41:8B:71:69:C0:93:4A:E2:AA:C0:28:ED:8C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.117.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:65:71:9f:80:7e:38:d0:9b:28:dc:2c:73:13:16:c4:d4:bc:
         2c:87:8f:06:86:0c:e2:5c:71:53:c9:99:d3:71:a1:4a:1b:64:
         2c:bb:02:a3:14:e3:e4:7e:2c:28:39:d0:86:bd:85:50:c4:e1:
         e0:6a:b7:b9:f4:18:a6:da:ae:cf:58:30:81:26:12:13:cd:e5:
         c9:bf:63:6d:36:8a:26:28:a7:3f:dc:54:d3:32:f2:7f:9e:9e:
         33:84:2e:cc:0c:d6:35:ac:bd:9f:07:2d:6a:96:0a:44:46:b0:
         a9:b3:2e:b2:c9:b0:ed:b4:dd:3d:7a:0e:2a:21:59:0e:b0:af:
         14:19:84:9e:95:a6:7e:3c:e6:4a:eb:a8:28:28:1f:c0:75:c8:
         eb:66:38:6c:60:af:1c:d2:0c:fb:24:ba:65:85:59:43:06:16:
         1d:46:82:d7:0e:22:fe:b9:d4:8b:f2:c3:a3:85:7f:61:6c:bf:
         05:4d:83:e1:e0:74:9e:cf:6b:98:5b:c7:e5:b1:51:52:83:be:
         14:9e:7b:0a:34:ea:78:5e:ab:d0:03:19:42:59:d7:0a:5d:90:
         9c:a5:20:bd:b1:5e:e5:fa:95:ec:24:5a:d7:aa:ad:da:01:f2:
         ae:c2:51:35:d4:e7:ed:f6:c5:85:1a:bd:42:7d:0b:54:f7:43:
         11:4c:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:35:46 2024 by rpki-client on console-fra.rpki-client.org