Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa
File:                     d66336d4-f99d-3fc4-83d2-187c721b004e.roa (raw, json)
Hash identifier:          QbIFe1a1a+5bdvf44/q+Go1ppVjitN9Zo5boEsCyZtg=
Subject key identifier:   C9:BA:EF:4E:18:CB:F0:E2:59:0D:D3:77:52:AB:A2:2E:6D:78:DE:E0
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F43285845CE649EAADDF1FC4A8CC08A00
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa
Signing time:             Wed 08 May 2024 16:05:20 +0000
ROA not before:           Wed 08 May 2024 16:05:20 +0000
ROA not after:            Tue 06 Aug 2024 16:05:20 +0000
asID:                     3464
IP address blocks:        204.29.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:64:9e:aa:dd:f1:fc:4a:8c:c0:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: May  8 16:05:20 2024 GMT
            Not After : Aug  6 16:05:20 2024 GMT
        Subject: CN=f45ba9ab-3241-4842-914b-4651d4c96231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:9e:ac:23:3b:50:54:14:00:04:69:7e:25:
                    40:aa:8f:c1:e6:f1:be:cc:11:d5:f4:f8:2e:c9:43:
                    47:02:a9:7d:a2:98:3c:a3:33:a9:98:f6:17:50:91:
                    9e:cb:96:2f:3d:95:d3:4a:7f:5e:cc:bb:80:9c:2b:
                    ee:5e:e3:6f:68:b7:8a:ec:71:e3:b1:dd:c2:fc:70:
                    24:9d:dd:da:07:24:92:9b:41:55:29:f7:5a:54:30:
                    40:df:c8:6b:a5:7f:a1:12:83:20:08:36:00:6b:aa:
                    d5:6c:69:93:99:f7:54:de:61:5d:ef:7a:4d:f1:00:
                    b5:dc:2c:7f:3a:31:41:16:4d:13:9a:c1:aa:e9:5a:
                    e3:43:b7:a0:cd:12:ee:18:d9:f5:6d:52:ef:5b:73:
                    82:8e:44:9c:bb:99:e0:d3:fd:80:f6:36:90:a2:cf:
                    92:78:a0:f7:23:65:47:26:18:77:70:77:fe:2f:00:
                    ea:e1:61:e1:97:53:60:cb:ef:1a:e8:17:de:9c:d2:
                    5b:90:2b:2c:48:ea:c9:d5:a9:a4:b0:a9:f2:d5:70:
                    f7:08:e0:1f:42:ea:55:e7:9c:ca:f7:0d:63:90:7f:
                    6f:57:fe:0e:90:31:23:54:cd:c8:ca:26:1e:3f:32:
                    30:12:87:1d:51:79:2f:2e:f5:11:f9:5c:5a:21:c2:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:EF:4E:18:CB:F0:E2:59:0D:D3:77:52:AB:A2:2E:6D:78:DE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:a1:c3:7b:b2:7d:f5:66:64:07:68:ff:9a:93:07:55:df:
         ea:2e:25:45:05:db:c8:48:ef:8c:00:54:ee:e2:0e:3c:f8:92:
         66:cf:dd:a8:bb:6f:ed:45:85:7e:7e:74:3a:f9:77:d8:e8:67:
         a1:cb:8b:41:d4:32:20:e0:e6:6e:09:88:df:7d:ef:a9:fd:00:
         13:19:65:2a:54:82:f0:a1:db:7c:38:fa:85:15:58:10:51:47:
         21:4f:4e:62:6f:7c:34:c2:dd:f1:6e:88:45:4c:18:8b:73:1d:
         87:ef:e6:ae:72:5f:bf:46:8c:bd:a0:c4:c4:0e:33:ea:cb:49:
         9d:94:81:01:22:30:8d:5d:03:64:0c:82:4d:de:40:29:c3:71:
         4e:50:8d:cb:4f:e5:0e:cd:ec:98:4c:cc:6a:45:94:02:ac:d8:
         6a:42:c4:a3:95:07:b4:6a:ad:d2:22:31:84:3a:3e:12:a9:1b:
         5d:c0:d9:65:74:87:94:ee:f0:c9:14:a5:2f:95:ee:6c:08:68:
         3e:1f:ab:ed:70:91:5c:4f:d2:68:06:2d:47:66:4a:8a:5a:a6:
         a9:29:56:8a:4a:69:c7:a9:3a:2d:d3:01:bb:f4:cf:fa:b2:92:
         38:d8:e1:3f:4a:d2:b8:29:6e:cf:50:bb:69:d2:10:e9:b0:33:
         fa:bc:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:43 2024 by rpki-client on console-ams.rpki-client.org