Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa
File:                     3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa (raw, json)
Hash identifier:          TGBE0tCjg6xPM/G/fVK3z30NINwXjOwxKMIsdG9ku0g=
Subject key identifier:   A7:9F:93:F1:55:2E:A3:2C:86:29:66:58:0A:B4:1B:E3:F7:68:2C:C1
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F43285845F51E7F0FB0D5DB40A515EE40
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     1299
IP address blocks:        204.156.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:7f:0f:b0:d5:db:40:a5:15:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=f98adb55-f9e6-4e89-a465-d862bd8b2492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:41:b3:20:42:f1:05:01:a7:3f:36:11:eb:
                    a8:7b:e7:37:81:8c:6e:17:93:ec:35:25:3a:2b:fb:
                    20:bc:43:9d:d9:af:61:28:44:7b:85:da:a5:89:71:
                    9a:c5:e0:e3:2d:aa:d9:f1:b5:5c:b7:d4:15:bc:e2:
                    a5:20:ed:e7:ff:e0:eb:45:fc:24:35:26:f3:43:1a:
                    9d:6c:3b:3e:c8:5a:28:27:9d:aa:54:0e:0c:4a:c9:
                    47:32:24:f6:c4:ed:da:ab:b0:2e:f6:83:f6:e2:88:
                    b7:8a:c1:ca:47:0c:d1:7e:02:d7:bd:4c:78:56:b1:
                    8b:c8:97:40:06:df:04:07:c1:68:5e:8b:f2:f0:51:
                    11:89:78:1d:ff:74:5f:1c:f7:a3:09:bf:e2:6b:ea:
                    31:07:aa:26:ea:e2:87:0a:fc:e5:e4:e8:b6:31:06:
                    3a:88:42:51:81:d7:88:30:d0:70:bf:67:38:3c:de:
                    f7:d2:b9:bd:12:cd:e1:dc:a5:e4:00:3d:18:a7:45:
                    77:b9:c0:aa:fb:9a:6b:16:8f:2b:05:aa:ff:a4:bc:
                    76:3c:a4:c7:07:2d:90:81:6c:ff:61:08:44:2c:fc:
                    cb:fd:fa:82:4a:07:3e:f7:89:3a:62:ad:3d:74:38:
                    20:08:c4:e6:cf:94:a4:0f:1b:77:9c:4c:72:65:82:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9F:93:F1:55:2E:A3:2C:86:29:66:58:0A:B4:1B:E3:F7:68:2C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3e610bf7-f81d-344c-b09a-26bf1c655ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:39:1f:2d:13:d8:22:62:70:a5:ca:9e:2a:51:01:b4:39:
         79:c7:1c:ed:1a:10:0d:22:03:8c:7f:07:39:7a:3e:7e:08:b4:
         72:de:8b:6f:57:70:b0:8a:e6:05:5c:9a:23:63:f1:ef:01:c0:
         d9:e2:99:96:6a:fc:c7:da:3a:a7:91:9c:49:a5:e4:1c:a6:56:
         39:99:0b:30:3b:f2:63:24:ba:8f:88:7a:93:23:24:93:eb:11:
         64:3e:be:67:6e:6b:4c:e0:37:8d:c2:0b:f6:bd:2f:e2:a0:cc:
         29:6b:08:e6:0f:ac:2f:b8:6f:98:ff:b5:25:87:3f:fe:28:66:
         55:99:3b:b6:93:16:4d:9b:9a:8f:e4:d4:51:0e:d4:3c:6c:64:
         e8:18:b7:ec:01:3f:2b:23:ac:e4:52:80:78:b2:dd:98:6c:9c:
         8c:10:53:5b:f2:7e:d7:aa:c2:d2:ae:dc:9b:86:33:6f:3c:79:
         93:be:02:d0:0a:21:56:04:6e:a0:29:13:f2:e8:3f:b4:d2:57:
         2f:b2:36:a5:eb:e9:8b:12:c1:b1:49:b3:16:ad:e6:09:f4:eb:
         34:03:67:98:52:75:02:d4:bc:98:5f:3e:58:24:0d:e4:94:25:
         fd:15:2c:a6:2e:94:e7:bb:f8:0e:de:60:95:57:51:34:b7:1a:
         26:37:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 17:35:30 2024 by rpki-client on console-fra.rpki-client.org