Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/a0f1ecda-e065-36cb-9bef-3072e000033b.roa
File:                     a0f1ecda-e065-36cb-9bef-3072e000033b.roa (raw, json)
Hash identifier:          6tV35GpI/lHhwSpJ2wAPa1MYG7HkWNllkf0HMUMNTKc=
Subject key identifier:   34:DC:FF:5C:03:C3:AA:8F:55:7B:9D:3D:18:25:CD:29:D7:B8:23:43
Certificate issuer:       /CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9
Certificate serial:       010D0C9F43285845DFAE2AA0E820872414CCB97B
Authority key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/a0f1ecda-e065-36cb-9bef-3072e000033b.roa
Signing time:             Tue 14 May 2024 20:42:16 +0000
ROA not before:           Tue 14 May 2024 20:42:16 +0000
ROA not after:            Mon 12 Aug 2024 20:42:16 +0000
asID:                     7018
IP address blocks:        204.10.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:df:ae:2a:a0:e8:20:87:24:14:cc:b9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9
        Validity
            Not Before: May 14 20:42:16 2024 GMT
            Not After : Aug 12 20:42:16 2024 GMT
        Subject: CN=c414936f-8288-41f6-b88a-6bdee9077ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:82:1d:d3:13:25:35:20:79:33:04:6e:e6:
                    68:b2:1a:0e:da:5a:4f:6d:6d:a0:0c:66:75:73:43:
                    69:36:e2:2b:73:cd:e8:05:49:22:b8:a5:8e:75:d7:
                    bd:99:d5:42:5e:49:b7:96:c8:04:a2:93:39:7b:9c:
                    c1:d7:68:05:43:88:dc:fe:1e:8e:01:56:f1:d5:d2:
                    6c:27:e8:bf:da:ff:ee:69:33:ce:85:33:00:6b:ea:
                    9e:9a:b7:da:89:fb:c0:d8:90:f5:e4:ee:f2:27:18:
                    5e:5e:28:5b:cf:cc:7a:d7:87:03:0a:2b:5a:df:89:
                    0c:4f:12:bc:1e:df:99:4a:70:1b:f0:06:d7:89:4d:
                    18:31:a5:b7:58:07:26:9c:e6:a6:33:77:c5:d4:05:
                    98:75:45:c4:41:b9:2b:7f:a4:38:aa:89:c1:b1:6f:
                    e0:02:01:7c:80:d2:4d:07:35:70:f8:54:4f:cf:41:
                    d0:51:6a:39:23:a5:6d:5e:63:5c:56:eb:94:62:6f:
                    89:17:91:af:b7:c5:98:e5:9c:99:58:9e:08:bd:1b:
                    96:88:a7:b2:c1:11:6d:5d:82:d5:a9:7d:45:28:10:
                    b2:25:e7:31:56:87:05:c7:5b:dc:3b:fa:82:bb:3b:
                    04:73:49:c7:47:38:75:ed:47:07:1c:34:18:0f:2a:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:FF:5C:03:C3:AA:8F:55:7B:9D:3D:18:25:CD:29:D7:B8:23:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/a0f1ecda-e065-36cb-9bef-3072e000033b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl

            X509v3 Authority Key Identifier:
                keyid:96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ec:40:19:e0:e7:9a:ec:f5:16:df:ce:c8:b7:2f:28:b0:c8:
         7f:23:3f:72:b9:e3:dc:64:73:59:d9:48:28:3f:ed:c8:e0:c5:
         08:5a:35:1c:83:24:71:cf:34:30:46:65:96:ed:ef:b3:61:55:
         18:3b:51:13:0f:b9:c2:51:c0:3f:68:ad:02:12:b7:ab:b5:31:
         03:c0:23:30:22:bb:38:6f:bf:ad:75:96:ae:98:de:ba:f2:c9:
         7f:86:9e:e5:99:ed:aa:ed:c9:b1:d2:24:1f:04:a4:79:d2:72:
         42:e2:30:30:c5:24:cd:5a:3b:9d:df:f4:3f:00:d0:b5:db:1a:
         92:e4:57:21:88:5c:3d:40:ed:ef:01:ef:a4:ff:f3:c9:ce:15:
         be:49:7b:97:08:81:23:16:59:ad:7b:9e:d0:5a:91:78:4d:52:
         78:3f:1b:55:8b:6f:84:b7:10:e4:0f:31:f1:84:70:61:e4:83:
         28:ba:d5:b4:4a:e8:d1:b3:58:eb:54:c8:59:a4:4a:40:0a:fe:
         a8:3b:21:ce:33:4b:d7:e4:b7:77:85:31:d4:03:c6:3d:e4:9e:
         4c:06:3c:bf:f2:25:21:cf:79:cc:eb:ec:73:2b:cd:31:ca:0c:
         da:f2:20:d8:ff:f3:fc:00:2c:2d:2c:b0:85:79:e9:23:de:6a:
         5e:c4:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:09:58 2024 by rpki-client on console-fra.rpki-client.org