Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa
File:                     ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa (raw, json)
Hash identifier:          RnCcU2ssLW5n2Mme64aHDJdkAiuvD07+yzujqSB+VUY=
Subject key identifier:   CF:F5:AA:6A:53:FA:36:C2:21:BE:5B:C1:78:DF:84:F3:DD:B8:05:1D
Certificate issuer:       /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial:       010D0C9F43285845CB3E4CB92F984B88E8261370
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     398655
IP address blocks:        204.108.174.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4c:b9:2f:98:4b:88:e8:26:13:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=326a373a-6317-4fbd-ade7-21eefa1c993e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:ac:c0:4c:84:7d:87:03:9f:1a:0a:56:61:
                    42:3b:64:36:b7:78:2f:39:2a:dd:82:7d:e5:68:6e:
                    e7:19:a1:60:f8:7d:fe:79:b9:f1:59:3f:42:a5:86:
                    f7:51:ba:57:6c:94:f4:2e:21:a2:08:47:6d:77:0c:
                    56:cb:80:0c:67:4f:8e:12:12:b4:79:f0:e3:63:11:
                    ca:c6:22:8d:b3:e1:22:66:17:29:fc:77:b3:f9:6e:
                    fd:77:2f:6a:e6:fe:a1:75:47:8d:6c:e9:cb:24:b0:
                    64:7c:de:a8:c6:cb:c4:21:eb:ec:f3:66:0b:9c:ab:
                    f2:e2:8f:56:86:bc:c5:dc:57:4a:36:e1:18:4e:25:
                    ca:37:12:fb:2f:3c:ab:77:27:04:81:dd:e0:85:d9:
                    7b:61:4a:ee:0d:4f:d2:56:0e:25:4f:c9:ab:cf:0d:
                    01:8b:9d:52:df:8e:96:70:be:e4:cf:df:45:60:99:
                    e9:a0:4f:03:d5:12:98:15:3c:08:a1:b2:2f:c0:5a:
                    48:f3:5c:44:df:33:26:33:37:8d:e3:f6:1b:2b:dd:
                    ac:eb:bb:d6:b5:28:f3:df:74:4d:f0:70:ab:96:11:
                    07:31:c6:53:e3:1a:a5:ec:78:1b:da:77:0b:6e:94:
                    84:07:c0:b0:1f:9c:9b:48:f6:d3:ae:a5:2a:30:1e:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F5:AA:6A:53:FA:36:C2:21:BE:5B:C1:78:DF:84:F3:DD:B8:05:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl

            X509v3 Authority Key Identifier:
                keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:f3:fc:07:bd:6b:11:e3:c1:36:b6:b1:ac:c3:e0:30:fd:
         db:68:f6:45:75:db:fc:15:95:33:de:8d:52:e6:fc:18:d0:1d:
         0b:6b:05:6c:e9:15:ae:cf:ce:69:d3:b0:f2:9f:06:55:69:f9:
         d6:b1:69:45:8b:8a:36:0c:6f:05:ac:63:ba:7f:96:ad:30:e7:
         33:9e:53:cc:68:67:b6:3a:89:8b:b7:be:3c:b0:f2:3c:08:0f:
         89:98:85:95:bb:95:ea:ab:9f:a1:cd:e2:b7:b4:e4:5b:d9:61:
         2b:ac:63:1d:22:db:a7:fa:cb:88:96:8e:26:a5:1e:e3:db:3e:
         4c:92:31:d8:b0:d4:e0:6f:64:65:db:e9:c3:0d:a5:a1:da:5e:
         3a:d8:1e:e0:99:3a:69:ff:a7:38:30:62:48:91:de:1b:03:d8:
         67:c7:a6:37:b9:44:f9:f3:0d:9e:da:5f:ee:f2:ce:7b:28:70:
         9b:5e:87:20:80:69:7e:af:35:27:1e:55:4b:37:f2:b9:9c:7b:
         ea:3f:c0:6c:ae:94:da:ad:00:94:66:18:ec:c4:0b:dd:73:3e:
         20:85:e4:cf:6b:d5:04:67:3c:30:49:52:0b:c3:ef:d1:e6:ec:
         3f:91:3f:79:5c:81:63:84:96:70:0e:be:a9:5a:a9:69:27:9e:
         f1:41:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:32:59 2024 by rpki-client on console-ams.rpki-client.org