Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa
File:                     b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa (raw, json)
Hash identifier:          MGE+JNAuwMIdgY6KFT/kenYBYy3u1F/v8v7UMAmhEx4=
Subject key identifier:   EB:60:0D:2D:DC:53:25:88:88:81:67:08:D9:30:B5:F1:C1:14:8A:F2
Certificate issuer:       /CN=10aa04f0-7421-4813-bfda-269303d05d1d
Certificate serial:       010D0C9F4328584582A89D89F76D36CE3E4AAB00
Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     77
IP address blocks:        204.9.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9d:89:f7:6d:36:ce:3e:4a:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=147b16f6-7c76-4809-80c2-a530c1de1d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:b7:87:4e:a0:9b:54:40:20:d6:8d:2e:4f:
                    96:2b:b8:1e:82:be:4e:ac:75:e1:01:9a:0f:77:b6:
                    c8:d4:72:19:ab:3e:95:dc:db:cc:b0:fb:85:3b:67:
                    5e:23:2b:a1:df:e9:44:dc:a2:01:40:f5:75:e8:be:
                    f5:98:b6:1c:de:41:87:d1:ca:73:f1:04:7b:99:67:
                    f1:c1:7a:19:20:57:94:16:26:ba:22:32:26:87:43:
                    da:c8:9b:a6:97:2c:2d:1c:14:7e:51:c5:07:0d:8c:
                    ef:8f:fe:cd:e3:00:24:f2:18:92:d0:03:be:84:e8:
                    c4:ae:0c:ed:0f:a5:9d:4a:e4:81:1f:f3:10:e9:10:
                    38:73:87:93:56:d5:cc:85:9e:5e:c9:04:be:6d:a6:
                    2f:47:57:2a:97:de:5e:f8:d1:e8:a3:eb:84:55:7a:
                    08:6d:9b:43:9f:3b:76:8a:ac:19:5a:85:a3:39:af:
                    62:18:41:af:e5:c6:95:dc:04:3e:30:35:c7:de:3e:
                    2e:ff:d4:46:fd:e6:a6:39:e7:a0:42:e0:c1:cf:61:
                    a8:63:ba:4d:3d:e4:77:a1:c6:29:5d:fc:f8:81:54:
                    9b:b5:e5:81:82:d7:17:53:26:5c:51:46:05:30:48:
                    65:3a:84:86:32:1b:64:ea:cd:f1:f2:b2:82:2c:9c:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:0D:2D:DC:53:25:88:88:81:67:08:D9:30:B5:F1:C1:14:8A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl

            X509v3 Authority Key Identifier:
                keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:e7:98:b7:5a:a4:a7:71:7f:64:02:4e:5d:98:0f:d6:a6:9a:
         44:78:7d:c8:5c:21:4c:f3:f6:92:9b:1a:d2:20:5c:a8:70:6a:
         84:49:ef:d1:b4:b3:50:df:00:43:cc:02:fb:63:b2:51:3e:13:
         94:ab:2f:2f:d8:88:24:d1:eb:13:ba:1d:d8:70:50:b1:39:e4:
         90:aa:10:78:00:80:91:b2:07:c9:b0:66:0f:49:80:4f:a6:4c:
         49:30:ad:20:f4:d9:8a:36:56:fa:68:a4:a3:94:de:e3:b8:a9:
         18:7c:cc:4e:c6:17:e7:9f:50:e8:6c:b0:a5:f2:bd:6e:92:14:
         1f:c6:86:f9:b7:01:a8:ea:da:c8:bf:2c:98:9b:14:17:ba:9f:
         aa:37:1c:23:d5:61:11:40:31:0e:5e:d1:e2:a4:35:20:ed:7e:
         2d:bc:62:25:86:e1:09:10:bd:70:7c:f8:53:9b:92:df:e2:d7:
         1c:cc:fe:b9:2d:2b:6f:fc:f0:9e:d8:b3:09:c1:72:cc:d7:3e:
         9e:8b:a9:19:97:98:4c:b6:c6:a0:d1:d3:12:ee:6c:ad:87:29:
         bc:16:95:21:a1:e0:25:5f:70:88:f1:1e:25:a0:98:6a:9c:bc:
         1a:ea:56:bf:03:e8:08:5d:ed:b6:98:ae:64:7d:3e:c1:eb:32:
         4b:2c:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:33:11 2024 by rpki-client on console-fra.rpki-client.org