Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa
File:                     52fe4d79-5533-3ee4-b36c-9164abc80931.roa (raw, json)
Hash identifier:          jglJQnXktOmXEzMC15vIEXqYpWxWaHPdy6V9Aasgycw=
Subject key identifier:   29:10:4F:8F:55:2C:39:86:D7:8B:E3:38:F2:59:2C:28:E6:7A:28:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845D503C32C718E8278001F49C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     8987
IP address blocks:        208.204.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c3:2c:71:8e:82:78:00:1f:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=293f5237-ca38-4daf-bd9f-3e916e466ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:15:d2:b0:78:59:55:31:c9:13:70:ee:c9:26:
                    c5:9a:e6:78:2c:6f:40:19:3a:4c:a3:41:42:7b:ca:
                    a1:cf:c4:53:7b:31:0a:51:1a:84:d0:50:7e:09:05:
                    37:88:38:32:3d:56:58:f7:9a:41:94:a4:5c:38:0e:
                    a5:e6:6f:14:8f:80:a6:13:79:fd:2e:8a:5f:57:42:
                    ef:aa:85:4f:39:62:2b:c6:74:1e:e8:ff:4f:ef:1d:
                    6d:12:ed:cd:ab:db:3b:9a:db:c3:47:a8:c6:5c:4a:
                    a2:be:bf:68:a2:e1:82:74:14:b4:a7:e6:e9:a5:78:
                    5f:74:04:77:9c:f1:8f:b2:2b:39:bc:a0:6e:46:b3:
                    0d:33:d1:36:d5:21:5e:1b:05:49:32:5c:e1:52:92:
                    44:5e:dc:49:99:71:5c:e9:98:c5:1f:7e:51:ba:ad:
                    42:a1:bf:3a:a4:b2:83:42:50:f3:aa:60:9b:51:3d:
                    01:a6:52:41:19:22:df:1a:f6:e4:1c:1b:8c:0e:87:
                    db:89:92:ba:60:5e:47:eb:fc:7f:ac:dd:09:4e:f7:
                    e1:dd:57:38:79:49:3b:f5:be:d8:3a:41:ee:de:15:
                    1c:bf:b7:42:97:a0:7c:bd:44:57:ec:c2:7e:1a:98:
                    cf:e8:0e:e1:31:0a:5e:9c:1a:43:16:71:0a:1c:6c:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:4F:8F:55:2C:39:86:D7:8B:E3:38:F2:59:2C:28:E6:7A:28:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52fe4d79-5533-3ee4-b36c-9164abc80931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.204.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:79:1d:b4:12:34:db:2e:79:8d:f3:a6:be:82:09:22:b4:eb:
         4d:60:1a:c9:d8:c7:0e:ef:d2:96:c2:5f:ab:e5:ec:29:5d:22:
         21:21:7c:eb:7b:27:85:10:ed:1d:a9:26:27:46:75:e2:48:e1:
         47:5b:e1:14:4c:d8:0c:3b:13:e0:3e:d0:07:0d:6e:c2:14:6f:
         52:0d:c6:23:ab:de:8c:6a:37:65:2e:28:de:f8:de:37:7a:31:
         e2:96:06:63:b5:9d:c3:d6:da:6f:79:c7:23:f7:06:44:5a:83:
         26:03:bc:a1:e9:74:20:55:09:ee:5b:42:1a:de:79:83:d2:83:
         2c:83:4f:b4:5b:6b:ec:33:3a:59:9c:ee:a6:2f:a2:a5:75:96:
         a1:d7:e1:6d:c2:16:53:a3:66:c8:c7:d4:66:8b:81:bd:b3:89:
         18:ef:f6:fd:1a:0a:25:da:d6:64:c5:50:a3:d1:70:cb:96:02:
         2b:4f:ea:2c:ce:66:60:5f:02:2d:13:53:87:4c:81:e6:bb:d4:
         6d:fa:17:71:d9:13:1c:01:02:27:2e:3d:08:bd:9f:ce:c8:39:
         c6:0e:86:91:4c:32:84:2e:03:2a:7c:08:d5:b6:97:88:34:5a:
         12:62:b4:72:71:e1:97:4e:80:b9:41:79:1c:aa:0f:b6:46:50:
         59:0f:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:33:55 2024 by rpki-client on console-fra.rpki-client.org