Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa
File:                     526c06c8-686b-349b-85ed-ff6838d817f2.roa (raw, json)
Hash identifier:          qOcdJ8V9eg9uA+R5n6Rczl8vsfefz593thq7JLxgsXA=
Subject key identifier:   F3:E2:8E:97:97:13:DD:1D:DE:DA:9D:44:28:2D:9A:CE:4F:AF:F4:C9
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845777DE3B3D126E434404C60F0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     12129
IP address blocks:        204.232.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e3:b3:d1:26:e4:34:40:4c:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=6c51cd98-ac99-40c0-b375-941b0f5978dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:16:dd:ae:8d:b9:37:38:78:ae:fa:fd:73:
                    6e:b3:19:6a:d1:29:90:68:44:29:e0:43:c7:4b:49:
                    b8:24:ea:0a:3b:51:32:cc:6f:71:8f:e0:1f:64:7c:
                    30:87:57:77:d8:1f:60:d7:db:71:70:3e:96:3f:5c:
                    6f:b5:15:aa:11:50:a1:c9:f3:6f:9a:8c:17:82:2f:
                    57:3d:9a:f5:54:72:88:fc:df:ee:89:43:52:9a:a8:
                    ae:8d:80:33:0a:60:35:78:79:a2:ff:5a:73:fe:9c:
                    96:e8:ae:18:f8:67:a6:46:c2:d6:34:c5:d5:1d:35:
                    02:74:a5:9d:6f:d7:80:ac:e0:5b:24:b4:93:bf:3c:
                    53:82:fc:0a:ba:e8:13:63:9e:ef:2b:2b:ff:65:03:
                    05:19:10:27:f2:df:e6:99:ff:d1:87:c8:71:30:22:
                    64:67:7c:3b:38:0b:88:a1:8e:37:dd:3c:58:8f:77:
                    c7:6c:02:a8:94:d3:fc:d3:36:b2:66:78:a8:16:83:
                    e1:e0:98:11:81:d4:26:d5:64:c2:40:05:a8:cb:5a:
                    a5:08:4d:76:06:be:de:dc:03:bc:a2:83:d0:e6:ec:
                    f7:f4:f8:5b:0e:c7:ac:35:d8:a0:99:eb:ca:39:03:
                    1e:4d:8f:92:53:d1:01:44:94:65:26:10:51:e8:c6:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:8E:97:97:13:DD:1D:DE:DA:9D:44:28:2D:9A:CE:4F:AF:F4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/526c06c8-686b-349b-85ed-ff6838d817f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.232.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:35:3a:32:6e:82:f3:cc:94:f9:01:f4:1d:38:ac:98:93:54:
         cd:20:4e:c7:62:5a:79:26:94:b1:19:2b:74:11:2f:0f:33:8b:
         52:df:ca:fd:e0:9c:22:65:49:e8:53:22:ba:0a:21:fe:f5:be:
         d8:5c:3f:92:0f:cc:75:75:8d:3f:01:53:3d:2a:96:ae:13:e6:
         18:19:29:4c:5e:d7:b4:f9:1e:82:cc:57:bd:38:00:84:08:29:
         89:39:f9:7a:9f:e3:03:b9:92:f2:6f:15:43:a1:c0:a0:85:4c:
         1c:12:95:e9:af:fe:d8:cb:32:6b:8f:e4:68:e9:f0:ee:86:62:
         69:c0:9a:e8:48:19:62:6c:51:24:10:51:f3:e1:24:a8:1b:04:
         6f:47:c1:7a:d9:35:0c:70:c4:e5:95:28:26:50:16:7c:6a:f3:
         c8:73:59:7c:0d:04:ee:6b:c9:ba:af:b2:0b:a6:03:2f:53:b4:
         fe:5c:2a:fa:ea:6a:f3:9d:92:70:95:49:e0:fd:50:df:d6:39:
         6b:30:15:13:5d:5f:bb:e4:10:ee:3f:3f:e5:3c:df:ef:37:5f:
         26:75:02:d2:40:3e:83:08:3d:a9:51:3c:97:83:a2:b5:32:b7:
         2f:32:26:84:f0:db:4c:ae:89:36:c2:6a:aa:83:71:bb:c5:38:
         54:c0:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:59 2024 by rpki-client on console-fra.rpki-client.org