Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa
File:                     3b0adfcb-841b-360d-b808-c58d891a93d9.roa (raw, json)
Hash identifier:          AOjP2sk2HzByaCeMi+NKj/Vu6xHd9jSeUNnYUvFKkyo=
Subject key identifier:   CF:36:37:AF:06:72:F6:BF:C8:97:02:45:4B:A1:85:E1:BC:61:83:1E
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F43285844EECFFAAC732B32CD47A17F20
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        204.77.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fa:ac:73:2b:32:cd:47:a1:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=0cf66c5d-8461-41ce-b445-30680212b03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:50:3c:ea:59:f5:51:93:18:4e:89:15:91:
                    6b:5e:5b:33:5b:bb:f1:27:7c:c0:3e:c6:60:48:f0:
                    db:90:75:79:af:86:ab:68:7e:f2:7e:be:3e:22:bf:
                    98:b2:3e:2a:21:be:ac:fa:df:f8:90:e8:ff:17:b7:
                    a0:e8:ac:88:c1:db:fa:41:9a:63:ef:49:d1:02:88:
                    43:45:39:4b:df:2e:71:93:8e:65:b0:fb:63:cf:fa:
                    8d:13:07:43:33:d9:ca:cd:2c:fd:11:dd:8a:cd:59:
                    2a:86:d3:32:f1:fb:44:a3:2b:35:1d:6f:28:85:4b:
                    8b:10:c0:ac:bc:9c:11:a9:d7:d2:9e:f7:c0:05:e4:
                    d2:1a:83:59:bb:cd:4e:a8:fb:5b:2b:d2:ec:08:e2:
                    b2:7a:c4:03:0b:ac:3b:d5:3a:a5:d9:3f:5c:79:3a:
                    cc:dd:b9:39:55:fa:cf:8d:97:78:d1:f3:98:3b:a5:
                    ac:d6:cf:8e:c6:23:a2:3e:02:6b:b1:dd:e1:c6:cc:
                    25:81:48:b9:a0:70:92:2e:49:03:8b:a4:d2:ad:41:
                    88:1e:50:37:9c:f4:85:ee:0f:1e:e9:9d:ab:73:3f:
                    1a:5f:88:61:4d:39:48:98:de:4a:a2:af:0b:ff:2f:
                    c5:f6:2e:d7:ab:3b:8e:84:46:c3:e9:90:c6:5b:1b:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:36:37:AF:06:72:F6:BF:C8:97:02:45:4B:A1:85:E1:BC:61:83:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:b5:bd:b8:91:cd:5c:e4:b3:48:4d:3e:9e:4c:4e:5b:66:
         05:ee:b9:d2:2e:47:50:af:4b:7b:c7:24:a1:23:85:7b:88:0c:
         b6:28:6a:10:fc:d2:9e:b9:41:9e:76:84:b1:ad:97:cf:e0:bc:
         1e:69:a9:df:28:7b:c6:c6:30:a3:1e:3c:03:14:b5:c2:a6:0d:
         2a:1f:71:c8:90:33:f0:de:dd:f8:cd:59:8e:bb:ce:35:ec:12:
         88:4a:7e:b6:a1:46:9b:20:d6:74:9f:35:03:0d:3d:65:84:3f:
         8c:d3:05:fc:2d:02:9e:e6:b9:77:6d:b7:87:2d:52:7b:de:83:
         64:71:81:7a:0c:5b:40:e8:df:94:80:e7:33:3e:d7:8c:42:16:
         0c:a1:06:ca:25:fc:da:57:6e:e6:e3:70:66:00:c1:92:2c:cd:
         2e:6f:70:10:89:6d:51:e1:56:6a:c9:2c:9b:01:7d:f8:5f:36:
         a7:0e:ca:81:76:22:ce:7c:0b:fd:1c:a9:7a:e0:e9:d6:35:89:
         dc:36:37:68:21:0d:ab:30:1c:eb:89:ff:4c:00:eb:8d:b3:ef:
         c6:28:87:07:d8:b4:14:c1:40:d8:fc:9e:fc:4c:e1:8f:fe:ae:
         e1:98:96:e1:d5:4a:78:77:89:6d:24:55:5c:30:45:f3:d6:0f:
         36:33:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:43 2024 by rpki-client on console-fra.rpki-client.org