Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e9aac00d-7b2c-3ae1-b98b-3590f340375f.roa
File:                     e9aac00d-7b2c-3ae1-b98b-3590f340375f.roa (raw, json)
Hash identifier:          sYfafULQ0h8KY6JIOYURSQo9W0+qG4cZMTUh/6iW1Z0=
Subject key identifier:   CB:C7:8A:6C:3A:37:4B:2C:F0:EF:8C:48:8A:6C:0B:25:51:E9:4E:AA
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584705168239DC5CBD42009C0E00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e9aac00d-7b2c-3ae1-b98b-3590f340375f.roa
Signing time:             Tue 27 Aug 2024 23:04:21 +0000
ROA not before:           Tue 27 Aug 2024 23:04:21 +0000
ROA not after:            Tue 26 Nov 2024 00:04:21 +0000
asID:                     0
IP address blocks:        204.194.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:16:82:39:dc:5c:bd:42:00:9c:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 27 23:04:21 2024 GMT
            Not After : Nov 26 00:04:21 2024 GMT
        Subject: CN=2782452d-7909-4ae6-8265-af010a3a5303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ba:93:48:d1:a3:28:4c:6f:3c:fc:f2:2f:eb:
                    6b:65:5f:6c:fc:b4:b7:5e:28:17:ad:6d:e5:42:fa:
                    e2:52:16:58:ef:a5:64:83:4e:d8:51:d1:50:30:78:
                    bb:05:41:68:ad:38:b3:3c:41:db:63:fb:4f:a0:d4:
                    cb:01:68:da:26:cf:ce:c2:b8:24:e9:2f:ca:b3:9b:
                    97:09:26:15:58:59:0c:95:80:6c:16:72:e5:88:d8:
                    88:16:38:ac:5f:81:4c:d1:67:e1:5f:11:82:e2:45:
                    9d:63:19:c8:ce:20:55:2a:05:f8:01:1d:2e:ea:4d:
                    d8:10:ce:a0:01:14:c0:4a:39:b7:f9:00:d5:25:56:
                    8e:07:68:07:0a:b2:fa:4f:96:58:13:e5:90:a3:ed:
                    40:d2:69:13:6a:bb:71:31:b0:86:f1:48:c0:60:17:
                    65:a1:12:33:97:74:28:82:83:d0:43:60:33:0d:3a:
                    2d:88:d6:8e:c3:d5:78:f4:d1:b3:d5:f5:f4:3e:46:
                    6d:e1:e9:c0:63:a0:de:91:14:a7:48:52:af:59:f7:
                    bd:7b:de:7e:8a:e0:1b:42:31:a4:f6:60:ce:a4:c9:
                    45:14:15:db:70:12:92:b8:bf:ca:8b:fc:90:a0:e0:
                    d9:dc:0f:8f:86:d3:44:3d:3a:09:49:b1:e5:30:2d:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C7:8A:6C:3A:37:4B:2C:F0:EF:8C:48:8A:6C:0B:25:51:E9:4E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e9aac00d-7b2c-3ae1-b98b-3590f340375f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:34:07:ab:b8:a3:cf:92:8b:3a:c3:ba:9d:03:11:ca:e9:6b:
         67:b1:d3:b1:1c:a7:78:8b:77:c6:e8:5e:a9:45:60:e1:41:bc:
         07:54:43:54:71:11:26:09:bf:27:31:78:29:e5:60:55:34:80:
         a6:f4:78:b0:7c:9a:5e:b4:a0:04:14:b4:47:72:2a:57:23:37:
         74:15:a1:24:f5:76:d3:ec:17:75:ac:61:da:ea:68:70:3b:16:
         e0:2c:e5:35:96:f2:fa:b1:30:fe:21:87:26:4d:fc:28:33:6d:
         c7:dd:66:93:33:cd:65:c9:22:1a:d2:3a:52:68:c8:4b:9f:b5:
         b9:1a:b5:4f:e9:2b:d6:c9:0e:6b:cb:f2:52:26:f6:1b:a9:4c:
         5a:51:c7:1d:2c:9d:9a:fe:54:7f:c3:cb:de:8d:cc:e1:de:3d:
         71:86:61:25:15:6a:57:96:ca:ec:dc:98:ce:92:03:b2:3d:49:
         e2:01:5e:19:84:85:18:1f:7d:79:0d:98:d0:af:df:0c:86:8e:
         d0:ed:36:7e:b1:9b:c9:68:09:0a:60:80:6f:3d:fb:ab:f2:71:
         c0:de:09:51:ab:b7:6c:d7:a3:a9:43:b9:3f:24:33:f7:e8:75:
         64:e9:da:37:bf:2b:5f:3d:08:c3:63:68:37:f0:7e:01:12:25:
         83:d0:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:16:22 2024 by rpki-client on console-ams.rpki-client.org