Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/5d3deda7-b84f-3034-9bef-d7a21a847ec1.roa
File:                     5d3deda7-b84f-3034-9bef-d7a21a847ec1.roa (raw, json)
Hash identifier:          6oDcbpJNPQpEik3HxzXBhifKZ4BA3uXoQB+nWI4WCAI=
Subject key identifier:   9D:22:B7:45:3D:DA:A2:0E:90:FD:DD:42:98:55:E3:E5:99:7B:BF:92
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F432858455A2D7F296D5B81BD8FDAEEC0
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/5d3deda7-b84f-3034-9bef-d7a21a847ec1.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     834
IP address blocks:        206.251.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:7f:29:6d:5b:81:bd:8f:da:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=23aca829-3142-4cb4-8534-1545e87d858f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:28:ea:42:71:e4:58:79:0e:73:4f:6d:c1:
                    d8:33:03:ad:70:4d:89:7e:c2:f9:95:d4:71:85:14:
                    51:2c:81:98:35:f8:2f:94:99:ea:87:ae:86:2b:7c:
                    04:51:33:cf:c6:df:06:8e:4e:f9:91:42:3d:3a:80:
                    a3:e3:27:b0:be:68:67:14:57:82:8c:51:54:d5:05:
                    7d:b5:71:d2:ee:da:5e:e1:d6:8c:6c:7e:ab:f2:1a:
                    d7:b7:14:3e:fd:d6:3e:2c:7b:38:61:d6:dc:2c:0a:
                    d1:19:ad:f0:5a:ea:c8:26:7c:56:af:ba:22:a7:be:
                    9b:1f:82:28:ec:b7:1e:4b:43:17:65:d3:a1:c1:ae:
                    16:f4:78:7a:d2:fb:27:69:f1:49:0a:8d:e1:f0:22:
                    5f:4d:58:36:98:a6:96:01:3d:91:fe:99:69:d9:c0:
                    7a:db:3b:76:ce:bc:a1:b4:74:a5:58:ee:9d:30:48:
                    7b:62:ac:14:2c:f9:21:c1:14:e3:a3:02:de:28:00:
                    dc:63:7d:96:d1:d0:96:5a:b4:9e:77:cd:36:6c:02:
                    a7:9b:d6:51:6a:9c:1c:2a:2c:f7:0b:2e:1c:d7:50:
                    c7:91:ac:96:05:f6:ca:b6:cf:fd:cf:8f:0c:88:1f:
                    de:c9:a8:aa:8b:ad:0a:bf:03:49:72:fb:ff:e5:e1:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:22:B7:45:3D:DA:A2:0E:90:FD:DD:42:98:55:E3:E5:99:7B:BF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/5d3deda7-b84f-3034-9bef-d7a21a847ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:31:74:2e:de:b1:68:41:b1:a7:71:9b:53:51:bc:c6:9b:8f:
         65:3f:d6:ec:55:c7:dd:80:e9:76:e5:67:b2:6d:de:dc:bd:6f:
         45:80:91:f5:36:15:40:2a:60:69:b9:46:f6:f3:e0:92:9f:81:
         43:7b:b2:0b:d4:2c:9b:98:42:76:bb:c3:95:f3:55:38:bb:64:
         ac:8a:f2:f5:fe:12:ac:7f:68:56:78:32:1d:1b:4e:63:74:dc:
         2a:b0:ac:b6:89:eb:03:9b:9a:25:81:ea:2b:3f:a2:c6:a1:0c:
         56:4e:bc:06:67:f0:05:00:2c:f2:4a:8e:40:af:b3:e4:41:67:
         f9:ac:04:7e:2b:21:c6:ae:06:7d:01:f1:6a:ab:89:1f:6c:c6:
         19:c9:0f:59:29:63:1a:d4:ce:b5:4c:81:71:4a:83:d0:49:ad:
         6b:84:1d:02:21:e1:da:de:79:50:c8:a5:d4:41:3a:f0:cb:54:
         0c:a0:90:ce:31:80:be:11:8f:81:74:a3:f7:0f:56:e2:51:7d:
         64:82:c7:81:95:c7:c7:ef:96:f8:7a:0a:29:cd:ff:27:02:13:
         4d:41:96:92:1d:e6:a0:c6:a9:d9:da:d5:5e:3e:9c:06:8d:ec:
         8d:f5:ec:9a:2b:b4:ea:00:75:d4:8a:1a:e1:d1:92:91:22:fd:
         98:6b:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:33:38 2024 by rpki-client on console-ams.rpki-client.org