Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa
File:                     118e4c67-8a95-310c-95a1-5985a2e83596.roa (raw, json)
Hash identifier:          k2vFCQ+hAuLwHrkQeFKv7wqixC6DPfkUa+L0t+mPTTo=
Subject key identifier:   FD:EC:ED:5A:49:70:33:79:D2:63:8A:AB:E1:7C:69:31:2A:5A:5D:99
Certificate issuer:       /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial:       010D0C9F43285845174ADACA1C1CB623E03FA3C0
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     40628
IP address blocks:        204.61.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:da:ca:1c:1c:b6:23:e0:3f:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=4f984157-1532-42d6-950d-5ffe27c11613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:13:c3:8e:4f:53:84:4c:c8:95:a9:13:78:d4:
                    95:92:f4:f8:bc:00:8e:04:75:2f:27:d0:ee:26:f3:
                    b9:e5:d6:91:92:c9:d5:64:fd:4b:5b:32:5d:2c:23:
                    17:5a:ea:04:45:3d:ca:21:b5:a3:8f:19:d9:3a:b2:
                    a6:85:d9:f4:a1:ca:e9:e7:0e:5f:2e:25:91:09:46:
                    d1:b5:02:fa:e0:c8:0d:7b:c2:2a:49:73:3f:dd:48:
                    99:d9:b0:d2:dd:1c:cd:b3:2d:90:96:5d:bb:0f:0c:
                    3a:9b:05:01:ff:4e:47:b0:3a:06:14:d5:2f:c8:f5:
                    6a:b6:dd:aa:d8:aa:ba:97:7a:ef:f7:73:6b:fb:b7:
                    ee:65:c0:07:6d:e5:68:73:6a:21:bf:dd:81:6b:14:
                    be:98:fc:04:a9:b5:c4:a4:7a:80:ef:6b:17:26:bb:
                    5e:dd:0f:ca:19:28:68:0c:a2:40:3b:ca:2f:09:cc:
                    3c:3e:2b:d9:7f:1b:a3:28:a2:ba:4a:15:92:b6:33:
                    30:d8:7f:ab:95:66:03:fb:c7:63:82:07:dd:1c:9e:
                    1e:db:77:9f:0a:34:c1:1f:64:c2:82:d5:1a:4b:e9:
                    b7:d3:2f:8b:ac:66:49:9b:bc:11:ec:64:26:e6:10:
                    ab:da:a0:c4:5a:3e:58:de:b2:97:32:19:fc:ab:9d:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:ED:5A:49:70:33:79:D2:63:8A:AB:E1:7C:69:31:2A:5A:5D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl

            X509v3 Authority Key Identifier:
                keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.61.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:10:8a:d5:b4:02:f6:8c:27:da:02:c7:fb:f5:0b:2b:8b:e1:
         5f:34:2b:26:74:42:a5:72:c0:61:50:47:bc:01:0f:29:fb:eb:
         54:2a:c1:f2:8d:82:81:d0:46:fb:e3:80:0a:2f:86:f1:7e:7b:
         a7:a3:3d:56:e9:64:24:3b:9e:ad:f0:66:41:9e:13:65:95:e4:
         13:69:cf:7f:a4:63:1c:b0:31:b1:0d:95:3f:26:9f:bf:d7:4b:
         f5:bb:25:9b:e1:7b:10:53:d1:5d:48:40:9a:4c:58:3a:49:04:
         63:17:2c:3d:53:06:c2:98:b8:78:47:d8:1b:1c:c6:17:a7:51:
         59:70:ee:40:9d:09:9d:d7:ff:c2:69:6c:58:f5:dd:df:36:94:
         5a:9e:02:f1:f2:41:33:1f:a4:ad:15:c1:e4:de:f2:8d:f7:dc:
         e2:80:d6:12:4d:c8:e0:30:9b:61:96:38:74:ed:37:ce:70:fb:
         bc:dc:55:d3:8b:b0:eb:3c:27:d8:3a:d2:d4:d1:c5:db:1a:c2:
         41:bf:69:e9:a2:fb:ee:1c:cb:a2:c2:49:da:c7:c4:a2:06:c6:
         d5:0f:d8:bb:ea:36:94:da:76:55:a8:62:20:26:4b:18:19:f8:
         3b:67:4e:28:e6:4c:4d:58:d4:5e:c9:c6:b0:d8:f6:7d:3e:b8:
         29:26:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:23 2024 by rpki-client on console-fra.rpki-client.org