Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/6753e65f-38f4-3b06-b0dd-61002dbd212d.roa
File:                     6753e65f-38f4-3b06-b0dd-61002dbd212d.roa (raw, json)
Hash identifier:          nMITzuqWfHn/o2fNs3JaHFht8PxAwtPZX44HmTjpdqo=
Subject key identifier:   F6:75:71:59:25:01:4E:C6:AE:6B:72:BD:E5:06:5F:EF:18:9F:48:68
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F432858479AABE34F01A1567E8170C980
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/6753e65f-38f4-3b06-b0dd-61002dbd212d.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     6461
IP address blocks:        204.227.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e3:4f:01:a1:56:7e:81:70:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=deae5f8a-af34-4a25-89d0-2d550865d25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:64:12:2b:64:79:0b:15:1a:50:c4:9e:3d:
                    8a:50:a9:0e:c5:fa:8b:4e:87:3d:ca:74:bc:b0:46:
                    83:be:fb:bd:0d:ec:4e:ae:8c:17:c9:a7:71:6f:83:
                    8c:ab:7f:5b:96:b2:6d:86:35:78:ad:e8:e1:87:cf:
                    ee:fc:7d:ff:57:58:fb:e4:20:96:d3:6b:7a:67:68:
                    fa:25:ab:58:9b:c9:ba:d7:64:57:49:cf:65:87:f4:
                    41:e4:f9:cc:2f:71:a8:56:66:af:f0:01:9f:b2:d9:
                    a0:75:83:ac:0a:f3:58:f0:5b:b4:38:5f:1b:eb:25:
                    79:e0:a4:70:f8:3c:14:11:5d:c7:27:af:29:24:1b:
                    60:29:97:07:96:f1:6e:7c:6f:c3:dc:9d:0e:fc:68:
                    39:d1:93:c9:52:19:8f:8f:09:ac:52:db:98:88:1f:
                    35:5e:80:67:ff:62:0e:39:93:87:7f:ae:7d:d9:c0:
                    61:22:8e:ab:c6:b8:fa:ec:56:6d:f3:e9:a1:37:5b:
                    4e:18:cd:64:54:57:b3:05:ff:cb:80:91:27:a5:70:
                    41:15:58:8a:51:ef:2c:ec:e2:33:b0:a7:7a:07:cf:
                    96:31:07:d5:74:3a:a5:08:c4:87:8a:94:0b:d3:ed:
                    6b:9c:38:67:43:fd:bc:a7:a3:46:82:0f:90:38:fd:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:71:59:25:01:4E:C6:AE:6B:72:BD:E5:06:5F:EF:18:9F:48:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/6753e65f-38f4-3b06-b0dd-61002dbd212d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.227.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:69:0c:92:a9:66:63:ea:6c:bb:c9:c2:94:1e:57:e8:ce:
         55:11:55:77:99:d1:9a:47:9f:97:65:11:4f:7a:41:d5:71:d3:
         e3:a2:be:ee:59:c4:f5:b5:ea:fc:ce:a5:fc:13:95:e3:4f:a8:
         ab:15:27:37:6c:86:7d:17:01:10:1f:a5:ab:24:be:5d:a6:38:
         bf:b5:3a:34:47:dc:1a:de:10:c1:56:2c:58:e9:2a:ed:ab:43:
         4f:a4:51:4b:9c:aa:41:e1:a2:f8:6b:db:1f:5b:af:e9:48:2a:
         50:76:d4:3d:14:12:e0:83:57:c6:1d:dd:08:0e:98:38:07:89:
         60:a1:c9:6c:c6:0c:fb:a0:f4:3d:1e:ce:42:51:92:cc:d8:f5:
         a7:a4:23:a4:5c:72:dd:ca:8b:c2:0c:39:43:f3:87:cd:0d:71:
         56:7a:97:dd:37:29:e6:6f:13:c5:f2:8c:c0:70:28:a6:cb:41:
         d7:b1:3f:37:34:d9:0e:a7:c5:9e:a7:dc:20:b8:8a:7a:b8:cf:
         5b:f2:0f:07:18:ec:42:b1:e1:84:a6:b2:62:90:32:b9:58:44:
         fe:3a:10:b1:40:d4:21:14:71:f9:ec:da:5e:cd:2d:b4:7e:6a:
         01:a5:05:3d:3e:f1:7c:6e:33:b1:a2:0d:5c:2d:e9:25:12:30:
         00:66:4a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:15 2024 by rpki-client on console-ams.rpki-client.org