Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa
File:                     54a8991f-2df5-35d8-9844-758dac2ecb37.roa (raw, json)
Hash identifier:          arHZHR05AII2dAFJYffCQWad/ZmzKczNl4ojr8Z5u4U=
Subject key identifier:   A4:E8:06:0A:84:2E:8C:66:9C:C0:3F:D7:9A:93:4F:A0:91:82:34:2E
Certificate issuer:       /CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Certificate serial:       010D0C9F432858467BB011FCDA28BFAE3D0FDB00
Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa
Signing time:             Tue 09 Jul 2024 17:52:12 +0000
ROA not before:           Tue 09 Jul 2024 17:52:12 +0000
ROA not after:            Mon 07 Oct 2024 17:52:12 +0000
asID:                     17207
IP address blocks:        204.228.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:b0:11:fc:da:28:bf:ae:3d:0f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd
        Validity
            Not Before: Jul  9 17:52:12 2024 GMT
            Not After : Oct  7 17:52:12 2024 GMT
        Subject: CN=16622185-8a8a-40ca-a48f-b6b8490febde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:df:ad:06:97:a9:66:22:df:71:4f:f8:8b:63:
                    fc:cf:3b:e7:53:01:da:5a:aa:91:82:55:b6:17:bb:
                    3b:58:0a:41:e3:ec:cd:c6:76:a7:d4:c2:17:34:a9:
                    db:a0:75:a0:85:da:b5:69:af:a6:6b:df:14:4d:f9:
                    32:a5:fa:31:74:93:1e:cb:a0:70:90:ac:b0:e1:33:
                    24:96:57:e4:47:78:32:40:d5:6b:44:a3:f8:6b:84:
                    ca:5c:95:0b:8b:f6:b8:47:5f:f3:9e:46:57:49:dc:
                    c5:8d:ea:7d:d3:be:64:21:db:8f:b0:40:1d:2f:7d:
                    9c:05:13:d4:95:73:f9:04:1a:06:3e:b8:48:5d:4a:
                    99:c4:1b:ca:18:4f:84:f7:8f:5e:67:52:05:02:c1:
                    a9:00:7c:10:92:18:11:68:f7:3d:c7:d7:a8:bb:63:
                    44:e1:5d:72:d2:dd:d6:f7:95:aa:16:10:f6:e4:93:
                    14:80:89:e0:42:b0:3b:6b:a9:6b:b5:2c:8f:0d:93:
                    00:e3:79:85:fa:18:e6:b2:fa:77:0a:41:bd:0c:77:
                    e4:2b:56:95:6f:5b:6e:ac:48:c9:02:74:48:7f:84:
                    99:93:8b:d5:48:9a:76:09:dd:83:e1:76:21:bc:2a:
                    3b:51:64:11:3e:5c:0e:87:55:67:74:ef:cb:74:0d:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:06:0A:84:2E:8C:66:9C:C0:3F:D7:9A:93:4F:A0:91:82:34:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/54a8991f-2df5-35d8-9844-758dac2ecb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl

            X509v3 Authority Key Identifier:
                keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:10:87:fb:a4:84:bb:6d:12:5b:48:10:a6:0c:11:4d:40:
         17:86:16:1b:e1:74:b8:04:b0:1a:0e:c0:72:20:84:7b:41:0a:
         8f:93:21:ca:18:5e:99:b2:0f:d9:37:98:8d:1e:03:6e:7f:d6:
         4e:12:3c:23:7c:c3:2c:8b:77:f7:fa:ad:d2:4f:6f:b5:a5:21:
         fe:db:ee:a4:46:7a:45:3e:f6:28:de:53:ef:02:98:fc:76:01:
         2a:95:50:70:90:6b:9a:77:ec:35:86:8c:ae:c8:69:77:7c:81:
         f7:ab:18:da:bb:e2:b3:82:a1:2c:ca:d6:75:f7:be:02:23:3e:
         03:27:92:84:2f:fa:d2:93:92:28:d4:58:e5:c1:2c:07:58:69:
         38:13:9b:dd:bb:61:3d:95:82:f3:4e:47:d1:85:77:54:8c:b5:
         5f:34:1c:81:ea:5e:84:a9:49:1f:38:e1:8f:12:6d:9e:16:47:
         52:06:ba:27:47:b6:87:f7:33:d1:5f:2d:ce:f1:06:94:32:6f:
         e5:be:30:b5:25:11:89:14:1b:c4:63:bf:03:eb:a3:82:d6:02:
         38:4c:22:10:1e:93:23:bc:6f:fa:bf:5f:8a:bc:d4:dc:47:ef:
         64:c5:41:48:24:e9:8f:59:dc:48:c6:43:e1:8c:42:df:9d:b1:
         52:d8:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:02:18 2024 by rpki-client on console-fra.rpki-client.org