Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b794592-2a4f-3909-abbf-2adf7c23ccae.roa
File:                     1b794592-2a4f-3909-abbf-2adf7c23ccae.roa (raw, json)
Hash identifier:          idLzbaJpvDQlEMaI6t1/+39mO0oK64LoVaYLyiIudBs=
Subject key identifier:   66:0A:02:B9:59:6F:C8:22:1B:56:91:C6:19:CD:00:40:24:69:EC:2D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166422144CD
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b794592-2a4f-3909-abbf-2adf7c23ccae.roa
Signing time:             Fri 05 Oct 2018 02:49:28 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     32538
IP address blocks:        204.2.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:21:44:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=4cb8385b-e0b6-417b-9599-5c9bd6d806a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:ac:8c:4b:9b:8f:92:78:c3:02:bc:ef:99:
                    d4:ff:f4:f7:af:ea:d3:c9:2b:36:de:29:62:d7:3d:
                    90:dc:af:37:8c:ee:bd:b9:f7:56:0b:a6:12:ba:e0:
                    fa:de:b3:a6:92:13:53:4c:64:b5:48:79:c7:f3:a3:
                    85:16:eb:74:39:fc:8c:bc:72:43:06:c6:d4:af:55:
                    84:e2:8c:82:98:9c:2c:b7:68:f0:8f:2a:f4:71:b0:
                    ee:26:d7:4e:cf:a2:71:d4:d8:10:d4:49:4e:7d:6b:
                    77:c2:89:e5:7d:e0:61:40:05:ae:55:ac:f3:52:f0:
                    f6:a0:53:3d:f0:ab:bb:68:c4:aa:55:b1:bc:d7:e5:
                    14:d4:75:41:9f:cf:dc:4a:ca:30:b2:6d:1c:4d:0f:
                    53:e7:ac:cf:5c:ae:3f:3d:6d:35:f5:c0:5b:66:57:
                    e0:82:14:35:2f:4c:4b:da:51:51:df:13:45:1b:d2:
                    58:0b:55:7c:da:ec:76:c6:50:22:bb:13:68:d3:f0:
                    ec:96:cc:52:54:55:dd:e3:2c:34:c1:fd:cc:2b:0b:
                    9c:e2:c9:f2:82:bc:21:83:d2:90:0b:a1:11:05:e6:
                    b6:7d:f4:da:ce:b0:ca:c5:54:96:fb:e2:0e:52:e3:
                    53:b9:57:4e:d2:78:4a:48:56:2e:88:dc:fd:a2:c2:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:02:B9:59:6F:C8:22:1B:56:91:C6:19:CD:00:40:24:69:EC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b794592-2a4f-3909-abbf-2adf7c23ccae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:87:8b:7a:9b:ee:05:91:8f:90:32:0d:cd:6e:b5:e5:a9:
         f3:5b:77:aa:d7:98:30:eb:0c:84:ae:9c:56:14:38:b2:6c:df:
         2f:ab:7e:d5:0c:77:d5:09:ff:c4:5c:dd:32:e1:04:3f:88:9d:
         e5:22:2e:5e:b0:98:91:64:0a:e4:79:7d:23:51:c2:99:55:13:
         6b:22:23:87:dd:3b:19:6e:5a:a3:eb:aa:77:12:33:a9:92:c9:
         ec:c2:9b:d4:d8:07:d8:2e:8b:02:1a:91:75:07:be:eb:c1:6d:
         a2:f2:7f:c6:a7:92:e9:82:f7:69:fe:47:73:62:29:f0:d4:18:
         1a:61:52:f3:dd:41:ef:56:36:fa:24:07:5f:89:43:0f:eb:91:
         37:5a:1b:b5:02:22:b7:c5:5d:5e:e7:32:3d:9f:88:00:20:f6:
         3c:a1:83:e7:69:a8:8c:ad:c0:19:9b:66:86:25:35:74:35:69:
         2b:42:22:f5:32:65:36:65:d7:9d:da:c2:f4:aa:cf:75:3c:60:
         f2:f1:ea:a0:74:24:db:08:4d:b8:96:48:41:2e:2f:f2:f2:bd:
         35:53:8a:76:27:c0:a6:1d:dc:6c:ec:0f:3c:1b:72:28:d9:26:
         05:0f:1a:e0:4e:1c:95:a2:13:a3:04:f4:2d:4c:70:21:67:60:
         df:61:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:47:31 2024 by rpki-client on console-fra.rpki-client.org