Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa
File:                     253358bb-6a87-383f-a097-6f2f72c463ff.roa (raw, json)
Hash identifier:          Zu2s0dAfVAcHuqWwxpJAphnlA8obNkuPHf2rU7+jFm0=
Subject key identifier:   93:11:EE:5E:FE:A8:B0:72:3E:C6:75:CD:F3:3D:F5:D6:F2:0B:E0:38
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475A763C96B02A85C78BFB5040
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     397601
IP address blocks:        204.2.128.208/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3c:96:b0:2a:85:c7:8b:fb:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=643a8827-b6af-433c-b509-fab5a309eca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:2d:de:3c:4c:5d:96:59:c7:e4:bf:fe:5f:
                    68:05:b6:b3:05:9b:31:b5:6b:0b:7d:d7:92:8e:6f:
                    03:f4:53:8c:bd:25:35:7e:1b:b3:21:cc:5b:ec:2b:
                    9d:b7:a7:9d:82:40:cb:dc:92:a5:1e:8f:3f:df:97:
                    99:69:5f:30:62:f6:75:95:1c:fa:c7:9e:53:87:72:
                    af:ef:b3:76:7a:e7:57:de:15:d4:d7:70:f1:a1:2b:
                    db:1b:30:b9:f8:4f:1a:5e:45:04:a4:55:93:bf:fc:
                    7f:b0:7d:8e:55:ff:b3:02:c6:6a:74:70:03:a2:61:
                    b9:a5:eb:cc:9b:30:ca:b3:70:60:64:ea:d0:4f:2e:
                    89:22:28:49:b5:1e:9a:bb:46:15:ce:09:16:cc:38:
                    2c:4a:b1:d3:80:a1:de:1c:bb:3e:d6:2c:3a:6a:c3:
                    a9:ff:35:17:29:71:ea:a6:18:16:64:3a:fc:37:5e:
                    20:f4:3c:43:d1:6d:82:84:29:d3:49:c0:14:e1:a1:
                    dc:31:10:71:cd:0f:68:09:04:6e:fe:7f:d2:24:c8:
                    53:1a:6a:66:56:d3:18:6a:ba:13:9f:d6:13:7e:63:
                    e5:ca:f6:67:aa:47:d5:10:47:86:42:ca:a3:cb:cd:
                    fa:98:6a:04:c4:01:9e:0e:11:10:8e:0a:53:68:9e:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:11:EE:5E:FE:A8:B0:72:3E:C6:75:CD:F3:3D:F5:D6:F2:0B:E0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.128.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:0a:66:32:21:9d:fc:d5:b2:a9:89:51:2e:38:cb:0e:d2:
         91:39:89:ad:a1:d0:4d:33:75:9b:74:98:4e:e1:20:12:d1:5c:
         3f:1a:3f:bb:3f:77:73:4c:28:3c:d6:c3:f8:3a:d3:a8:33:d3:
         61:38:45:7f:7e:a3:b5:c8:5f:68:3b:f7:f8:7f:68:83:43:0f:
         32:8b:12:11:63:e9:b8:bb:5a:d0:4c:4f:f2:75:cf:d1:fb:a5:
         63:15:82:de:93:d1:3f:e4:52:57:e6:90:55:61:a3:49:e6:31:
         fb:94:1a:38:15:52:62:b6:a4:aa:b2:db:6c:f0:ec:2d:bc:d7:
         0b:f6:39:1c:1d:04:2d:08:bf:12:d9:82:f7:25:94:3e:61:e0:
         70:b6:bc:a6:ad:6d:78:2b:73:95:17:ff:33:58:51:bb:2a:23:
         ba:75:22:a6:d0:05:e4:6a:d3:5b:e1:6c:46:31:dd:be:a7:ca:
         4f:96:9b:30:3f:95:e2:c4:c7:d0:fc:6e:17:0b:ce:94:ba:8c:
         bd:31:c7:bf:c3:3b:55:5c:99:34:4f:63:e0:51:93:2f:c4:f5:
         8e:b8:eb:60:4d:b9:0b:a0:f1:f9:41:ce:8b:81:a7:3c:75:35:
         13:23:73:9f:99:da:b6:3f:4c:52:1c:88:fb:ae:6a:38:43:6d:
         c1:2f:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:59 2024 by rpki-client on console-fra.rpki-client.org