Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/31b3da7e-4cdb-31aa-918f-e18431f90e24.roa
File:                     31b3da7e-4cdb-31aa-918f-e18431f90e24.roa (raw, json)
Hash identifier:          lKR/ZTJeZtUAo1eC2bbgj+oZE8XhLu4VrS1lG9KCVXM=
Subject key identifier:   4D:4D:C1:61:D6:D8:7E:46:63:89:E9:0E:1E:7F:86:DE:53:1B:0F:27
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FAB18943F
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/31b3da7e-4cdb-31aa-918f-e18431f90e24.roa
Signing time:             Wed 15 Jan 2020 21:25:12 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     174
IP address blocks:        204.170.245.0/24 maxlen: 24
                          204.170.35.0/24 maxlen: 24
                          204.170.20.0/23 maxlen: 24
                          204.171.61.64/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:ab:18:94:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=b206eda4-9310-4362-9aa2-4f05bd1baf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:c4:33:20:8c:36:d7:47:cd:44:8c:2c:30:
                    83:ee:73:1f:53:97:f0:9e:02:6c:d4:21:bd:ce:4b:
                    be:b7:01:dd:a7:a9:0a:75:82:0b:71:b1:ed:2e:bc:
                    a1:b1:a3:74:16:67:57:fa:30:dc:03:02:8d:6c:70:
                    3d:77:d3:79:4c:3b:63:54:d0:c7:17:64:ea:b0:1f:
                    dc:91:53:a8:10:4c:79:72:aa:85:ba:70:44:2e:65:
                    39:24:24:9b:a7:f2:58:6a:62:a6:93:24:5f:79:28:
                    fc:43:7a:0b:7f:17:56:c1:a3:49:ed:cc:13:5d:9f:
                    60:fd:7e:a9:5b:c6:4a:2e:4f:69:36:c7:1c:c7:ed:
                    7a:42:54:86:d6:d9:d2:cf:c0:cd:ee:dc:e7:33:db:
                    a2:12:4a:bf:94:77:ba:1a:bc:cb:0f:ce:95:c5:9d:
                    58:d7:c3:f0:f7:34:d9:7d:cb:1a:5b:73:d2:74:f7:
                    ae:33:b6:e9:60:ab:4e:ce:89:77:ef:40:3f:ed:0c:
                    33:9e:78:ac:1b:e3:9c:34:d8:01:60:1b:69:28:94:
                    e4:87:b1:d0:ff:cd:38:4c:f8:90:02:b5:83:a9:16:
                    62:60:d4:70:de:50:fc:2d:2a:b2:18:6e:12:7f:46:
                    e4:d7:27:ea:8a:2e:86:ca:b8:4b:5a:02:83:fa:f1:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4D:C1:61:D6:D8:7E:46:63:89:E9:0E:1E:7F:86:DE:53:1B:0F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/31b3da7e-4cdb-31aa-918f-e18431f90e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.170.20.0/23
                  204.170.35.0/24
                  204.170.245.0/24
                  204.171.61.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ed:86:3c:b8:29:e0:6e:31:86:81:69:51:6d:cd:2e:66:dc:
         87:d7:c8:97:3f:49:ff:a2:14:85:f2:8a:19:fd:e2:2a:3c:cd:
         a1:5e:9c:c1:75:5a:96:16:ca:08:23:74:6b:d8:24:c1:c0:ae:
         9d:84:54:19:d4:ec:9f:cc:a4:1f:e4:44:6e:0a:81:77:0b:d4:
         88:1b:22:96:de:2f:53:4d:ff:d2:39:0b:47:86:62:cd:b5:ff:
         f8:e1:47:29:f4:99:cd:79:25:5d:be:8d:34:1e:6d:dd:cc:b8:
         cb:cd:c4:d2:a3:8c:5e:7d:73:e4:29:c8:b2:80:49:10:9e:2f:
         6b:32:58:a1:46:e3:0d:c5:69:76:72:63:48:48:64:37:63:16:
         6e:6c:93:17:f6:35:1c:36:6a:d9:41:8a:e7:6e:35:f4:3d:94:
         35:45:f1:73:d3:c2:e2:1c:1c:15:b1:f1:34:8b:51:62:56:24:
         0f:42:eb:e7:6e:44:25:55:14:0a:3e:2c:97:bc:8e:05:df:35:
         1d:a3:8d:21:62:f6:51:a9:d3:35:d4:14:d7:08:6c:80:5b:d8:
         ce:05:de:4b:05:c3:d9:92:1b:46:85:75:1e:8d:bd:9c:de:ec:
         5f:83:7f:c5:a8:ca:de:6d:d1:c7:c3:c4:bb:be:e8:f1:5e:42:
         64:04:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:59 2024 by rpki-client on console-fra.rpki-client.org