Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c63dced-c440-3efd-bb84-682eb9c7479c.roa
File:                     5c63dced-c440-3efd-bb84-682eb9c7479c.roa (raw, json)
Hash identifier:          5uifzKtdLng0B2yksUVXaxY6Ov+ydUAenzOZJGvDw2g=
Subject key identifier:   75:65:64:E8:A2:50:5A:9C:64:2D:63:18:C7:78:06:98:2C:4B:31:BD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166421E2C23
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c63dced-c440-3efd-bb84-682eb9c7479c.roa
Signing time:             Fri 05 Oct 2018 02:46:05 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     19271
IP address blocks:        204.2.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:1e:2c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=49c49f25-7759-449b-b5cf-85f22836020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:de:ff:bc:82:17:49:a0:7a:1e:1b:95:2d:
                    e6:bc:13:04:bb:99:26:b5:d9:e8:6e:37:bc:9e:1f:
                    8b:dd:36:a7:28:40:5e:6d:54:e8:01:41:79:16:34:
                    c1:a8:b0:02:6d:c9:c6:de:fa:68:86:91:f1:f8:65:
                    41:9c:8b:fe:1a:95:ee:b0:36:8f:f9:71:91:de:f7:
                    f4:35:d6:90:ba:1f:35:59:6f:98:f0:e5:b3:bf:6f:
                    bc:58:17:c3:3d:b6:5f:77:2a:e2:08:a4:9a:e0:89:
                    60:c2:f1:8a:cf:88:03:a3:c5:53:84:12:09:d2:37:
                    ff:c8:e6:b6:d7:de:67:5b:df:c3:27:e4:b1:61:18:
                    2a:5c:b3:6c:bd:1b:0d:86:3a:e7:ae:83:60:d1:1a:
                    6e:36:82:6c:2b:cb:7f:43:2e:d1:10:fe:b3:81:ec:
                    74:0a:eb:2e:c3:44:78:af:9a:10:89:ed:00:35:4e:
                    7e:9c:f5:bf:a1:04:f3:f7:9e:21:76:51:ed:5d:8c:
                    8f:83:54:f5:a8:8a:00:64:24:30:0c:8d:ed:c3:33:
                    58:31:78:1d:82:1e:a2:e7:ec:07:f5:27:bf:73:22:
                    61:52:c5:8d:05:fa:02:d7:87:48:ca:46:11:7b:81:
                    18:8c:7e:19:b6:b7:80:83:f6:36:d2:bd:88:ea:9c:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:65:64:E8:A2:50:5A:9C:64:2D:63:18:C7:78:06:98:2C:4B:31:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c63dced-c440-3efd-bb84-682eb9c7479c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fd:0f:e1:32:20:e8:eb:47:e4:b5:60:69:e0:34:bc:a0:ee:
         97:06:76:ab:10:be:fa:7c:3d:ce:0a:0e:79:00:20:cf:f4:3f:
         98:c8:0e:4f:d2:1b:ca:ae:94:34:7d:16:c0:f1:f7:52:49:04:
         98:2c:2c:da:c1:a9:89:fd:b9:de:bd:97:3e:4e:2b:06:be:24:
         9e:a6:2c:aa:23:ba:3a:e7:41:99:f1:07:3a:8e:63:b5:7e:0c:
         30:f3:1d:f5:9e:12:b8:87:92:f2:8b:c3:09:ff:65:11:e9:98:
         62:de:6a:c3:fe:a6:75:f7:18:5b:1d:64:f5:43:4d:da:65:14:
         33:34:39:f1:67:7f:77:de:11:f6:2f:8e:e1:8f:f2:b4:42:9c:
         0c:9f:8d:ee:99:4d:6e:da:75:85:6e:9a:3a:1d:75:81:56:08:
         dd:c7:45:96:be:16:43:52:cd:4a:65:b0:e9:b1:5b:62:aa:6c:
         d0:db:48:cc:a9:b6:5c:98:4f:b6:ad:6f:42:67:f6:29:d9:af:
         24:e7:98:9d:ce:c4:88:60:05:7a:a7:f3:4c:bc:9d:a9:e1:3c:
         ea:18:30:fa:b8:3f:58:5a:79:ec:c3:96:55:3a:49:2c:27:27:
         cf:32:0b:ba:66:37:0b:49:68:db:40:95:56:2f:98:03:b1:28:
         26:1f:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:12 2024 by rpki-client on console-ams.rpki-client.org