Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/680dd3ae-c00e-389d-aa02-3e663df59722.roa
File:                     680dd3ae-c00e-389d-aa02-3e663df59722.roa (raw, json)
Hash identifier:          0jJ8g6YUBOpGSIHBLXvVsmBGp2yFDgYzhWoYChEBivA=
Subject key identifier:   36:B5:AE:5F:DE:92:33:0F:2F:34:E2:51:57:1B:24:2E:CD:AD:B9:B4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DCF87AF80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/680dd3ae-c00e-389d-aa02-3e663df59722.roa
Signing time:             Tue 15 Oct 2019 13:07:19 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     53577
IP address blocks:        192.204.106.0/24 maxlen: 24
                          192.204.107.0/24 maxlen: 24
                          192.204.144.0/24 maxlen: 24
                          192.204.145.0/24 maxlen: 24
                          192.204.146.0/24 maxlen: 24
                          192.204.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:cf:87:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=46f8b94b-45af-4440-b12f-21aad82cbea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:23:00:a2:65:6f:cf:2e:45:ff:68:36:1d:
                    65:92:01:15:db:94:85:f7:db:d8:ac:94:35:0e:06:
                    c5:f7:03:1e:2f:a5:b1:0c:6f:d2:93:ff:9d:c9:27:
                    0d:99:00:6b:32:2e:3c:68:04:26:ab:51:93:ea:9b:
                    48:62:02:57:ef:b2:ea:4b:1c:fd:51:4c:63:08:de:
                    98:4e:d2:c5:51:22:a7:d8:d4:1c:54:6e:62:35:11:
                    e8:0a:27:29:0f:f1:94:e6:8d:4a:b1:7c:cf:6d:12:
                    e6:53:f8:8a:bb:b7:3f:4d:13:d7:86:68:6e:4c:4a:
                    a9:82:03:1f:b6:54:5f:b4:9b:dc:cf:5a:1b:8d:45:
                    9a:c0:ea:c3:dc:c1:19:00:fb:40:58:23:2b:9b:bb:
                    69:68:09:42:56:34:76:9a:7e:9f:37:d8:e9:c7:0f:
                    fe:31:09:6c:34:b2:95:a0:1a:c6:3b:ca:48:65:5c:
                    5a:89:c8:2b:df:ef:ca:d2:ef:5d:ba:c9:19:e4:cb:
                    6f:bb:bc:fe:66:91:fd:cc:64:4e:04:f5:1f:1e:66:
                    6d:b2:cc:f6:a2:fb:b3:75:4d:eb:0e:de:7d:64:ac:
                    18:89:28:a5:7e:4f:2b:5b:12:de:28:e4:0f:c7:15:
                    4a:f5:50:e2:18:7f:1c:0a:10:4a:3c:9b:7e:93:54:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B5:AE:5F:DE:92:33:0F:2F:34:E2:51:57:1B:24:2E:CD:AD:B9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/680dd3ae-c00e-389d-aa02-3e663df59722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.204.106.0/23
                  192.204.144.0-192.204.146.255
                  192.204.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:6a:4d:92:5f:06:90:ac:bd:4f:95:2a:d1:d8:9e:c8:d2:
         c9:fd:d9:51:30:1b:bb:3f:fd:1b:72:ee:ee:1f:8f:8f:a8:cf:
         30:1a:47:34:b8:0e:35:76:6d:ed:c5:6c:cb:cb:4f:57:3b:e6:
         f8:da:42:ae:93:c4:91:b9:34:d1:39:2e:36:6e:07:e6:cb:f4:
         59:50:d7:c0:97:38:19:96:74:f9:e0:c7:e1:61:40:fa:74:65:
         a7:35:3f:3f:dd:81:65:61:83:6e:14:66:e7:54:c8:66:f6:08:
         b9:28:f8:95:48:5a:23:0b:ab:a1:db:2f:7a:cd:b7:94:b9:7a:
         66:7c:d8:3b:e5:87:30:d4:4f:76:07:73:e1:a8:1a:45:71:08:
         e1:50:a6:4b:e6:27:46:20:2e:bf:bd:d3:73:27:d0:cf:c4:b5:
         ea:13:cc:69:f4:92:c0:19:ac:87:ab:e3:21:fd:b2:6c:0f:81:
         a3:76:4a:e6:55:70:a6:c6:71:bd:7a:a2:76:46:e8:b2:d5:dc:
         eb:e5:db:96:ed:f1:13:ec:b2:2b:48:40:1f:01:28:4e:c5:5a:
         19:9f:5f:e7:71:c6:9e:7a:60:a2:42:21:11:45:4d:e3:d9:b1:
         64:ec:fc:6c:24:3e:1e:c0:fe:11:93:15:b0:de:de:d6:53:87:
         93:ea:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:02 2024 by rpki-client on console-fra.rpki-client.org