Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6a9844a7-a68e-3210-ad22-f2b58e65b8f3.roa
File:                     6a9844a7-a68e-3210-ad22-f2b58e65b8f3.roa (raw, json)
Hash identifier:          HslE8atNNZ98wIxaw9ICxbN5DMYLJzR3iIOSiQfznmw=
Subject key identifier:   9D:47:A0:0D:BB:CA:65:E9:10:8E:DE:B0:7C:F7:FA:EE:9E:8F:3C:6D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664217ADD8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6a9844a7-a68e-3210-ad22-f2b58e65b8f3.roa
Signing time:             Fri 05 Oct 2018 02:39:00 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     35994
IP address blocks:        204.2.211.0/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:17:ad:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=65aaae58-67ee-4c67-bc77-8f4a8edfe653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:6b:c9:96:ae:4c:96:ab:5d:68:56:51:91:
                    f2:2e:2d:55:0d:10:0e:0d:36:a5:b4:74:f2:40:35:
                    0f:54:25:92:86:0d:24:7d:96:96:52:b8:9d:d4:21:
                    b0:7e:45:25:0a:cb:13:ff:c4:45:43:da:be:87:2c:
                    3e:0a:01:a3:94:f5:02:91:cb:ca:1c:66:49:56:92:
                    33:90:24:d0:41:17:84:67:98:86:3a:1d:f3:76:01:
                    48:e6:9f:4b:75:00:5a:42:df:b1:11:10:46:bf:b1:
                    46:24:8c:20:38:27:e3:eb:46:28:9f:42:20:e6:41:
                    7c:05:ba:06:be:54:b6:8b:11:b9:b9:6d:69:79:8e:
                    f5:89:3a:4d:78:2b:09:11:6f:db:fb:16:b9:d0:f6:
                    93:8f:65:ab:fa:d2:92:6d:0f:09:47:c7:62:5b:ef:
                    f1:37:f2:74:0e:24:f4:39:cf:50:ae:8b:cd:a1:e4:
                    78:52:27:7f:37:35:af:c0:e5:8d:d9:e4:81:44:fc:
                    88:ab:48:c6:79:64:db:f0:88:78:cb:df:da:1e:b3:
                    91:67:1b:ef:3a:bd:d4:1f:af:fd:48:42:4e:ea:b4:
                    0a:ca:b4:56:eb:86:65:74:a5:d6:27:42:d9:cd:4e:
                    88:4a:99:fd:4c:9a:72:85:08:d7:68:50:6a:9f:c9:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:47:A0:0D:BB:CA:65:E9:10:8E:DE:B0:7C:F7:FA:EE:9E:8F:3C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6a9844a7-a68e-3210-ad22-f2b58e65b8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.211.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:81:12:8e:bb:b5:7f:28:10:00:d8:d2:1d:6c:63:eb:83:84:
         a9:09:26:5e:c6:99:e0:b5:5d:39:38:1a:b7:0e:76:00:ff:2d:
         29:ce:74:79:a8:73:72:01:a8:0e:d8:08:e6:ee:fc:69:b0:ed:
         1c:81:d0:01:00:be:3b:42:67:5e:a5:72:4e:86:33:25:6c:52:
         b2:b3:23:32:fe:0a:9b:f8:b2:00:08:33:39:df:b2:75:53:15:
         14:ee:a5:64:00:67:3b:cb:f7:40:f2:01:b1:3a:22:0e:98:b9:
         49:71:6c:e6:d2:c2:90:42:cb:68:68:6d:73:5e:fe:d2:60:d9:
         7b:4c:87:0f:11:08:95:61:d1:d1:bb:3a:02:20:47:8f:67:d3:
         a8:39:44:46:f7:b0:94:e0:6a:f3:52:43:75:49:f4:e7:52:2f:
         83:eb:e6:0c:e7:b4:8c:c4:f6:e2:01:e4:5f:53:3f:01:e5:52:
         29:ed:1f:5a:f2:fb:8d:38:ac:76:ec:3d:36:3e:6f:ed:97:39:
         69:16:56:25:fe:20:70:92:d5:b5:a3:b3:11:0f:05:72:c8:ad:
         36:91:1e:b8:c9:7f:23:98:83:2b:0c:be:8d:26:46:4c:a2:58:
         93:5a:16:7d:37:ef:ec:25:29:44:7d:05:b9:32:c5:98:55:b5:
         9c:b5:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:02 2024 by rpki-client on console-fra.rpki-client.org