Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e802405-d75a-3626-9c8e-92eb8108137a.roa
File:                     8e802405-d75a-3626-9c8e-92eb8108137a.roa (raw, json)
Hash identifier:          jL5su3iLEGYHEGKmI/bdH4rtkMDEmgQFgg8IzIKp0NU=
Subject key identifier:   4C:0C:23:8B:17:2D:D7:58:7B:74:D2:86:FB:07:DD:0E:FD:FD:D7:AD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285841D0E96503C80E2FDEAD9FF2C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e802405-d75a-3626-9c8e-92eb8108137a.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sun 09 Apr 2028 04:00:00 +0000
asID:                     17005
IP address blocks:        204.141.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d0:e9:65:03:c8:0e:2f:de:ad:9f:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Apr  9 04:00:00 2028 GMT
        Subject: CN=2f3c1276-96fc-4fce-b3fb-d432a9f1d9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:b9:c4:ad:b2:16:b0:22:8c:aa:bd:62:a3:
                    c1:6b:5c:a5:25:2b:a0:b9:b4:ce:86:b3:c9:45:5d:
                    0d:d7:ea:6a:32:53:0b:93:9e:04:19:f8:3e:f1:b7:
                    b3:af:c2:68:04:8e:ed:9a:8f:ee:1a:1e:f2:ab:2c:
                    44:2e:72:da:2b:bf:4d:c3:f9:9f:e9:81:cf:33:b7:
                    db:28:22:ca:0b:b8:24:71:a5:f3:68:2d:6f:ab:c6:
                    3c:1d:12:38:52:74:4b:00:d7:fb:b1:a3:d2:bc:90:
                    86:3a:5c:11:af:71:50:ba:2a:bb:8a:21:e1:4a:f1:
                    10:f6:50:88:fb:e4:51:e1:64:26:24:51:53:68:3d:
                    3f:f2:4f:dd:21:62:69:e2:0e:06:88:9f:71:cd:02:
                    bc:2e:97:d0:79:fe:6e:6d:48:69:a1:0c:8f:15:b9:
                    fb:1c:bf:a0:c4:00:3a:fa:7b:58:bd:a2:4b:a1:1c:
                    e8:c6:69:79:48:72:88:80:a6:cd:93:ed:0c:54:c2:
                    8e:d8:4c:13:e7:0c:85:1a:eb:0b:e1:7f:99:78:d6:
                    ea:07:fc:2f:23:b3:e1:58:98:e8:41:92:df:85:6c:
                    9b:18:23:04:20:a2:ca:74:24:1a:e1:cb:c6:f8:34:
                    1d:02:81:53:58:cc:96:ff:fb:ec:58:a5:45:ea:04:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:23:8B:17:2D:D7:58:7B:74:D2:86:FB:07:DD:0E:FD:FD:D7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8e802405-d75a-3626-9c8e-92eb8108137a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:88:8d:9a:30:71:cb:53:fa:af:27:00:64:d6:61:32:2a:
         6d:89:22:65:54:2b:01:4d:18:40:be:f5:55:8c:a1:c2:46:47:
         56:fb:46:05:bb:af:2f:bb:cc:3c:12:91:ca:30:db:0f:bf:73:
         10:d7:92:3a:55:07:4a:93:ef:2e:8a:e2:6d:83:90:e5:c2:00:
         74:f2:71:79:e4:c0:82:25:22:76:08:c7:a5:f9:b5:f3:14:67:
         8a:58:9a:ba:65:16:cd:5e:82:40:df:b1:bf:3f:6a:60:89:cf:
         13:eb:9e:6d:b6:dd:cd:63:6c:88:27:01:22:ae:71:e6:d8:8e:
         3a:72:86:57:5e:ee:e8:97:b9:c5:f6:42:f6:a0:bc:d1:51:40:
         92:ed:b9:e0:29:48:92:03:20:5e:09:b7:24:66:3a:e6:62:9c:
         01:7e:fd:21:e2:47:1e:cd:ec:dd:d4:9c:e2:da:a9:fa:73:f7:
         4e:90:9c:7d:85:a5:37:fd:3d:aa:96:6d:6d:35:79:c7:3d:29:
         bc:e9:a6:a0:ae:78:c8:e2:cb:fb:b0:8d:0b:4b:59:22:f0:16:
         2d:63:a5:82:57:6d:f0:ab:e9:31:5f:45:4f:86:c4:da:65:0d:
         83:db:92:95:9d:87:fb:7a:da:05:47:e1:ea:6a:5b:94:cb:b0:
         7c:4e:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:02:05 2024 by rpki-client on console-ams.rpki-client.org