Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9216999b-9069-3bc8-b34e-bad6c8912127.roa
File:                     9216999b-9069-3bc8-b34e-bad6c8912127.roa (raw, json)
Hash identifier:          DPocoYk/cosG2TYGp4mnUCUVwjeChWBYyVrAUuFWiek=
Subject key identifier:   D2:F4:62:AB:5F:90:5F:55:E7:BA:5E:FD:DF:DE:DE:C9:4F:93:17:1B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FAB939B64
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9216999b-9069-3bc8-b34e-bad6c8912127.roa
Signing time:             Wed 15 Jan 2020 23:39:35 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     14717
IP address blocks:        204.141.184.0/21 maxlen: 24
                          206.166.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:ab:93:9b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=fdf67c48-e85a-403a-a6d3-2bf241f3a12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:cc:b2:38:af:31:f0:bb:40:7b:eb:f9:8b:
                    62:34:e2:a8:b1:11:7d:d0:c5:32:b9:bd:f2:22:2c:
                    05:e6:0b:1c:34:e2:a9:fd:8d:f8:86:c0:cb:82:73:
                    cd:6c:fd:09:b0:d7:b5:ed:b2:4d:14:0f:2b:5a:88:
                    96:88:63:7d:91:51:87:36:7b:96:11:eb:3e:bf:5d:
                    ef:66:16:e1:ac:83:49:5a:78:d1:05:d5:33:03:8e:
                    79:8a:1c:e0:33:f8:d9:b5:69:5d:b6:44:cb:df:d5:
                    00:ad:8d:90:c1:e4:a9:28:6b:52:3a:c3:11:d0:a9:
                    86:9a:4d:4f:28:ad:90:a1:0a:9e:fe:a1:3d:d8:c3:
                    38:7d:05:13:52:74:53:f9:5c:be:8b:8c:65:9c:85:
                    89:20:ba:ec:09:1a:04:cf:78:86:bd:79:b5:1e:ea:
                    29:0a:04:cc:bf:00:4c:ee:7c:f7:af:f0:b6:f0:03:
                    9f:43:02:a3:7d:f4:ad:50:95:ab:75:d0:1d:51:cb:
                    6f:dd:59:1f:f9:58:12:d7:63:76:bb:8c:1e:db:ae:
                    33:ea:e5:d9:ba:d0:be:72:2f:bb:dd:ff:48:04:82:
                    46:f4:b0:be:bc:92:ef:3c:0e:40:08:be:83:e1:df:
                    04:e4:df:cb:7c:de:93:6e:49:31:fc:2c:07:4e:5f:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F4:62:AB:5F:90:5F:55:E7:BA:5E:FD:DF:DE:DE:C9:4F:93:17:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9216999b-9069-3bc8-b34e-bad6c8912127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.184.0/21
                  206.166.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:82:ea:f9:72:e2:99:48:5f:00:78:f5:a9:03:a3:a3:04:86:
         76:e1:00:fd:c5:a3:81:cc:82:73:54:3e:8f:dc:a7:04:39:a0:
         4c:0a:17:f3:70:f0:ad:f1:e8:0f:e1:1f:48:16:a3:39:87:39:
         3f:2e:95:24:dc:f5:64:35:cd:a6:ea:a0:a0:4e:14:f9:fe:77:
         5a:2f:f3:44:c2:87:99:63:99:0d:5f:cc:61:ed:d6:db:61:d1:
         5f:5f:c4:29:90:1a:00:ef:79:3a:8e:58:cd:dd:d0:a1:82:db:
         9a:ea:55:69:14:8a:46:85:fe:8e:a6:0d:0f:69:d0:ec:4f:00:
         95:cc:1f:fe:6f:d0:98:b5:97:79:3b:c3:d6:11:ab:ff:ee:df:
         df:bc:81:02:c6:91:30:c7:1b:67:94:dd:54:c4:ae:66:db:05:
         e6:08:7c:12:09:90:c1:fb:32:fe:67:55:e1:3d:49:b3:9d:b3:
         27:19:86:83:65:f3:76:7f:62:05:f5:24:7f:aa:53:9f:d0:45:
         17:c4:c1:b0:3d:ff:2e:33:37:a0:be:e3:56:ab:86:f7:d8:4f:
         dd:5d:17:9c:c6:f2:0f:9f:70:25:a8:af:91:69:e1:05:68:31:
         b9:4c:88:70:19:fd:08:10:24:33:f8:1f:3b:07:fa:6e:4c:e6:
         a5:cf:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:09 2024 by rpki-client on console-ams.rpki-client.org