Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e9cf488a-cd3f-36c2-9903-968b609ab3dd.roa
File:                     e9cf488a-cd3f-36c2-9903-968b609ab3dd.roa (raw, json)
Hash identifier:          OvnQwVG7o4r0Hfdg9JrvurRyWwO2vsxz5XjoLyocRCQ=
Subject key identifier:   6C:9B:D4:0E:2C:4A:42:A0:D7:04:38:2D:C7:34:90:A5:85:62:52:85
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166421A249F
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e9cf488a-cd3f-36c2-9903-968b609ab3dd.roa
Signing time:             Fri 05 Oct 2018 02:41:41 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     46785
IP address blocks:        204.2.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:1a:24:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=cd2bbd44-d13a-4494-ad57-e2d5e9dd18e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:b4:b5:f5:d2:f9:b7:44:dd:ed:fe:58:43:
                    5b:69:ba:14:ec:b9:f4:30:5b:c0:ad:4c:da:c8:ff:
                    0f:2c:3d:d9:cb:c6:9c:c5:e2:4c:4d:e1:03:3a:d1:
                    17:97:5c:c7:9c:e6:84:1d:67:fa:d5:eb:97:51:d3:
                    b7:fe:2f:5d:84:5b:b9:66:ef:32:1e:15:c7:6f:13:
                    82:16:90:f0:b3:ec:b6:ec:1d:29:7f:ed:69:22:a7:
                    53:1e:ad:c7:35:0e:b6:b0:28:ca:11:65:9a:67:75:
                    3d:42:68:3c:6b:1a:4d:99:45:2d:41:24:f4:18:7c:
                    05:33:dc:6d:e5:d0:52:d6:d1:98:58:80:96:91:40:
                    92:78:ce:3e:9b:b4:d8:2c:18:c8:16:f1:c9:54:7c:
                    91:2f:83:9a:ff:98:d1:07:5f:41:ae:0b:e0:4e:47:
                    b3:26:dc:9f:f4:6c:9c:9d:30:82:94:b7:ef:01:ce:
                    81:3c:fe:a0:af:6a:ae:41:0a:6f:20:84:90:b8:25:
                    dc:1f:9b:17:98:78:17:64:68:69:84:a9:04:ad:aa:
                    4b:81:03:60:1c:8c:8c:86:6f:2b:40:ca:22:f6:c9:
                    5e:74:81:a2:3d:d8:a7:f8:dc:5f:1d:ec:6e:2f:e2:
                    f9:da:45:13:09:ea:c8:3c:9f:a7:85:50:d9:b1:2e:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9B:D4:0E:2C:4A:42:A0:D7:04:38:2D:C7:34:90:A5:85:62:52:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e9cf488a-cd3f-36c2-9903-968b609ab3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:86:9e:48:52:50:81:ac:b3:60:3b:4a:a2:d1:ae:5a:47:
         cd:70:15:64:05:97:ce:3e:13:01:ca:b8:7d:40:0a:e3:11:31:
         a6:6a:c7:87:ba:f5:54:c3:2c:b8:24:38:a4:14:21:29:fe:dd:
         32:ab:00:15:9d:0b:42:07:4f:69:a4:59:09:4c:03:aa:94:49:
         f8:50:04:9b:11:25:78:d2:fa:f6:c5:b9:f4:a0:93:6a:28:ef:
         a0:5b:d0:a7:24:15:c6:d2:7c:7a:9e:0c:40:1b:e8:1c:aa:ee:
         b7:b8:bc:38:1f:eb:8a:34:e3:4e:a1:11:bb:ea:e9:32:74:4c:
         d6:42:0f:59:53:f3:92:9b:6e:08:28:6c:a3:92:9a:13:64:e6:
         55:f9:b9:7a:ed:4c:79:78:95:cd:08:ba:17:a3:ad:ae:4f:10:
         ad:34:71:23:a1:8c:d0:89:68:c0:c7:d3:59:80:97:ec:c2:ff:
         55:73:9a:5f:8e:7d:d4:ff:f0:e6:7e:d9:c3:6d:bb:65:93:38:
         23:a8:73:32:5b:72:e8:7c:3d:2a:6a:f9:32:39:3a:19:a6:19:
         d3:8e:97:24:30:f7:34:9b:f1:4d:75:08:6d:0d:55:09:5a:f1:
         fe:58:e4:84:bb:cb:bf:8d:1d:5c:4f:22:88:01:c6:ee:ae:ef:
         8f:ee:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:09 2024 by rpki-client on console-fra.rpki-client.org