Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa
File:                     0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa (raw, json)
Hash identifier:          SvcT68MVHh9PoBJ6xBKiTu38b+pKmpkZZV1A8prQKog=
Subject key identifier:   E3:C6:A0:26:7B:82:85:4E:0E:0B:7C:D6:DC:CA:D7:D9:91:B4:12:0F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584756461399B1CF1BD3E1962AC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:13:99:b1:cf:1b:d3:e1:96:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=7b02ccc2-9456-47e6-a239-68b93e4194b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:34:87:54:23:ca:fb:50:f4:2f:26:bf:f3:3b:
                    fb:5e:10:2d:8c:e5:27:2a:1c:8f:6d:60:6f:fc:bb:
                    45:af:d6:dc:31:b4:23:6d:e7:68:a0:dd:43:30:9a:
                    36:46:e9:32:0a:70:71:ee:ae:9b:0a:b6:0c:93:f9:
                    9a:4c:d1:93:cc:62:af:82:c7:fd:90:19:b6:83:e4:
                    d8:3d:85:cb:3f:6a:11:30:3a:41:f8:e6:fe:3a:14:
                    88:3b:eb:86:69:07:55:8f:42:9a:22:a5:a4:fb:14:
                    f5:bc:53:33:11:1e:f8:47:12:c3:a5:38:d4:c3:09:
                    6c:dc:41:80:b8:30:91:1d:e6:64:06:f1:8b:b1:0d:
                    54:c1:8e:e2:82:4d:32:67:12:6c:a7:1c:20:41:cf:
                    60:8a:54:62:e6:54:2a:b0:b6:e4:f3:e9:97:71:b0:
                    4c:f9:1f:45:c9:c2:0d:7c:67:7c:53:44:9e:fa:92:
                    5e:39:b6:e4:89:1d:af:6a:e0:a2:3c:02:ed:01:46:
                    01:2f:51:e6:c2:30:ae:44:d2:91:59:c6:b9:32:50:
                    0c:70:dc:62:35:d8:15:c2:f8:85:e2:4a:71:b0:e8:
                    f4:3f:70:41:9a:d3:d6:a6:35:8e:b0:3b:a9:61:7e:
                    dd:8d:d1:69:a1:68:52:77:2b:42:dd:b6:be:94:68:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:A0:26:7B:82:85:4E:0E:0B:7C:D6:DC:CA:D7:D9:91:B4:12:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e5b153d-1130-38fa-be18-dafeabd6c2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:12:5a:ec:72:17:02:cf:43:b0:aa:74:0a:65:bd:2d:d3:
         b1:6b:5e:89:48:8e:ae:0a:05:22:ee:1b:51:68:72:44:7b:20:
         fb:f3:9f:e2:30:17:50:3e:70:47:d2:98:bc:02:b4:60:3e:ab:
         1a:63:8e:06:4c:ec:cb:28:5d:9f:4b:87:ce:4b:88:5b:45:c3:
         c3:9b:61:30:aa:55:ff:4e:77:0a:fb:10:eb:3d:11:9e:cb:18:
         ac:74:6a:6c:c8:52:c8:dc:1a:62:90:02:cc:87:e3:1f:08:2b:
         a2:d5:4c:05:f0:22:dc:51:d0:93:dc:fb:68:4f:c5:cf:ee:d7:
         85:6e:be:74:4e:56:cc:39:84:77:1b:e7:0b:10:0b:5a:c8:89:
         00:9d:f3:b2:73:7d:65:53:25:95:c5:3c:bb:cd:89:4c:17:9c:
         6a:f9:51:3e:5f:99:04:b3:a6:b9:b4:47:5f:c1:df:7f:4d:af:
         10:d2:24:19:ea:f3:0c:d2:52:89:b1:4a:f1:51:ce:44:7c:64:
         71:24:ae:5c:79:de:87:53:2c:51:bd:bf:d0:8e:9e:28:5a:d9:
         64:09:d7:bc:79:da:b3:64:a5:f7:88:55:19:2b:c2:0a:d8:c1:
         38:35:11:bc:0b:e9:82:29:1f:17:ee:5f:e8:4e:b9:a4:f7:d4:
         47:7f:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:45 2024 by rpki-client on console-fra.rpki-client.org