Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa
File:                     5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa (raw, json)
Hash identifier:          jcKKAfWF/q6INNae8Z6zPIEQUAmQkol6DxmWdaqm/WQ=
Subject key identifier:   6C:69:58:1F:A8:18:DD:21:2A:59:22:36:8E:8B:07:6D:53:68:18:86
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858459717BC02A62FDC6A3E1CE3C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa
Signing time:             Thu 18 Apr 2024 20:40:57 +0000
ROA not before:           Thu 18 Apr 2024 20:40:57 +0000
ROA not after:            Wed 17 Jul 2024 20:40:57 +0000
asID:                     13335
IP address blocks:        204.195.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:17:bc:02:a6:2f:dc:6a:3e:1c:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 18 20:40:57 2024 GMT
            Not After : Jul 17 20:40:57 2024 GMT
        Subject: CN=7a1a6c51-6aee-4e84-9fe8-fdd46df8d2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:89:4e:70:8f:23:04:8e:92:e5:7a:2c:75:
                    9e:3c:eb:3b:4f:8c:8c:88:a4:c3:09:64:9a:8c:a4:
                    34:4e:78:a3:03:25:9f:7d:2e:57:f6:8e:63:80:84:
                    37:33:ca:74:fc:e7:e1:64:73:30:5c:8f:34:ed:73:
                    fe:7d:66:23:07:aa:9e:75:d2:ee:92:c2:8c:4a:7b:
                    11:1b:00:10:c3:2e:b4:db:06:68:b6:6f:1c:30:93:
                    33:eb:9a:bf:c9:1e:99:3b:0f:de:3d:dd:46:b2:ad:
                    c4:96:fc:02:72:28:94:e5:ba:91:00:a6:69:5f:40:
                    a6:f3:b7:4a:a0:9f:05:4b:cf:e1:a0:74:d0:5c:09:
                    83:31:54:3b:38:52:63:64:74:b8:2a:28:0f:b5:ea:
                    3a:d9:de:31:c3:09:50:ec:ce:1d:2e:a4:79:34:76:
                    7b:0f:b2:14:e7:ca:01:b6:8e:79:91:67:e3:3c:bc:
                    75:11:1b:ea:84:91:0a:2b:95:2f:95:35:c6:8a:ed:
                    7d:84:9f:a3:a0:22:cf:d2:7a:75:48:8e:a2:75:6f:
                    26:42:08:0c:0d:79:23:29:fe:73:af:c4:d7:01:18:
                    01:3a:dd:e0:eb:cc:dd:47:c9:11:a3:04:24:73:51:
                    05:20:a5:58:da:53:45:e0:e9:25:39:1d:89:bb:6c:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:69:58:1F:A8:18:DD:21:2A:59:22:36:8E:8B:07:6D:53:68:18:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:33:1e:66:9f:87:4a:5f:c2:56:e4:72:70:54:17:cc:05:4f:
         17:5e:65:5f:b9:9a:a6:41:7f:a4:30:44:57:da:16:18:e2:be:
         c1:72:85:c7:4a:27:5c:e0:df:65:60:ff:da:b6:13:b4:db:5c:
         2a:b1:f5:fa:ec:7b:60:3e:0c:4f:75:a0:4f:74:97:45:2c:26:
         42:a5:3b:6b:b3:f0:65:7f:c4:6d:b9:77:b0:1e:c8:68:16:66:
         51:6b:6d:f3:2b:85:f6:fe:43:29:c9:9e:72:82:1d:e6:38:b0:
         d2:23:ed:81:3e:b6:98:ef:77:54:93:6d:fe:95:e1:a8:25:ff:
         d4:5e:6e:0a:2f:ab:91:a8:7a:00:b5:ed:01:89:4c:71:d8:f4:
         40:da:21:1d:69:7c:e9:2b:3b:8a:7c:57:59:28:b5:1a:37:7d:
         c1:be:cb:5a:c2:9f:71:13:c6:9e:01:43:93:0c:63:c0:e9:c3:
         fb:59:03:6f:9c:0d:05:c1:68:9e:f5:a9:c3:2f:b0:cb:02:27:
         c2:39:42:05:47:3f:a0:48:33:dc:8c:ea:4e:b2:6c:10:42:cb:
         09:aa:71:47:03:e6:51:89:05:3b:1d:a3:ea:ac:45:4b:e2:3b:
         81:0e:09:7b:d5:34:6b:8d:ed:45:b4:75:fb:32:e3:7b:56:10:
         36:31:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:53:33 2024 by rpki-client on console-fra.rpki-client.org