Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa
File:                     5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa (raw, json)
Hash identifier:          bX3Spz1Ip53s00m5AE6KSgoHLOoCFDU9mclXB5nKt9A=
Subject key identifier:   41:A2:7F:22:09:12:ED:B2:15:6F:BA:DC:BB:03:6A:9A:E4:E0:D7:9E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584756460F53C2C32785B27E0080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:0f:53:c2:c3:27:85:b2:7e:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=1e7e89d1-a6bf-48c1-81d6-8e9fdf924888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:50:36:9e:de:f2:21:08:05:e6:be:58:97:
                    88:70:c8:36:94:8a:16:7a:7a:28:dd:4d:9e:18:e1:
                    04:d4:86:b8:d8:0b:d2:a8:e3:b7:b8:dd:d3:eb:e7:
                    0f:c7:b8:ab:79:b7:f8:12:59:0d:ad:17:6f:68:f6:
                    f3:cd:e5:99:15:cf:53:05:0a:88:b5:6c:3b:e7:d8:
                    40:d1:62:4e:7a:cc:c8:59:27:17:f1:cb:12:db:52:
                    e1:7e:45:0a:ed:ef:64:0a:f5:b3:c8:2d:63:50:5f:
                    0f:4c:77:de:5c:4f:f8:b8:24:b2:5f:f9:ec:b3:b8:
                    2c:27:45:c2:fa:1b:3c:3a:2a:02:b0:72:21:8b:c8:
                    08:93:7d:c8:75:b1:ad:7c:ec:ef:3f:2f:98:10:bc:
                    b8:49:9e:d8:38:f0:c5:3d:4a:d8:e4:f5:4d:3a:45:
                    7c:73:97:53:f4:e6:fa:72:a8:7e:da:f4:b9:cf:d9:
                    7e:fe:71:d9:a1:8f:6c:91:dd:a0:e6:c1:4f:aa:47:
                    41:d4:45:f7:c0:f0:d8:70:9e:f9:0a:04:1c:c7:0a:
                    f3:63:aa:8e:5e:33:b1:dd:8c:d6:be:4f:59:be:72:
                    d6:92:51:91:6f:1f:3a:72:db:30:21:6c:68:45:72:
                    1e:6f:09:b1:42:0e:21:27:a0:b6:d3:09:27:df:ca:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A2:7F:22:09:12:ED:B2:15:6F:BA:DC:BB:03:6A:9A:E4:E0:D7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5ed84f95-c2e5-3200-b8c6-1af75ef11554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:31:11:1b:23:e1:87:e1:ba:91:1b:5a:a6:07:fa:aa:27:b8:
         ab:64:3a:3a:9c:15:df:b1:05:20:99:f4:a0:32:fc:cc:da:2a:
         14:f7:f2:41:c4:21:29:4b:66:3c:d6:e7:e9:3e:a7:94:b5:a6:
         4c:08:cf:80:e1:b3:4d:d1:94:4c:0c:c5:10:d1:ca:99:bf:21:
         56:bc:3d:11:1d:67:ef:76:66:38:37:d9:09:2c:a4:12:8c:e8:
         1a:fc:15:c8:5a:2d:2b:ae:92:a6:26:3d:4d:24:7f:27:93:73:
         c8:12:0d:f1:93:26:f9:e5:a6:20:d1:1a:a7:a5:d2:7f:a7:b9:
         69:4d:dc:ac:f6:2a:be:ef:8c:5e:bc:69:25:d9:ec:fb:08:fe:
         ef:1e:c3:bb:6f:f9:61:58:98:2e:b8:dc:10:1d:81:6b:99:ec:
         ea:f7:00:da:86:bb:ee:20:8d:1f:48:34:04:49:3c:8e:ff:b7:
         14:ff:83:38:6c:55:4f:5e:2d:04:02:2e:1c:fa:d7:0a:ab:eb:
         81:29:bf:01:0e:3c:00:49:8b:36:49:e4:06:b3:07:e2:a6:7e:
         4a:1b:c9:96:9a:1a:fd:de:ba:c4:61:7e:b1:96:58:f7:88:83:
         c9:89:40:1a:9f:d1:87:67:d3:44:d8:d0:65:a4:e3:c3:69:cd:
         af:41:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:47 2024 by rpki-client on console-fra.rpki-client.org