Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6012aeb5-9650-33a3-afce-c15708c97a49.roa
File:                     6012aeb5-9650-33a3-afce-c15708c97a49.roa (raw, json)
Hash identifier:          7koZe6rxhEoxadYebvNqCMA40wfIXtI1x8ZryyuJuJY=
Subject key identifier:   0E:C3:34:90:2D:A5:B6:3E:3A:F6:B2:C6:A1:73:8F:FB:CF:7B:2C:BD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847670629D8C2C6ECC2ABE92460
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6012aeb5-9650-33a3-afce-c15708c97a49.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:29:d8:c2:c6:ec:c2:ab:e9:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=fc844ab9-bb9a-4e2e-ada2-6008a0c40041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:64:67:26:55:80:7a:7c:9f:4a:0d:b0:52:
                    ae:61:17:e0:18:9f:b0:1d:58:0d:f1:cd:d5:c1:3d:
                    72:f8:c0:e2:b2:7d:20:2f:7b:12:f7:1e:17:c8:b3:
                    5d:91:d4:a4:4a:e2:13:e6:46:87:af:24:1c:d7:15:
                    50:7c:8a:2e:16:ff:ce:85:97:78:62:d8:6d:39:5c:
                    78:82:fa:79:1f:cc:e3:af:64:ed:b3:13:45:cb:49:
                    fd:2c:52:05:ed:e3:c5:96:8e:95:d0:ca:0e:44:9b:
                    a5:a6:01:bb:0a:17:f2:df:25:94:77:ee:08:8c:18:
                    2b:4e:fa:9b:d0:28:c3:c1:5d:76:04:a9:e4:9d:ad:
                    42:25:35:9b:22:dc:6a:64:1e:53:71:b7:53:7a:0f:
                    2e:4c:df:9d:8c:00:e7:5b:f6:30:65:bb:60:47:3a:
                    d0:75:ed:37:55:11:92:6f:94:ce:24:33:81:2c:32:
                    9b:a2:ae:37:40:c5:6d:dd:22:9c:c7:25:a8:4d:cf:
                    b0:6c:11:03:f0:52:2c:b7:15:5e:a3:77:d8:e9:a9:
                    82:af:79:8c:c9:73:55:0b:d9:08:91:f3:dd:8a:c0:
                    72:7a:36:89:39:2f:e9:02:e3:63:6d:8c:81:76:70:
                    77:af:4f:3e:f8:96:09:37:31:1b:4d:47:40:0d:3d:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C3:34:90:2D:A5:B6:3E:3A:F6:B2:C6:A1:73:8F:FB:CF:7B:2C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6012aeb5-9650-33a3-afce-c15708c97a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:0c:84:44:2d:0c:27:18:21:fd:c2:f7:64:d5:f5:ec:82:
         21:cf:90:d7:2c:c5:63:34:68:fe:43:4b:a3:4b:6d:22:9e:46:
         ae:97:24:39:30:dd:87:2b:31:a0:b7:b3:ba:54:84:4d:2f:6e:
         f8:6a:5d:ba:5d:b3:3d:50:91:fb:b9:1d:a1:4c:1a:7e:b4:84:
         c6:98:59:75:3b:4a:de:2b:ee:a8:57:c1:52:c4:13:dd:3c:2a:
         7f:8f:01:3c:16:51:ba:20:57:e7:29:a3:a3:f4:fa:57:54:f9:
         e2:6e:e0:b8:43:ad:0e:95:13:0a:68:f2:9e:94:75:74:d6:a0:
         5e:59:eb:d0:34:69:ba:c6:e2:84:11:d2:64:30:49:9a:10:c8:
         60:52:56:d6:05:18:c2:e3:2d:e3:de:14:e2:d8:e7:ec:c3:e1:
         4e:ee:18:e5:e8:7d:7e:82:bb:f4:09:52:17:a8:d0:38:b1:5e:
         48:59:96:18:e9:7d:fe:bf:99:49:bb:04:b9:63:d0:72:bc:5c:
         df:88:29:af:48:5d:a9:ff:e4:5f:08:c3:75:6b:23:e9:ff:73:
         1a:ec:7c:dc:ef:44:49:84:67:fa:fd:5b:da:5c:16:06:67:71:
         ce:d8:34:b3:65:fe:08:17:a1:54:23:4e:7c:aa:99:62:3d:0f:
         f2:ea:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:20 2024 by rpki-client on console-ams.rpki-client.org