Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa
File:                     6978a815-9a53-3f80-abe8-e211e21209d4.roa (raw, json)
Hash identifier:          oNBHBbyOH0Tn5uuCMEIm8x2HrW+O1OvMr4UP/0PKB/c=
Subject key identifier:   36:8B:1F:21:B7:35:52:1C:E8:15:89:ED:21:4C:82:3B:60:32:71:28
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845971B897346EA5A0BC63881C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa
Signing time:             Thu 18 Apr 2024 20:48:37 +0000
ROA not before:           Thu 18 Apr 2024 20:48:37 +0000
ROA not after:            Wed 17 Jul 2024 20:48:37 +0000
asID:                     13335
IP address blocks:        204.195.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:1b:89:73:46:ea:5a:0b:c6:38:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 18 20:48:37 2024 GMT
            Not After : Jul 17 20:48:37 2024 GMT
        Subject: CN=d7d86701-c877-415b-a7fd-239d4a6b4a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:0d:81:a0:bc:18:d2:24:6f:93:49:f3:3e:
                    33:68:dd:50:51:ae:e3:4a:14:1a:bd:0b:cc:98:d7:
                    c5:c3:6a:61:f6:52:d6:52:5d:9a:90:ef:12:14:80:
                    dd:a5:27:68:3e:5e:8b:08:3f:88:99:f4:39:7d:4f:
                    f9:42:db:ab:6a:c5:21:6e:c4:70:3e:40:df:af:32:
                    d2:84:a3:d8:0f:4a:eb:21:0f:90:c1:9f:ae:e3:41:
                    ef:ac:3c:62:4b:c9:b3:9a:4d:3e:c0:64:e7:e7:16:
                    ab:51:4f:4e:b5:f5:d3:29:ef:cb:fd:86:8c:23:37:
                    a8:df:ed:9e:95:d7:36:11:d9:31:b7:61:3a:46:7e:
                    18:45:f4:83:eb:c7:81:69:ee:d4:6c:21:7c:4c:d8:
                    09:1a:dd:4c:b3:a4:93:a4:88:7b:31:8f:1e:58:b3:
                    b1:0e:b0:ce:b2:9c:6f:1f:9d:2b:94:fe:40:7b:c0:
                    33:b9:70:5f:9e:47:fb:6e:dc:b7:03:85:98:fd:60:
                    b0:5f:b0:97:20:b9:a3:2c:ac:01:e3:b6:ae:56:6f:
                    b7:da:2d:02:4c:f0:ab:ff:9e:c1:d7:b7:9b:b2:2d:
                    8e:cb:de:24:09:b4:7b:dc:da:09:3f:fa:4a:34:da:
                    59:94:ec:12:7a:fc:7f:82:9f:dc:73:58:c2:04:98:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:1F:21:B7:35:52:1C:E8:15:89:ED:21:4C:82:3B:60:32:71:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b1:ff:4c:e9:79:be:a8:84:ff:6e:41:da:29:bc:83:53:b8:
         b8:9d:6e:40:f1:7a:05:93:89:b4:fd:cb:e3:64:b0:58:34:64:
         e2:b2:19:a5:b5:28:2c:03:fb:f0:70:9c:08:29:3b:51:b9:43:
         50:d6:12:66:64:a4:f3:de:77:0d:ac:00:26:92:dc:7a:b9:e0:
         3c:cd:da:c2:17:37:cf:29:a5:18:0f:4b:b0:26:a6:10:6a:27:
         9f:3a:b8:df:f1:c8:12:cf:ff:3b:72:d3:bb:f4:90:bb:a9:af:
         b9:2c:e2:ac:ed:d8:e5:dc:08:35:f2:76:29:37:1d:8a:01:ec:
         2f:46:6e:81:a8:0b:86:74:39:8b:de:e4:46:63:26:7d:42:83:
         d9:e6:2e:95:47:6b:51:a4:24:d2:df:eb:ed:5e:28:bb:0c:e3:
         c1:9d:30:59:fd:ac:8c:1f:19:23:86:98:e3:c9:3f:c3:35:e3:
         05:9e:4a:68:3d:86:21:0d:83:5a:53:ee:f2:ed:8f:ce:d2:e3:
         55:f1:65:0c:52:21:2f:ee:c9:28:60:43:0e:9a:8e:83:41:ca:
         44:16:1b:c6:a4:18:98:13:c0:f2:0c:db:48:18:e7:b0:f5:5c:
         29:85:cd:d1:bb:0c:c0:d6:01:aa:e1:cf:57:50:b9:37:de:63:
         46:54:27:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:56:43 2024 by rpki-client on console-fra.rpki-client.org