Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa
File:                     7510a13a-70eb-3389-909c-aa4e19e2962d.roa (raw, json)
Hash identifier:          /aqIlDWeRCA2Vhzx9vEsAOx6+sXPPkhAlTsBWf6bPqI=
Subject key identifier:   36:CD:C5:44:9B:EE:C6:75:D3:85:9B:BC:B1:54:9A:CB:B8:36:7F:4B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858476706298AB681DE558D1CAE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:29:8a:b6:81:de:55:8d:1c:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=b02a3880-a57c-4e07-9fd7-9b7fc5e7d36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:ae:2d:a1:3b:4d:cb:d9:58:cb:9c:23:05:
                    55:07:f6:48:15:78:b8:0f:35:1c:58:af:d0:9b:49:
                    a5:aa:c2:8e:97:e2:e9:cd:1b:08:86:bc:ae:e8:44:
                    ec:e3:2b:4c:da:bd:65:3b:7a:48:94:aa:2c:af:20:
                    af:2c:2a:c9:c5:b4:27:d9:c6:45:48:24:1b:2f:11:
                    9b:ac:36:04:30:5f:e7:ca:f6:ed:23:d2:6e:60:f7:
                    e1:e9:de:07:35:6d:d3:94:f2:b7:a8:cb:e7:fe:20:
                    09:89:d1:4a:e9:9e:f9:6e:85:4f:cb:91:7d:44:30:
                    e1:1e:d1:8b:d9:a9:ea:6d:ee:3a:fb:61:ae:8f:6e:
                    da:89:d0:cc:ce:af:a7:99:c8:32:b5:72:52:85:fa:
                    c7:81:d4:de:22:52:58:31:b4:5a:2d:b9:ee:8b:44:
                    03:fd:e8:75:15:14:9f:1c:a7:f6:48:f0:08:54:64:
                    32:8f:ad:1c:1a:78:29:17:74:c1:04:fe:30:18:4b:
                    d9:46:4e:11:96:38:2c:6b:0d:60:b0:25:a3:2f:80:
                    41:56:c7:ef:e4:5e:b7:c2:be:a6:6d:a1:30:3a:40:
                    f9:0d:ad:18:08:0f:15:0d:b4:4b:58:49:c8:36:6d:
                    a7:54:b9:ad:5c:9d:87:2a:f2:79:d4:04:ec:ca:45:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CD:C5:44:9B:EE:C6:75:D3:85:9B:BC:B1:54:9A:CB:B8:36:7F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d4:19:a3:a0:03:76:e0:45:61:34:89:df:ad:b8:1b:2f:31:
         aa:0b:53:ae:d7:5f:ba:73:31:9a:5b:1d:f0:8a:21:6b:c9:bb:
         1b:c5:59:95:c0:39:af:47:f0:f5:a4:1c:ae:a4:3a:e0:96:1d:
         8f:6d:17:92:9d:6a:98:89:27:3d:d7:b5:61:93:28:60:97:45:
         79:7f:73:05:41:c2:51:23:35:8e:f9:da:0a:59:bd:3f:c3:ba:
         17:07:f9:98:c4:ca:64:0a:b8:be:fc:c8:5e:56:88:88:36:cd:
         35:e0:07:9d:c0:92:31:8c:74:0b:ce:2d:60:f9:b1:f6:01:de:
         c1:d6:14:29:54:3b:82:7f:d9:bb:f9:d6:10:cf:e8:15:5c:4e:
         12:5a:6c:31:5b:6c:14:57:bf:56:4d:73:35:90:39:c9:f8:b8:
         e5:66:65:56:65:d1:43:5f:62:2a:ae:a4:e9:22:f3:74:ae:12:
         dc:31:be:a6:0b:7b:db:b0:4e:8b:a6:ce:25:0b:12:ff:be:24:
         a9:e6:dc:49:5a:5a:86:d8:f6:69:ae:a5:2c:13:69:be:81:59:
         eb:1b:bc:5d:ab:78:4e:33:ca:47:90:89:50:73:ef:2e:8c:9b:
         22:a6:7b:34:b0:2a:cd:fa:65:8c:04:c8:c1:99:10:b5:49:cc:
         15:0a:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:47 2024 by rpki-client on console-fra.rpki-client.org