Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa
File:                     a815da88-cfa8-3af3-ada0-55a72b6309b2.roa (raw, json)
Hash identifier:          /t1spTwIkq8vBBaMSUeeE6fieWtre6Le13U0AOtEgiU=
Subject key identifier:   73:5E:78:01:97:4E:20:C6:70:EB:38:5A:41:D4:99:CE:9D:BC:35:E2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858459719E9A11187D3776E3ECA00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa
Signing time:             Thu 18 Apr 2024 20:45:21 +0000
ROA not before:           Thu 18 Apr 2024 20:45:21 +0000
ROA not after:            Wed 17 Jul 2024 20:45:21 +0000
asID:                     13335
IP address blocks:        204.195.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:19:e9:a1:11:87:d3:77:6e:3e:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 18 20:45:21 2024 GMT
            Not After : Jul 17 20:45:21 2024 GMT
        Subject: CN=5ff76a7c-8ba7-4c0b-aadf-857839f0fa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:49:9a:0d:61:88:d3:ed:ea:54:78:df:ef:8f:
                    c1:d8:08:12:a2:af:27:69:08:cb:28:36:d1:e0:2c:
                    ee:a6:c0:3a:17:34:83:6c:66:08:dd:80:84:35:f9:
                    7d:54:c7:69:97:cb:d7:8f:56:e7:18:05:cd:b3:fa:
                    ca:98:9f:cb:1e:5a:5f:fa:69:23:4e:d2:10:ad:eb:
                    6e:e9:1c:17:7b:cb:e1:76:7b:c7:3a:a4:e6:87:79:
                    3a:ed:e8:60:54:6b:0d:13:6b:50:29:34:ee:16:d4:
                    cd:9c:4f:13:c6:6b:6f:e2:1e:d4:32:03:74:27:d5:
                    40:19:b6:f8:8a:5f:99:cc:81:89:17:a2:d8:7f:00:
                    99:5c:f9:44:c3:3c:b0:63:46:1c:28:a9:cc:9e:98:
                    eb:51:16:71:fa:ac:76:d6:80:ed:43:99:f6:e6:3e:
                    4a:28:21:1d:bc:52:ce:d5:a3:53:e0:6c:ff:9c:f8:
                    55:55:eb:f9:31:75:24:18:a8:88:40:04:65:a9:23:
                    19:00:97:14:30:a2:77:4b:82:8f:61:48:7c:4b:77:
                    36:2e:2b:43:73:28:49:dd:cd:56:cb:ec:93:09:19:
                    69:82:f3:50:13:e4:9a:4d:b1:bc:c6:be:76:b9:67:
                    a4:3c:69:ee:cb:3c:29:be:b1:3e:2c:56:27:da:43:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:78:01:97:4E:20:C6:70:EB:38:5A:41:D4:99:CE:9D:BC:35:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:64:29:21:78:06:b4:fb:01:2d:4c:41:2b:a0:18:58:8d:85:
         41:c9:f2:99:d5:39:21:5b:4c:3e:d1:ce:dc:27:9e:5a:97:49:
         2d:58:a5:85:10:87:67:4a:c4:40:75:d0:9d:06:d0:a2:a3:28:
         1b:62:f9:c4:82:f1:d9:82:f5:95:c7:69:0a:cf:7d:c5:34:36:
         90:fd:8b:2e:f8:0b:b4:da:1c:80:2e:eb:67:88:9f:bc:a1:e0:
         25:90:dd:88:ee:6c:35:d9:8c:a8:fa:c2:33:a5:16:b7:c1:ea:
         cf:43:8c:5d:79:e3:5b:b4:71:36:4c:bb:61:7f:04:01:7e:21:
         61:b1:45:b2:fb:77:e0:d3:e3:66:6b:eb:40:2c:ef:0b:17:1e:
         b6:e7:a3:f2:ce:54:81:f0:1d:b1:c7:ca:d7:7e:4d:96:ab:f4:
         19:e5:07:52:81:f3:3b:e9:19:da:f0:d6:66:f7:83:b8:f6:72:
         bb:53:0a:a7:dd:65:35:ff:3c:da:11:0d:c0:b8:a0:4b:96:8a:
         ea:e5:11:96:22:cc:c1:c0:df:1d:c8:59:73:dc:39:ff:4e:e2:
         57:8f:b0:da:c1:aa:0d:43:39:f6:e7:d9:82:5f:cf:c0:84:46:
         dc:41:64:6c:b5:9d:28:21:c7:25:43:ce:0f:24:d4:e8:cb:a1:
         0d:47:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:56:46 2024 by rpki-client on console-fra.rpki-client.org