Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af815324-b022-30c1-bce1-719711f9daeb.roa
File:                     af815324-b022-30c1-bce1-719711f9daeb.roa (raw, json)
Hash identifier:          UwFvPp+D1VVoPlFfK0jCOirEH0Q3LfZKA6pCVrhGYAc=
Subject key identifier:   53:9F:BC:76:6B:27:AB:D8:9D:C8:31:C3:D6:D7:24:CF:B3:D1:92:8A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584756461450F450F50A71DFC800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af815324-b022-30c1-bce1-719711f9daeb.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:14:50:f4:50:f5:0a:71:df:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=860c7d3a-fe57-4c4e-9a20-72a271e14f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:31:34:d6:f6:4a:7a:c9:2b:9b:db:fa:7c:
                    f4:39:3d:23:14:da:90:fc:8c:2c:9d:06:d0:fa:a6:
                    9a:24:7f:46:82:1b:2e:a1:b4:4c:26:2e:4c:15:70:
                    41:45:b2:34:0b:e8:ba:cf:a9:b3:5c:58:21:ef:af:
                    ce:53:30:fc:77:3d:73:97:3c:d3:d2:27:fd:fc:43:
                    67:57:ef:e8:cb:77:30:07:de:4d:0b:57:13:7e:be:
                    bb:5b:ef:07:35:9b:2c:95:c0:63:52:b7:f9:2e:85:
                    33:5f:65:e9:1b:c2:a7:9a:5c:c7:cb:1f:7f:db:74:
                    46:5d:56:b8:cb:0f:6e:cb:8a:c1:38:da:13:d8:f8:
                    a2:78:5c:39:ef:b4:a6:6a:a1:3a:bb:37:21:ae:02:
                    b1:66:ed:b3:3b:df:16:c3:fb:7e:7f:6b:c4:14:61:
                    b5:ff:b8:a0:b2:3c:69:86:41:12:52:2b:62:8b:75:
                    7f:89:d3:4e:18:7d:5e:9c:3e:4d:78:95:53:fc:0b:
                    8b:95:6b:ed:2c:89:4b:3a:73:3d:c1:ac:68:a9:cd:
                    2b:87:ea:a0:c2:68:48:36:08:7b:cd:2b:9d:be:5a:
                    4b:41:da:41:bc:4a:9d:8a:b3:32:e9:eb:c8:f0:a4:
                    88:7c:46:2f:4b:a9:9d:32:a9:a3:ed:a8:2e:f2:4c:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:BC:76:6B:27:AB:D8:9D:C8:31:C3:D6:D7:24:CF:B3:D1:92:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af815324-b022-30c1-bce1-719711f9daeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:2e:f5:d3:ac:2b:2a:97:c6:86:24:ef:a9:11:ea:87:f4:
         a0:38:4e:4d:78:9f:ac:0b:2a:d7:9f:90:ba:f0:2e:5e:a1:cf:
         96:58:22:5c:e1:77:ad:f2:37:bc:5b:70:2e:18:7f:4a:ab:d7:
         a6:d3:36:07:cc:0c:9b:dd:76:ff:8e:b3:c6:f8:71:fd:34:47:
         b4:0e:c6:8a:52:56:60:25:cb:2f:ce:73:17:fe:6a:a0:67:68:
         3e:c2:88:d2:22:dd:98:2b:2f:ce:41:dd:7a:9f:06:36:d6:aa:
         2d:b4:ab:8e:b3:5c:b4:ce:ed:ba:fd:b0:fc:12:03:1c:74:25:
         93:1b:2f:bd:7c:c5:1a:2f:a4:1f:4e:0c:cd:d9:c9:a5:42:9a:
         51:0c:ad:e8:07:44:5b:cb:27:65:72:26:b2:ac:a8:c8:a2:1c:
         9c:13:4b:99:e5:7d:4b:3b:0c:d9:bd:a1:7d:80:42:1f:3b:2d:
         2d:79:a1:01:7f:d9:cf:0a:4e:fe:51:15:69:4a:84:06:6d:03:
         ac:1d:31:f7:e5:23:07:28:36:f0:0e:1a:b6:2c:d4:12:e6:45:
         6e:0a:a3:67:b0:e2:3f:ba:8a:41:d9:9b:2c:f5:74:c2:63:dc:
         ae:ff:19:bb:81:d4:4c:c3:89:07:d5:0d:a6:3d:5b:c1:85:ba:
         fc:2a:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:27 2024 by rpki-client on console-ams.rpki-client.org