Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa
File:                     ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa (raw, json)
Hash identifier:          FNBZSTJSWNAmpJVW7WK0XLcrKjnsdhxxN2Pea+sCl/U=
Subject key identifier:   0E:C7:C3:FE:8C:D5:DE:A4:0C:79:ED:9C:AF:8D:57:C0:D1:A7:D2:B1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858475646134385BB983DD09ECC80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:13:43:85:bb:98:3d:d0:9e:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=e879acb9-61a0-4b41-b173-91036c1313b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:5e:a3:29:47:f8:fc:8f:f7:45:03:06:fa:
                    a0:5c:a2:e8:59:f9:7d:c3:59:6f:ce:26:98:37:55:
                    8c:53:b2:dc:36:04:4f:08:92:7b:3d:78:fa:6e:3f:
                    9a:46:04:e6:12:b9:8f:de:ff:90:14:1f:25:25:a2:
                    5e:f2:98:e3:d1:28:4c:a6:76:7b:96:40:ac:30:45:
                    0a:6c:d6:32:d0:d9:3e:fe:79:14:80:90:ee:5a:0e:
                    7e:0e:8a:b8:4f:22:94:55:58:5d:83:60:f2:a2:64:
                    7f:ca:34:04:92:85:84:3b:43:94:d7:dd:bf:e1:da:
                    ee:ad:a1:db:c5:a7:fd:71:60:bc:8c:7c:39:e0:ca:
                    2d:00:c2:b8:62:91:b1:b0:13:74:fb:3f:70:ef:f3:
                    af:15:77:65:32:d6:2b:3e:11:8a:27:6e:49:f7:66:
                    60:a0:22:4d:6c:87:af:4b:ce:c4:05:b8:88:45:ae:
                    d1:6c:41:11:92:69:ee:54:49:69:a8:00:c8:d3:47:
                    b2:f8:73:fa:11:5b:2a:d4:14:9f:88:cd:58:a4:d1:
                    75:5d:f9:4e:6f:da:17:b1:ab:dc:13:25:9a:e6:f0:
                    c4:4d:57:92:e5:53:d5:77:3f:4b:66:04:7b:8c:dc:
                    e2:58:3d:7e:35:58:1c:a5:cd:43:fd:4c:db:3a:e0:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:C3:FE:8C:D5:DE:A4:0C:79:ED:9C:AF:8D:57:C0:D1:A7:D2:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:da:d9:5c:3f:51:2c:c1:a9:b9:a8:64:2b:73:65:67:a5:
         1f:32:ab:7e:9e:a4:9d:4c:02:d6:c3:1a:62:d3:a8:22:80:7b:
         f9:9f:91:47:5e:b2:74:5d:48:84:4d:eb:86:4b:bf:4a:52:21:
         10:ba:c7:d7:a6:89:6d:37:ff:89:3d:9d:4a:c8:bb:34:d2:fa:
         1f:fc:83:87:15:4e:69:a9:d1:94:a5:e8:31:c0:59:6a:71:b5:
         0b:6b:b4:5a:6c:75:e8:80:c1:6f:b4:e5:69:c9:59:7d:89:0a:
         45:ec:3c:de:b3:b6:19:ee:fc:93:03:00:07:df:dd:87:6c:3c:
         7c:92:c0:df:94:60:6c:72:a0:11:46:29:54:c4:7b:15:45:22:
         90:55:e3:ec:f9:5b:6c:a9:a9:a1:c2:b7:09:73:d6:0e:70:00:
         65:0c:de:62:7b:bd:06:10:95:02:c0:5e:7e:85:15:4d:6e:39:
         fb:68:a9:e9:4c:28:e9:4d:5f:32:bb:25:70:2f:77:75:ab:6a:
         b0:88:28:57:f5:75:2b:10:15:df:33:0e:f1:f7:f3:35:26:fb:
         61:81:82:1e:5b:22:ae:aa:ed:fe:b7:05:31:ed:d2:ee:7a:64:
         04:e0:df:a8:50:07:f9:3a:12:d4:35:c4:3c:01:8b:c2:54:f1:
         a7:6e:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:49 2024 by rpki-client on console-fra.rpki-client.org