Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d65cd24d-eb96-3722-81e6-4d8da8db84cb.roa
File:                     d65cd24d-eb96-3722-81e6-4d8da8db84cb.roa (raw, json)
Hash identifier:          hoYMO7b5uXlkJcb5WafR5aXVJaGYwo0rCPWYDZy18gc=
Subject key identifier:   32:A9:09:CC:2C:09:81:42:62:27:1C:80:96:BE:53:9C:1D:EE:18:76
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847670626AA8B819438ADFFC180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d65cd24d-eb96-3722-81e6-4d8da8db84cb.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:26:aa:8b:81:94:38:ad:ff:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=69676b30-52d7-4bfd-a241-424b1bbe0fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:0c:0e:de:6c:92:ad:3c:19:2e:15:56:86:
                    69:12:e5:8c:4a:dc:f4:ce:3d:a5:ab:f6:11:f4:da:
                    c1:ab:36:19:b1:71:90:5a:15:17:cd:68:42:72:de:
                    e5:49:38:e6:4b:ee:6e:2c:53:55:ea:c3:e0:85:d0:
                    89:72:47:4e:8e:19:99:11:f2:43:7e:81:b5:47:25:
                    30:db:c5:cb:eb:61:c6:00:7d:9d:d1:55:5e:e7:6f:
                    f3:7d:3d:bf:9f:52:50:4b:dc:07:c5:54:1c:43:a2:
                    f9:ae:95:14:74:0d:cc:70:e2:7a:d3:48:6a:70:ee:
                    2d:12:1a:57:39:07:7f:83:10:8e:12:a6:06:6a:3d:
                    8e:ca:d4:64:91:d3:cd:10:44:1b:e8:c4:15:25:44:
                    61:58:b2:80:81:47:6b:79:b2:d5:ba:a4:4f:86:76:
                    a4:a3:56:a4:7d:7c:c1:c6:0e:2e:ef:6d:03:9b:43:
                    96:f9:d7:e4:e3:9f:ac:11:47:9e:46:97:d2:7c:10:
                    e7:92:29:66:48:74:37:a2:87:b3:4d:32:04:dd:6a:
                    ad:4b:6e:f2:d2:b6:3c:47:6d:55:11:3e:c8:a3:69:
                    20:6e:41:e9:07:8e:f4:96:60:ed:96:db:fb:52:ed:
                    a3:7b:a3:62:f1:e4:18:1a:ad:28:69:70:e6:00:e4:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A9:09:CC:2C:09:81:42:62:27:1C:80:96:BE:53:9C:1D:EE:18:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d65cd24d-eb96-3722-81e6-4d8da8db84cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:35:b4:d6:64:39:96:72:a8:36:23:aa:70:8a:2c:94:ef:
         50:f0:d2:9e:1b:84:c7:b8:28:4b:4e:c4:b6:eb:79:1e:28:b8:
         15:d3:7b:04:18:21:93:b7:9e:d6:7c:c6:2b:33:95:f3:59:3e:
         3b:bb:cd:d0:39:ee:1b:15:0b:43:5e:71:fb:ce:c8:cc:56:77:
         5c:18:37:fc:50:e7:b3:9d:fe:16:8e:c3:92:40:99:eb:6b:27:
         9d:86:86:5b:bd:17:2d:4b:a7:87:e5:62:4f:7e:e7:c7:09:6a:
         09:56:59:9b:0f:a6:a5:de:2c:bb:ad:1d:69:8f:57:54:e1:65:
         d1:0f:b0:35:21:e0:47:f7:f0:50:5a:36:26:43:d1:cf:0b:ce:
         b8:6f:16:e0:32:54:9e:b5:08:ea:c2:f5:48:f4:49:9d:06:2c:
         34:22:e1:d8:bd:4b:12:0d:79:04:d1:01:4b:2a:e2:8c:29:af:
         e5:6f:24:31:c1:dd:b6:64:2f:93:9c:3f:30:9b:d1:97:9f:9a:
         1a:ce:f4:52:2c:02:86:7e:11:b0:3b:25:ce:5f:a9:56:2b:ee:
         38:fc:c3:3c:d2:46:ca:00:5f:2d:85:df:17:d8:33:35:68:a3:
         37:38:52:7d:6a:3d:19:8b:db:bb:13:e5:ee:43:2d:f4:99:29:
         d8:79:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:28 2024 by rpki-client on console-ams.rpki-client.org