Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa
File:                     d76809c9-dc78-3d60-810a-aff46abe67b7.roa (raw, json)
Hash identifier:          W6+m23dXf/W1hrkam+wPCzPnL+JIZ4ILVxvySUtG9Tc=
Subject key identifier:   08:1D:A8:80:57:5B:DE:8C:9B:4D:1B:07:C9:86:51:DF:F2:84:30:13
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584597188F1FF7CD74FA53CE31C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa
Signing time:             Thu 18 Apr 2024 20:42:37 +0000
ROA not before:           Thu 18 Apr 2024 20:42:37 +0000
ROA not after:            Wed 17 Jul 2024 20:42:37 +0000
asID:                     13335
IP address blocks:        204.195.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:18:8f:1f:f7:cd:74:fa:53:ce:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 18 20:42:37 2024 GMT
            Not After : Jul 17 20:42:37 2024 GMT
        Subject: CN=7b87e864-2700-4b8b-94ef-24be96ff0b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4a:4d:8b:ad:af:1f:ba:45:33:f2:69:4d:df:
                    d6:ad:2d:34:c4:2e:5b:32:e9:f5:f4:23:b7:01:6b:
                    63:b6:38:8f:f0:56:55:24:a4:1e:7e:b9:4f:2d:1d:
                    08:82:dc:d7:b6:f3:ad:06:57:bb:7e:9f:e3:ee:e0:
                    c2:0b:f2:3b:77:a2:2a:fc:36:6a:d1:c8:fe:79:a5:
                    f2:80:55:fd:d6:e5:7d:d5:07:08:e2:8d:b6:33:f4:
                    8f:fc:a5:26:0c:b5:ac:1e:97:f9:31:98:33:56:c5:
                    97:d4:70:4e:21:3a:5e:e0:d3:99:5e:6a:88:52:7b:
                    ca:24:f9:dc:0e:6c:be:26:4e:70:0c:57:5b:65:2a:
                    af:f4:99:23:31:70:48:a0:7b:93:30:bf:7c:bf:93:
                    ac:ed:1c:08:fc:4d:82:76:5a:b4:ee:ca:ab:7c:6a:
                    25:aa:28:6a:df:58:4e:9a:27:08:ad:9b:f7:44:f1:
                    1f:45:0a:c8:07:56:7c:79:a4:17:3e:a7:89:8d:53:
                    91:c5:fb:6a:b4:35:8f:5a:17:ac:67:93:d1:9e:fb:
                    3b:4b:00:d1:0b:2a:01:51:e5:3e:c5:0e:30:bd:2a:
                    eb:b6:6a:a7:99:98:64:c6:3f:be:f9:68:5d:37:51:
                    fd:8b:d8:8b:68:e4:22:5c:54:b9:8b:3c:e6:0f:59:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1D:A8:80:57:5B:DE:8C:9B:4D:1B:07:C9:86:51:DF:F2:84:30:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:d0:68:8b:6d:c3:6f:53:bf:e7:14:c4:f9:19:cf:3e:35:
         ab:d1:74:43:5b:69:a9:d2:d0:f5:28:89:63:43:50:1f:63:fd:
         fa:2e:81:a7:16:da:31:c8:0e:7d:a6:52:b9:80:b1:63:ab:d5:
         fb:73:7f:66:e6:80:4f:16:5b:35:82:09:63:e4:29:75:01:22:
         db:51:e9:0f:32:e4:1e:d2:2c:1f:30:e2:68:7b:1a:b7:f1:41:
         62:97:3a:8e:fa:54:98:25:c8:8c:be:0e:a8:f9:97:18:26:28:
         6f:67:a4:2c:2e:81:43:c0:b6:64:03:5e:ed:8e:e1:81:e5:49:
         de:a1:9d:2d:55:a7:5e:77:38:ca:0c:48:55:0d:a3:e5:18:ff:
         eb:45:71:24:ca:21:5a:86:4e:41:95:47:64:ce:af:b2:01:57:
         1a:16:cc:70:69:34:4c:52:88:e3:5d:81:e7:01:ff:b4:bf:7f:
         06:d5:05:29:7c:00:b1:c6:db:77:ad:44:46:4a:85:c7:9a:ec:
         e0:12:db:00:e1:fb:ab:fe:ea:b0:fb:46:44:99:d1:5a:1e:9b:
         42:ef:0c:74:fe:2b:dd:2f:2b:4b:6f:93:fe:f2:08:4a:8a:e0:
         60:dd:a8:7f:f2:df:03:de:d3:76:de:7d:f1:11:c4:cb:f5:3c:
         74:28:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:43:51 2024 by rpki-client on console-ams.rpki-client.org