Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa
File:                     fcffe815-2a18-38d0-9061-3af5eec28d94.roa (raw, json)
Hash identifier:          qrQ3N+Ab3e72+cL2/vLrVSL00AiiDdFQRkFvLHz5Uo8=
Subject key identifier:   F5:C0:12:81:06:32:E3:2C:CD:BA:71:CD:95:F5:6A:22:FA:B7:BE:34
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584756461274F91E4A7470C32600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     13335
IP address blocks:        204.195.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:12:74:f9:1e:4a:74:70:c3:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=56744782-7ed7-4e52-a5fb-502252e76bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3f:48:e7:a0:74:5f:6c:b3:8d:4a:8d:00:77:
                    18:7f:cc:a9:e1:06:f3:5c:64:07:c0:8e:bc:af:c3:
                    d8:88:8f:31:a4:45:eb:1d:73:b1:e0:46:29:56:29:
                    78:f3:5c:39:21:5d:12:8c:43:9d:51:20:61:2c:2e:
                    52:3d:e8:ef:b5:8c:5a:de:7c:e6:1e:9f:83:76:5f:
                    68:91:aa:9f:ca:df:9b:30:0b:02:e0:a8:84:07:d6:
                    31:d7:dc:47:b1:08:b5:c2:6b:fd:d6:ba:55:0d:8f:
                    af:ad:d8:44:dc:6d:57:fd:5c:e8:22:43:cd:81:14:
                    6b:4d:bc:c4:0d:8f:b3:06:23:0c:e2:5c:91:dd:f5:
                    e2:be:74:1d:ff:05:14:7d:c4:50:66:c3:fa:7d:f0:
                    8b:59:67:b5:a6:ac:58:ce:69:30:ff:d3:20:ed:ed:
                    5a:ee:a9:4b:61:ed:f1:02:a0:88:db:ed:c7:8d:86:
                    6d:0e:52:16:ad:23:5e:5f:bc:44:59:bc:56:3c:7b:
                    c2:4f:93:fd:fa:4a:5c:b0:6e:94:00:7f:13:9a:39:
                    4f:fa:d0:5b:cc:92:f1:9d:ba:44:1c:6b:dc:1b:2f:
                    ca:31:e4:a8:7c:8f:6b:f2:1a:8b:3f:ae:58:6f:50:
                    55:8a:3a:1a:bc:73:60:9e:4d:2a:9b:1a:20:6d:67:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C0:12:81:06:32:E3:2C:CD:BA:71:CD:95:F5:6A:22:FA:B7:BE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:96:fa:70:c4:26:67:8f:2a:12:47:87:e2:c9:55:f8:3f:d7:
         a5:6a:84:01:38:b9:5d:0f:af:c0:09:c3:14:8f:0c:da:80:a3:
         3c:0e:d6:6e:4d:27:44:a9:f1:14:0b:88:7f:55:cd:fb:a1:6f:
         58:a1:ea:a7:30:5a:95:6e:98:0f:80:3a:b2:0d:ed:59:0c:c4:
         ef:d4:aa:74:18:ec:c6:7c:31:e9:81:da:fe:3c:e5:3c:e0:66:
         76:0e:d5:d7:c7:b9:d0:8b:19:f7:0e:0f:08:6f:65:6b:2c:88:
         2d:5c:c7:ab:18:3c:de:0c:00:a9:90:1a:3c:8e:d4:dc:5a:66:
         27:78:0c:89:8d:a2:8f:c2:3f:05:e5:84:2a:ad:9b:57:43:50:
         18:77:0a:41:21:14:80:20:23:0d:03:4f:91:56:4f:5e:38:53:
         17:af:0f:37:0f:0b:0d:de:04:30:7e:85:20:47:40:27:df:e6:
         98:e1:25:de:81:2c:81:3b:eb:be:24:5b:f1:15:a6:90:d1:97:
         9d:d1:6e:17:28:5f:2a:21:e7:64:7d:5d:81:0e:54:82:15:a7:
         de:1f:24:d4:6a:6c:a3:d1:c1:c6:43:21:0b:be:c6:f0:46:60:
         8d:5d:85:a6:8f:14:98:5c:dc:98:37:1b:26:b0:e4:c6:46:68:
         0a:32:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:51 2024 by rpki-client on console-fra.rpki-client.org