Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/205a1d43-7d98-3b70-bda0-8bcad9ee5139.roa
File:                     205a1d43-7d98-3b70-bda0-8bcad9ee5139.roa (raw, json)
Hash identifier:          sEjPFKhO8vhxqbaRILE7LpQw8bEwmkMLCuQPhxLebAU=
Subject key identifier:   E2:3C:16:E5:EF:EC:DE:AE:C9:F2:54:29:45:27:8B:84:DB:4B:04:BC
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F4328584566BDA7A6A0ADFD41DA0EAFA0
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/205a1d43-7d98-3b70-bda0-8bcad9ee5139.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        205.233.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:a7:a6:a0:ad:fd:41:da:0e:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=1a0396d5-4162-40ab-b05c-49c41865b5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:d1:19:ac:7a:85:6c:30:23:9d:82:aa:ae:
                    2d:a7:fb:2d:34:fd:a6:21:e0:f9:e7:5f:04:13:23:
                    fa:80:9b:5b:c9:64:1e:28:1d:da:6a:69:62:2e:35:
                    fe:d2:0c:fc:81:2f:cb:a4:2d:c8:7b:51:36:77:01:
                    61:d4:c4:4a:5e:f5:62:0f:22:ec:54:7c:ee:8a:68:
                    97:fa:c1:b1:b7:89:55:cb:9f:e2:86:96:98:79:c4:
                    87:81:32:e6:77:e4:ec:a3:2a:6c:9c:81:79:88:a4:
                    1b:cb:80:94:32:ea:cb:7a:67:aa:6f:fa:e5:97:ce:
                    27:6f:5b:42:3b:47:4a:e1:3a:ea:19:69:ef:ec:81:
                    bf:a1:e6:3e:a5:c2:a3:44:b7:1a:a0:3b:39:c6:f2:
                    16:e9:90:4a:99:e5:a1:87:ac:c8:72:5b:de:8c:7c:
                    32:76:39:36:6c:b0:b6:b5:b6:4d:4a:c3:70:43:72:
                    86:59:b6:3a:ca:7e:1d:e5:da:2a:fb:d9:04:56:70:
                    b6:96:0d:dc:7f:81:1c:da:81:25:67:2c:87:be:6c:
                    8b:1a:39:ba:de:6e:29:ba:28:b8:6b:a2:5f:35:8e:
                    5e:00:ad:3e:88:7d:ec:7a:ce:3d:91:a2:7f:5a:be:
                    d5:c7:4a:04:fe:cf:bc:65:3a:bb:65:83:66:66:ad:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:16:E5:EF:EC:DE:AE:C9:F2:54:29:45:27:8B:84:DB:4B:04:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/205a1d43-7d98-3b70-bda0-8bcad9ee5139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:e0:52:73:a5:1f:ce:5e:b3:7e:62:fe:ee:a8:8e:a2:d4:
         ee:3b:c1:bc:10:84:2d:cc:6d:b8:f3:28:99:d3:80:f8:36:69:
         86:4d:d0:20:83:9e:aa:44:dd:49:97:45:08:8d:b1:e4:0e:59:
         a0:31:03:15:a6:21:d8:77:33:91:0d:98:3e:e7:e7:a2:7f:a7:
         34:94:91:f2:7f:f6:63:83:32:7d:84:a6:2a:a2:b0:b7:6c:86:
         61:fe:9c:b8:d1:3e:90:13:90:04:be:de:18:fc:c2:93:3a:1d:
         64:d0:da:28:2a:90:93:36:e0:95:69:33:6d:0b:02:05:3e:6b:
         9f:c6:39:0e:d1:a0:50:af:54:de:8c:89:40:e1:a5:7c:70:61:
         07:91:f5:18:b4:cd:d0:64:b1:5c:c7:42:72:0f:cd:01:2e:fe:
         a6:5d:e2:d3:93:90:43:6e:9d:e6:24:b6:d5:03:c3:e8:5e:05:
         1c:73:29:5e:ed:77:df:c3:ca:f0:d4:94:1e:92:ba:08:83:4c:
         01:7c:f4:c2:43:9a:5b:0e:65:d0:ce:39:af:c9:82:70:0e:6f:
         16:f3:d3:33:0f:d6:08:24:bc:8a:ea:29:35:7b:f2:f1:97:98:
         a0:f8:3f:1b:9f:0c:31:28:19:96:6c:f4:23:45:e9:9d:d5:f4:
         91:56:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:50:35 2024 by rpki-client on console-ams.rpki-client.org