Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/c2e55b8d-a044-386d-bd8e-ad58a315656c.roa
File:                     c2e55b8d-a044-386d-bd8e-ad58a315656c.roa (raw, json)
Hash identifier:          T1VRB671VWi/XONj5rbpPa4RDZE73aP+XcnDq6KGuDQ=
Subject key identifier:   FA:27:92:6D:2A:40:DE:A5:91:16:BD:E0:FC:66:C7:28:80:BA:9D:97
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F432858455762C9E6F4C5A84AD3E7C840
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/c2e55b8d-a044-386d-bd8e-ad58a315656c.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     398355
IP address blocks:        204.197.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:c9:e6:f4:c5:a8:4a:d3:e7:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=2656c64a-fa46-4e4b-ae88-6a9a0b1a10ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:c3:8f:d0:a3:1b:47:11:09:28:0d:19:4a:
                    49:32:45:e4:ab:36:e8:7a:14:4d:30:ea:9e:95:29:
                    6a:1c:fe:fe:a6:8c:63:65:89:59:7e:aa:59:b2:29:
                    f1:2f:93:62:a4:41:34:5f:00:42:30:70:79:5d:0a:
                    43:7b:ab:b7:f1:d8:7c:ae:1e:a7:1f:71:b2:33:96:
                    f7:7b:50:65:0e:23:f7:39:78:aa:8a:89:49:4c:2e:
                    0c:22:95:56:95:1b:5e:90:1e:a8:ea:74:03:08:1b:
                    7c:c9:ea:bb:e4:4f:47:a7:ce:3e:c2:09:6a:f2:0f:
                    ce:85:3a:b8:a3:2f:03:70:7a:90:66:da:a5:e7:4c:
                    46:8a:6b:87:4b:36:55:b1:8c:bc:a1:ad:32:dd:02:
                    d2:e5:e7:f1:80:11:c9:dd:d8:b3:c0:18:f3:02:d2:
                    7a:96:eb:40:44:b7:05:d8:24:a5:31:95:93:9d:f6:
                    9d:d6:b4:2d:54:d4:98:21:ec:f5:74:c4:d5:b1:2d:
                    63:0a:45:9c:26:52:4b:9c:ad:c7:ea:9f:ed:2a:c6:
                    8f:aa:3d:4e:41:33:5b:38:4e:d5:09:68:20:42:20:
                    25:d4:a8:cf:18:6e:34:61:a5:00:e9:99:1e:9e:89:
                    d7:94:58:1a:54:42:51:86:4b:9b:52:eb:c0:eb:4d:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:27:92:6D:2A:40:DE:A5:91:16:BD:E0:FC:66:C7:28:80:BA:9D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/c2e55b8d-a044-386d-bd8e-ad58a315656c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.197.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:13:b7:aa:a5:48:33:af:4e:80:0e:55:90:44:b4:98:88:
         89:94:6f:49:49:f6:32:9b:dc:f3:db:d4:98:35:a3:d8:a3:5a:
         86:eb:b1:30:b0:8b:09:e0:94:ed:53:d6:f2:88:db:bc:b5:dc:
         0b:ce:f6:f8:19:5c:6e:d2:92:20:d8:08:9b:f0:88:62:21:9b:
         c8:88:97:c1:a1:c6:62:ee:ad:9b:53:37:71:c0:19:24:47:68:
         bc:24:60:45:36:43:f3:0e:1d:4b:df:6b:3a:b7:ab:56:7f:d8:
         12:7f:c9:bb:6f:12:4d:a5:6a:6a:69:1b:1f:49:82:b1:58:d4:
         d7:e4:87:96:65:ac:05:5b:82:a6:a2:f7:56:23:4a:42:ac:b5:
         8b:e8:09:1c:c8:af:e4:2c:36:50:fd:f8:02:9c:08:1e:8a:df:
         b5:83:2d:36:3e:32:08:55:59:68:0b:3c:ae:5c:fc:04:5f:a3:
         7b:82:b4:bb:de:1a:ca:3e:40:db:0e:69:88:8d:af:a5:f2:ce:
         9a:44:ef:e4:5e:64:16:ae:ca:bb:77:e6:16:47:0c:7e:7b:1a:
         d2:77:aa:93:ca:57:09:4f:68:c9:7e:06:5c:ee:e9:3c:58:c7:
         17:eb:21:08:f7:e3:a9:9d:c4:c8:42:9d:97:60:18:37:cd:1a:
         30:4e:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:25:46 2024 by rpki-client on console-ams.rpki-client.org