Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa
File:                     49547ecb-c3c9-3e02-9152-a32064154275.roa (raw, json)
Hash identifier:          uT1agNwqqkt4pA97cmqlOauC2oCcEIhZBLJ0RFQXE+s=
Subject key identifier:   06:03:C6:1F:0C:9F:49:11:54:BC:E8:E0:DF:2E:92:29:7A:30:0B:A0
Certificate issuer:       /CN=7a920796-5a78-4996-9f81-4e3af8d7a3d4
Certificate serial:       010D0C9F432858457D13295228C5B3B89B9D9540
Authority key identifier: EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     36419
IP address blocks:        204.10.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:29:52:28:c5:b3:b8:9b:9d:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a920796-5a78-4996-9f81-4e3af8d7a3d4
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=1f95e25c-7bca-4354-80a5-88c7e5a9220d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:c4:c3:d8:31:bf:f3:e1:2e:44:f6:f3:f1:
                    f7:41:9a:c6:d7:97:13:32:84:fa:50:ce:94:e2:b9:
                    1e:59:3a:43:09:1a:2d:3f:73:81:79:fe:27:68:3f:
                    c2:92:6d:7a:dd:5a:59:58:9b:a8:63:66:ba:27:9a:
                    2b:11:e7:d2:9b:c4:d5:39:89:0c:03:c3:3a:1d:17:
                    6b:cc:a1:bd:df:0b:9d:8b:c7:dc:75:e2:a8:a9:46:
                    e0:b7:45:67:b3:e6:51:83:af:e8:55:98:a5:bc:03:
                    47:83:f4:bd:82:e1:c4:00:ad:20:2d:15:0f:9f:eb:
                    64:40:79:97:6d:d8:e2:cf:ab:c6:e8:32:cc:f7:bb:
                    d2:51:08:8e:9e:33:b7:f8:4b:56:c0:61:e2:f4:43:
                    91:e1:8c:aa:d0:4c:37:44:c8:e0:25:43:ba:d1:8b:
                    66:01:ba:b4:e3:47:a8:51:cf:2c:b0:e3:ff:25:17:
                    58:4e:75:8b:8c:11:72:08:49:b4:5e:c7:60:43:5b:
                    c9:87:19:c8:82:b4:bc:1b:2b:a6:16:3e:02:95:b6:
                    ea:79:d1:af:46:93:8e:92:05:1d:91:b6:ca:2a:3f:
                    c5:59:49:b9:66:e0:4d:94:66:e4:57:aa:d7:2a:a4:
                    d4:34:b7:dc:52:c4:a3:a7:b0:b7:d9:ba:f1:de:76:
                    4e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:03:C6:1F:0C:9F:49:11:54:BC:E8:E0:DF:2E:92:29:7A:30:0B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.crl

            X509v3 Authority Key Identifier:
                keyid:EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:35:2b:0a:d0:8b:66:2b:01:c9:0d:81:f2:2a:84:e6:97:2e:
         3e:8e:80:55:b2:44:c6:c1:ab:33:56:22:4e:62:13:29:8f:7a:
         81:97:7c:02:48:8d:68:56:45:55:31:22:d0:36:1f:0a:6e:74:
         b8:0f:b5:95:70:ce:c8:1e:91:70:70:f4:ad:26:7f:a2:02:f1:
         67:75:35:dd:3d:08:f0:b3:9b:f1:d9:cc:c7:9e:87:81:54:12:
         2f:e5:05:ae:b5:6a:36:a3:e3:6b:1d:2b:23:e6:c1:fb:44:ce:
         5b:94:98:f6:4e:7e:ec:46:f6:d4:1f:32:87:9f:52:b1:df:9f:
         55:02:f0:bf:d8:46:a9:a2:d8:52:e2:75:c4:02:c1:81:bc:f2:
         61:af:76:59:96:47:42:b5:08:ce:d6:47:c6:c7:09:29:1d:e9:
         9f:3e:37:ce:17:5b:4c:78:5e:c5:6e:9b:93:8c:ad:c1:42:5d:
         e2:cb:15:c7:c1:21:2c:86:74:ea:d2:6c:31:af:95:e5:fa:1b:
         be:59:03:9e:0f:7a:e6:fe:a3:aa:48:31:42:d6:3c:ce:f6:25:
         50:39:3d:55:56:9c:fc:0f:ad:5e:a2:dd:1a:5f:9e:af:b0:ea:
         16:e8:61:fc:1b:bc:17:1f:7d:fa:37:cf:20:ff:0e:5d:b9:e8:
         1a:24:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:23 2024 by rpki-client on console-ams.rpki-client.org