Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa
File:                     87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa (raw, json)
Hash identifier:          d/7gkO7RBRhOuanBmR+My1kqDmzC591A5NthrbOcEvY=
Subject key identifier:   8F:97:32:74:AA:AD:BD:32:61:8D:B7:54:F2:4D:64:A4:A4:2D:2F:56
Certificate issuer:       /CN=a854a4c3-e5e0-49a9-a110-947d91107e15
Certificate serial:       010D0C9F4328584538AD4A10C3780C6C2385D000
Authority key identifier: 71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     54885
IP address blocks:        204.144.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:4a:10:c3:78:0c:6c:23:85:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a854a4c3-e5e0-49a9-a110-947d91107e15
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=e9a2d436-ae06-4d4e-9d5f-720bd8708eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:c4:9e:5e:d2:de:7c:27:8d:d1:5a:01:04:
                    5e:a7:44:ff:f2:14:f4:49:7d:cc:49:b7:52:b1:a3:
                    6b:9a:7a:d7:05:ed:a7:40:3b:f0:f1:6b:0e:b1:56:
                    29:d3:d0:ae:b6:8d:08:ba:a8:bc:3e:f5:11:c7:fe:
                    0b:53:7c:4c:aa:21:71:e7:24:71:e3:02:21:3c:c9:
                    65:44:b2:6d:89:7d:dc:92:68:77:48:ec:ca:f1:fd:
                    1e:f4:c5:25:ad:29:28:44:dd:02:06:ba:b9:b9:1b:
                    f2:56:f0:30:4c:a9:55:9d:5f:65:87:bd:fa:cd:35:
                    85:59:9d:d3:72:2e:60:f8:40:57:b1:96:d1:52:7f:
                    99:2a:db:21:62:d9:ca:d5:23:5e:b6:25:a8:bb:fc:
                    30:32:0d:0c:37:64:ab:1e:80:54:5c:f8:10:7a:90:
                    68:68:66:96:70:cb:74:19:8c:40:0d:1e:26:08:cd:
                    4a:74:dc:b4:1e:e4:89:50:1e:6d:1b:e6:03:99:c0:
                    b9:b4:17:fa:71:f0:35:53:c7:ca:3f:15:0f:ff:29:
                    bb:f5:11:61:95:af:ff:bb:ce:a3:f3:7d:aa:bb:6c:
                    2c:ab:a2:fa:23:5b:99:ce:df:99:6d:3c:5a:63:4c:
                    cf:43:91:8f:ea:33:b0:01:01:05:4b:9d:68:c5:51:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:32:74:AA:AD:BD:32:61:8D:B7:54:F2:4D:64:A4:A4:2D:2F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl

            X509v3 Authority Key Identifier:
                keyid:71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.144.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:83:d5:8f:11:16:39:2f:d2:60:3c:42:a5:4e:3b:1d:9a:13:
         6a:1c:3b:2a:df:f4:ed:d2:13:35:49:03:1f:0e:d2:2f:7a:b8:
         6d:58:18:7b:b7:13:4d:de:89:65:11:5c:5a:2e:f1:a4:64:39:
         55:e2:30:3c:7c:32:54:81:89:d4:df:ba:f4:a9:5c:d0:b6:ac:
         95:a5:60:61:3e:79:05:f5:b4:51:b7:ee:2e:a7:25:9f:17:ac:
         16:2d:9e:a1:2f:d3:e3:9a:b9:e3:ad:df:eb:17:9f:ad:e3:ba:
         85:fa:91:7b:be:a5:af:09:78:29:00:92:00:ea:9e:73:07:c6:
         9b:e1:42:91:18:95:26:e1:f6:f1:7b:7c:80:d4:52:f9:4f:29:
         70:75:38:fe:84:ec:d0:26:2d:bf:1a:96:c0:c4:4d:8e:fc:12:
         93:f4:b5:d1:12:28:20:9f:6f:37:79:32:bf:d3:fb:b6:c5:93:
         8b:60:62:c5:77:c6:66:63:c7:59:e2:46:fd:2a:1b:b0:e9:98:
         67:2c:92:3e:b2:ca:58:c0:01:8f:e7:54:d3:d2:83:d4:a5:c6:
         2d:9f:cb:7d:31:32:cf:b2:b8:62:b1:29:8f:7b:94:37:4b:2a:
         18:31:97:56:2f:4f:d0:4c:94:d0:62:e5:c8:2e:2d:b2:16:f5:
         dd:a7:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:15 2024 by rpki-client on console-fra.rpki-client.org