Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa
File:                     6f8e9d54-f577-32db-9a19-005c71e16d5b.roa (raw, json)
Hash identifier:          k977P8+RoKZ4D6aYbSg2V7pvP+OGYPqaItP7P3mQTiY=
Subject key identifier:   66:2C:D4:A3:8F:51:16:79:E5:3B:33:68:69:FA:46:9C:CB:7D:AA:D7
Certificate issuer:       /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial:       010D0C9F43285845E193CDD6216A64061ABA8F50
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     46262
IP address blocks:        204.15.24.0/21 maxlen: 24
                          204.11.129.0/24 maxlen: 24
                          204.11.134.0/24 maxlen: 24
                          204.11.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cd:d6:21:6a:64:06:1a:ba:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=b105e4d7-dc80-486c-bfd9-bf3d28a65c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:68:9d:7e:25:91:b9:e2:74:b4:03:64:5c:
                    48:4c:89:36:ca:2f:14:b9:ea:42:6e:89:9d:58:8a:
                    dd:0c:8c:ef:a9:cf:d7:b5:66:51:ea:55:f8:f7:80:
                    5d:cc:de:54:b8:0a:cf:14:fd:d2:e0:d5:72:3c:e9:
                    9a:f1:5a:3d:be:dd:80:c3:6d:6f:0d:16:ac:59:cc:
                    60:6d:e3:07:ad:21:f4:93:ca:2a:0a:b7:c3:2d:c4:
                    7d:a3:dd:da:32:3c:3b:1d:25:39:ec:34:1b:f9:df:
                    96:d6:9d:97:98:f1:84:2c:e9:45:65:e6:7d:03:1b:
                    8b:99:1a:f7:87:5d:b1:5d:fa:0a:9e:23:24:e2:18:
                    68:38:4a:c4:1c:cf:bc:0c:44:96:9a:fd:b7:ec:8a:
                    b6:ec:54:ff:61:84:48:6d:b2:2b:29:e1:2e:e2:50:
                    72:9c:78:ec:84:49:db:d0:7c:81:4a:b2:ad:73:58:
                    c8:25:3a:52:05:41:e5:fa:7c:2d:03:3b:b3:3c:e3:
                    ba:61:45:6c:da:5f:47:b6:6c:a3:2f:e6:b4:5e:5b:
                    a3:c9:e7:ff:70:d1:15:c9:fd:a6:e5:74:4d:cb:9e:
                    fc:b8:b0:ef:01:08:5b:a2:fd:51:1d:ac:7e:5e:e1:
                    c2:83:53:e4:a9:58:26:97:50:f8:f3:6a:2a:4b:b5:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2C:D4:A3:8F:51:16:79:E5:3B:33:68:69:FA:46:9C:CB:7D:AA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl

            X509v3 Authority Key Identifier:
                keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.129.0-204.11.131.255
                  204.11.134.0/24
                  204.15.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:05:e2:f0:33:44:98:7a:f4:40:ca:4a:57:51:c6:cf:4d:59:
         95:35:4b:63:71:9c:dd:b7:d6:16:d6:69:03:36:5e:a4:0a:e7:
         5d:c1:aa:79:14:f7:ca:ad:1a:12:00:ad:fc:23:20:ae:66:fc:
         24:c9:c7:1c:54:e0:2b:ab:26:7d:be:6b:a6:f7:88:92:24:91:
         36:84:37:c1:44:44:2d:82:ef:8c:84:b2:90:aa:f8:8d:8e:0c:
         f1:d5:71:5a:70:ee:f7:64:58:48:f9:c6:d1:94:ad:22:2e:d9:
         96:e9:37:be:3e:65:10:9f:ed:c8:fa:24:28:33:cc:69:58:c0:
         1e:ca:50:2e:f8:54:93:1d:15:6b:9d:ff:08:4a:e4:b9:a8:e8:
         af:d6:56:21:cc:04:c7:5c:2b:a3:9e:aa:8f:dc:d0:4a:6c:6b:
         c4:83:79:2e:54:ee:7e:e3:5c:df:5c:1a:29:ba:09:19:2c:08:
         e9:c9:78:95:2b:10:a5:a2:41:ac:e8:c1:f0:a7:2b:eb:f1:25:
         34:9a:8d:98:83:5c:69:ed:7f:e0:fb:fc:32:69:ce:ec:9d:77:
         66:bd:ae:2f:f7:89:e4:b6:44:26:e6:64:e8:41:02:13:ac:f3:
         50:29:1e:8c:f1:d3:ba:9b:5b:80:c7:dc:0d:d7:58:25:35:b3:
         ce:28:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:19 2024 by rpki-client on console-ams.rpki-client.org