Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/c78e85a2-0607-3182-ab4e-06b14b721642.roa
File:                     c78e85a2-0607-3182-ab4e-06b14b721642.roa (raw, json)
Hash identifier:          atkPliQ0SZGDFJX29eoRrzrwd1dydBrFVRcO+9jH6Lg=
Subject key identifier:   02:50:F5:03:28:1C:01:E7:F1:38:97:1D:C2:FD:D1:B8:4B:AA:A0:CA
Certificate issuer:       /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial:       010D0C9F4328584765AFA3438CBD3E603DEDF0C0
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/c78e85a2-0607-3182-ab4e-06b14b721642.roa
Signing time:             Tue 01 Oct 2024 13:30:29 +0000
ROA not before:           Tue 01 Oct 2024 13:30:29 +0000
ROA not after:            Mon 30 Dec 2024 14:30:29 +0000
asID:                     26777
IP address blocks:        204.13.136.0/22 maxlen: 22
                          204.13.136.0/24 maxlen: 24
                          204.13.137.0/24 maxlen: 24
                          204.13.138.0/24 maxlen: 24
                          204.13.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:af:a3:43:8c:bd:3e:60:3d:ed:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
        Validity
            Not Before: Oct  1 13:30:29 2024 GMT
            Not After : Dec 30 14:30:29 2024 GMT
        Subject: CN=3d0e4188-7f37-4166-a737-e3e39e2bf3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:d7:23:db:4b:a0:28:42:85:27:67:4f:9d:
                    5e:3f:85:f0:95:5c:52:8a:48:f4:8e:73:41:a6:95:
                    5b:e6:e1:6e:cb:c3:70:5e:80:ca:ee:28:ca:85:fd:
                    21:f6:4b:5e:2d:01:d3:33:ee:a8:ec:5c:bc:ef:31:
                    c7:ba:a5:ae:b3:10:c9:79:cd:22:7e:de:a5:4b:0f:
                    23:38:7e:6f:6f:a2:69:ef:7b:62:80:ab:7e:b3:49:
                    c9:d9:26:ed:7a:1c:a5:88:d4:6d:c1:89:a6:ee:68:
                    d4:02:6f:e9:f1:0c:85:61:42:28:a6:f9:42:22:81:
                    ab:29:e6:76:14:b3:d3:2b:4c:6e:fe:fc:e4:b7:f1:
                    4c:fa:19:4a:30:c9:fc:98:14:df:73:af:3e:ff:a7:
                    84:28:eb:ee:1f:20:bc:ed:3a:5a:ba:58:3b:77:27:
                    ef:52:25:d1:86:49:d8:59:79:88:cb:f2:d1:a7:4d:
                    4c:6f:ce:3a:e6:d8:e2:e1:97:1c:e0:ef:f4:a4:e1:
                    54:83:f7:32:89:af:7e:dd:c9:24:2a:bd:29:43:18:
                    e0:74:5b:55:f2:f6:59:3d:e5:80:56:d4:41:4c:49:
                    44:95:3d:ef:0b:4a:cf:4d:71:c4:e7:45:76:49:95:
                    6c:c0:ac:f2:ea:36:a6:e6:65:4e:e6:b9:97:e4:d3:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:50:F5:03:28:1C:01:E7:F1:38:97:1D:C2:FD:D1:B8:4B:AA:A0:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/c78e85a2-0607-3182-ab4e-06b14b721642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl

            X509v3 Authority Key Identifier:
                keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:70:e6:7c:91:b2:9a:c0:1e:19:5f:8f:2e:84:8b:6b:41:a8:
         03:c8:78:55:39:a1:39:be:2d:39:2c:a2:f8:1b:37:10:31:eb:
         a3:3d:7b:37:ae:00:43:13:5f:08:8e:a0:24:32:9c:3e:ac:e3:
         19:8d:9b:cd:4d:7f:19:ec:99:aa:d4:f9:32:a5:73:35:9f:88:
         f9:62:81:08:b0:3e:9e:9d:9c:18:ed:1c:56:f4:de:bf:60:cb:
         d3:f5:d3:3c:f3:9d:07:11:bd:15:6a:c1:33:04:ca:62:fa:bb:
         4c:58:fc:70:a2:65:a3:54:67:4b:66:a1:f6:a6:c1:ba:fd:25:
         b5:27:3c:3c:ab:86:15:75:10:87:a4:e5:ec:df:f2:a2:7a:28:
         de:aa:3f:8e:79:f8:5d:f0:11:aa:28:e3:73:96:40:92:29:94:
         dd:ad:e3:25:46:5c:ed:eb:c1:e3:6d:1a:4e:e3:39:a1:b1:77:
         16:44:96:c4:bc:b2:b2:8f:8e:60:7a:59:0d:7b:46:53:99:fd:
         19:0c:6b:75:d2:c6:fa:a9:48:dc:da:65:6c:b3:b2:54:6e:b5:
         58:e4:d6:f6:74:98:38:0b:ec:be:f0:20:53:ea:cb:16:9a:20:
         7b:89:5d:2b:27:8e:d6:46:72:c6:c1:06:c0:12:9f:e6:d1:dc:
         e8:9d:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:20 2024 by rpki-client on console-fra.rpki-client.org