Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa
File:                     3880b21f-244e-35e6-a256-bd5d4c123331.roa (raw, json)
Hash identifier:          EpRBitmS/oKagBUb/52OXlkl3Q06dP/Y6NGHHIX5HrE=
Subject key identifier:   1E:63:59:42:00:6D:2C:21:EA:14:8B:08:21:DD:EA:62:7D:FD:59:BB
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F432858477C38626F83F288C947E4C100
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa
Signing time:             Wed 09 Oct 2024 15:13:48 +0000
ROA not before:           Wed 09 Oct 2024 15:13:48 +0000
ROA not after:            Tue 07 Jan 2025 16:13:48 +0000
asID:                     15204
IP address blocks:        204.15.52.0/22 maxlen: 22
                          204.15.52.0/23 maxlen: 23
                          204.15.52.0/24 maxlen: 24
                          204.15.53.0/24 maxlen: 24
                          204.15.54.0/23 maxlen: 23
                          204.15.54.0/24 maxlen: 24
                          204.15.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:38:62:6f:83:f2:88:c9:47:e4:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Oct  9 15:13:48 2024 GMT
            Not After : Jan  7 16:13:48 2025 GMT
        Subject: CN=23ccf72b-4bb9-4267-a31c-63f90b9264b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:31:1b:36:25:85:9c:10:1b:4b:86:db:19:
                    f0:12:79:9a:db:86:6e:49:9f:68:c2:98:15:f1:74:
                    f2:47:0b:8b:e5:76:d6:8c:3e:36:96:a4:51:a3:29:
                    70:71:a7:3e:d0:fd:e8:62:17:d9:45:ae:42:ef:71:
                    f3:3b:62:23:32:e5:be:16:25:94:1e:2c:1f:ba:38:
                    d0:57:87:93:d9:40:08:e8:e4:e4:4b:32:05:8c:ab:
                    cc:98:85:9f:69:db:7a:d0:52:ff:5d:ba:12:b1:23:
                    d0:da:17:53:78:e8:ed:75:76:2f:6d:ce:06:0b:a6:
                    fa:14:13:1a:dc:f5:b0:42:24:8d:d9:ac:0d:d4:65:
                    77:be:a8:dd:e4:3f:9b:63:dc:f7:14:46:bb:68:7e:
                    99:0a:ef:88:14:0f:4d:14:cc:d2:c6:44:64:c5:e5:
                    d2:7c:ac:53:03:51:45:5b:bf:17:0a:77:c4:1b:62:
                    3d:7e:59:0a:dd:33:35:04:70:e6:c6:1b:50:c8:3f:
                    7f:ba:e5:39:da:52:1b:c6:3a:b6:d9:42:30:9e:ca:
                    81:f7:54:da:39:ec:3a:9f:15:ea:ed:05:74:59:a6:
                    50:27:94:25:78:6b:7c:a1:f7:4d:6e:76:b6:0f:de:
                    23:cd:16:cd:1c:a2:8f:d7:40:92:00:97:12:ec:2c:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:59:42:00:6D:2C:21:EA:14:8B:08:21:DD:EA:62:7D:FD:59:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f1:40:a3:70:8a:fc:d5:40:00:cd:e5:9f:7c:ed:fc:3c:01:
         78:c2:0d:8f:8d:4d:9c:98:50:7c:5f:68:59:7b:d6:6a:c0:b5:
         1f:e9:f2:02:21:4e:8c:2e:53:f7:93:af:99:90:2f:6c:78:8e:
         9c:c5:cb:12:ab:e0:9c:39:b5:73:eb:cd:a2:4a:8c:8a:e2:81:
         0f:f5:f0:b0:fb:5a:03:24:fa:cf:f3:0c:ca:22:9e:79:f7:be:
         00:e1:69:f2:1c:3d:1e:66:48:64:69:80:a1:cd:d7:27:38:d4:
         06:04:d9:b6:f0:69:63:40:ca:3f:d5:a1:63:df:71:15:9a:e7:
         a7:97:85:33:ad:11:40:7a:07:a2:d0:3f:a9:19:be:35:58:fd:
         e8:81:04:20:a1:09:a8:e6:e1:5a:70:ff:b5:d6:05:07:04:d3:
         cb:ca:dc:a3:97:8e:0d:cc:6a:11:74:5a:d8:3b:42:9f:b9:77:
         3d:67:b9:28:e3:03:53:ba:08:66:14:fe:ef:6f:a4:c8:12:8f:
         0d:f9:2d:d8:c1:0e:c9:41:f4:e1:4e:54:d1:23:9d:30:f1:4e:
         d1:f8:74:91:dd:88:f2:b9:02:f8:b4:0c:be:60:d3:db:1b:35:
         8f:7d:5b:e8:8a:6d:c5:a8:64:f4:c1:46:f9:9d:45:40:10:5f:
         76:f0:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:23 2024 by rpki-client on console-fra.rpki-client.org