Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/f37e04f9-de2d-3de4-9d8a-00526981600a.roa
File:                     f37e04f9-de2d-3de4-9d8a-00526981600a.roa (raw, json)
Hash identifier:          6NxurHslO/5I38395ElsQRj4HFgla77vimW0hm42iIY=
Subject key identifier:   09:86:A4:39:38:DD:36:B8:BB:DC:87:C7:A0:33:58:80:04:63:74:D4
Certificate issuer:       /CN=91518d14-585e-444c-bf2c-92e2195ab178
Certificate serial:       010D0C9F43285847D98A47233E3AB3F6D4226880
Authority key identifier: 1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/f37e04f9-de2d-3de4-9d8a-00526981600a.roa
Signing time:             Tue 12 Nov 2024 01:28:58 +0000
ROA not before:           Tue 12 Nov 2024 01:28:58 +0000
ROA not after:            Mon 10 Feb 2025 01:28:58 +0000
asID:                     18530
IP address blocks:        204.8.32.0/22 maxlen: 24
                          204.13.164.0/22 maxlen: 24
                          204.15.224.0/21 maxlen: 24
                          208.99.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:8a:47:23:3e:3a:b3:f6:d4:22:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91518d14-585e-444c-bf2c-92e2195ab178
        Validity
            Not Before: Nov 12 01:28:58 2024 GMT
            Not After : Feb 10 01:28:58 2025 GMT
        Subject: CN=1089e0be-0f70-40ce-bb19-4cff69446816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3f:34:e8:74:94:e4:a4:08:ec:ff:5b:d5:f3:
                    2f:16:95:72:3e:84:02:3a:01:97:ec:0f:cd:2d:90:
                    7c:86:83:75:16:c7:17:92:0b:e6:fa:b9:31:cc:10:
                    1f:2e:f8:f4:7c:6f:11:0e:71:0b:2e:08:98:b8:0d:
                    3f:b4:9c:24:e4:ac:98:71:1d:2a:76:f7:02:6a:05:
                    51:64:6a:ce:29:a0:a9:fa:7d:22:55:38:0e:3c:39:
                    bd:f1:54:2b:25:d3:cc:75:64:08:cc:13:22:1b:31:
                    da:fb:7e:d2:b2:51:67:0f:d5:d1:83:06:af:36:3e:
                    f4:1f:04:06:2d:cf:57:a2:a6:b7:a7:00:69:e5:4e:
                    15:5c:ac:b3:da:12:ee:df:bf:58:cd:2d:94:b6:a1:
                    27:af:85:55:53:11:67:e7:81:a1:40:4c:6c:f8:b8:
                    89:b0:11:89:01:98:c8:15:b5:d5:43:8f:d9:3e:7a:
                    ca:a4:fe:e4:78:fa:01:c3:47:69:ee:62:f6:5c:a7:
                    cb:fd:1d:9b:96:4d:f1:30:6a:7a:86:b4:b7:41:14:
                    50:f6:a3:08:ad:f1:64:6d:54:13:0b:02:07:e6:54:
                    01:26:b9:27:47:3e:35:e9:5c:9b:3b:2b:fd:c4:01:
                    03:f2:07:7f:fc:a0:e1:25:46:d4:2c:0a:3f:ae:c9:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:A4:39:38:DD:36:B8:BB:DC:87:C7:A0:33:58:80:04:63:74:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/f37e04f9-de2d-3de4-9d8a-00526981600a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.32.0/22
                  204.13.164.0/22
                  204.15.224.0/21
                  208.99.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:c6:3b:f4:a4:39:dd:19:69:c5:85:b5:a1:2d:10:e9:58:
         b6:83:ad:28:3c:c9:a0:a1:e7:a4:33:a4:b5:c4:d1:f5:ad:54:
         a7:6a:57:b7:99:94:f5:b7:79:73:d6:85:cf:c4:ab:57:68:73:
         b7:5b:d7:fb:12:7c:3a:7b:07:a4:47:e5:56:93:2f:ee:10:f4:
         c8:11:1c:0b:27:c0:78:3e:f2:03:92:8b:67:dd:b3:f5:1e:7a:
         d3:54:64:be:07:b5:4a:5a:7b:00:f8:dd:d1:c2:1b:2d:9c:92:
         c0:1e:06:6c:20:8e:d6:d8:00:ec:4a:23:9f:99:7c:a1:20:ef:
         37:a6:a7:bb:4c:46:cd:44:ef:0c:e7:cf:99:85:99:ae:97:5d:
         98:ef:83:1a:6e:4d:8c:74:6c:7c:3a:71:80:5b:20:5c:ba:43:
         ff:c9:0b:97:55:78:76:ee:87:6f:32:6a:25:38:7c:ca:23:85:
         6f:fb:29:5b:de:c5:8d:a4:37:a9:6e:cb:a6:aa:d1:a5:09:43:
         45:85:8c:1a:8b:b7:52:9e:e7:ec:82:b7:4b:76:4f:3c:ae:a0:
         e4:d6:69:eb:cd:57:fa:8a:1b:10:60:7f:fd:f1:e3:62:a6:38:
         53:a5:66:ac:aa:e3:0b:c1:d3:64:fe:fe:1d:5e:f3:1b:d1:43:
         2b:3e:b6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:30 2024 by rpki-client on console-fra.rpki-client.org