Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8410ff3b-82fa-370a-884c-ac30360038c3.roa
File:                     8410ff3b-82fa-370a-884c-ac30360038c3.roa (raw, json)
Hash identifier:          5CXWfCbenQakotQzHpAyBbKtW3k06Gsz/CYk1yDucKs=
Subject key identifier:   3D:E3:17:09:96:0B:2B:B3:D3:D8:9C:D1:D8:0E:44:E1:EA:C9:99:0F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF4903731BD89BF44610780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8410ff3b-82fa-370a-884c-ac30360038c3.roa
Signing time:             Fri 08 Nov 2024 15:05:03 +0000
ROA not before:           Fri 08 Nov 2024 15:05:03 +0000
ROA not after:            Thu 06 Feb 2025 15:05:03 +0000
asID:                     6559
IP address blocks:        204.84.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:90:37:31:bd:89:bf:44:61:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:05:03 2024 GMT
            Not After : Feb  6 15:05:03 2025 GMT
        Subject: CN=f01bf42a-d226-42cc-91e4-34298365c870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:36:a8:77:e0:ba:23:f9:d2:96:4f:e3:aa:fe:
                    be:93:d8:da:9c:3e:58:f5:23:3f:1a:9c:b7:bb:0f:
                    5a:90:75:a2:b5:e5:c5:55:ba:0c:64:00:02:68:ad:
                    94:64:2c:79:20:2c:e9:d0:61:77:4c:ea:93:9e:de:
                    95:f7:bd:6d:51:65:c2:29:96:6b:92:e6:93:b6:ad:
                    21:f8:40:85:b1:91:1f:46:83:6b:66:92:a1:a4:2d:
                    a0:1c:16:f2:ba:94:0b:c5:77:e0:83:c6:26:d7:56:
                    9b:f3:5f:3e:ec:04:bf:7f:12:04:41:58:7c:e6:14:
                    3c:89:ac:2d:c5:50:a0:a5:de:ad:3e:37:24:2e:cd:
                    8e:fb:ee:f1:15:86:e0:14:ab:02:c9:44:fb:23:25:
                    b8:7c:49:f4:79:bd:30:0d:c1:c6:c3:a1:24:df:8f:
                    fe:63:8d:c8:56:8a:3e:a8:24:3b:3f:39:a9:54:de:
                    90:5f:ae:f7:b2:03:79:5e:01:fb:2f:b5:31:09:52:
                    75:8d:d9:e7:55:d1:b5:61:ff:c8:d7:a7:13:4a:7a:
                    0d:52:81:38:b7:4c:a7:39:db:ff:6c:4e:ca:bd:d1:
                    ed:fe:d1:75:c0:fc:b6:d4:7f:03:4c:93:d1:47:e0:
                    87:25:09:0d:20:a0:e2:90:de:85:6d:6a:c3:dc:c2:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E3:17:09:96:0B:2B:B3:D3:D8:9C:D1:D8:0E:44:E1:EA:C9:99:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8410ff3b-82fa-370a-884c-ac30360038c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:41:ac:2a:23:24:f2:4d:92:3c:df:94:a3:c0:51:72:20:19:
         4a:55:14:ee:71:9b:fb:ef:b4:4b:cd:3e:8f:47:7e:65:69:65:
         fa:4b:18:34:af:03:bb:63:93:8d:ed:f5:74:2f:c0:d7:3d:15:
         c9:7d:01:07:57:b4:c0:47:01:48:8f:60:8b:b9:ef:25:4e:f6:
         18:c5:dd:63:c0:fe:3e:c9:09:63:b0:8c:7f:c9:eb:cd:54:9a:
         77:9f:c2:c9:cd:ee:d1:9f:1c:20:cf:59:fd:27:45:8f:37:7e:
         86:33:0a:6d:fb:84:06:34:a8:c5:e2:a9:19:aa:f7:e4:f7:1d:
         ca:8b:2b:72:6b:02:54:fe:9a:58:2d:69:1c:bc:16:a5:9d:52:
         0f:54:ab:b9:17:f0:e2:11:59:0f:75:bd:86:5f:b4:72:7e:a1:
         eb:7f:fc:a7:ae:21:cc:13:6a:2f:9d:32:92:a4:29:8c:55:4f:
         14:42:c0:c3:c6:3a:3e:bb:1b:fd:ed:e1:75:fa:21:c7:21:f2:
         68:2f:71:a4:98:18:a2:87:3d:d6:9d:61:61:dd:5e:27:dc:b0:
         45:7b:b6:c7:b1:e3:35:cd:70:11:4d:1e:2a:7a:f6:51:38:2a:
         27:40:8b:30:b3:b9:48:9b:e6:79:01:6c:a3:e0:64:40:be:19:
         2b:e6:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:28 2024 by rpki-client on console-ams.rpki-client.org