Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/db71afc3-9050-3493-9c39-a998324d5bbf.roa
File:                     db71afc3-9050-3493-9c39-a998324d5bbf.roa (raw, json)
Hash identifier:          ygxsa584hnj7qzFDovzetV2/za0IRo+zBfnXu1UI4a4=
Subject key identifier:   F9:3C:30:33:51:5D:B6:62:3E:9F:78:89:C4:7B:E6:64:45:12:60:B6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF482BB2150B31818047E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/db71afc3-9050-3493-9c39-a998324d5bbf.roa
Signing time:             Fri 08 Nov 2024 15:04:56 +0000
ROA not before:           Fri 08 Nov 2024 15:04:56 +0000
ROA not after:            Thu 06 Feb 2025 15:04:56 +0000
asID:                     81
IP address blocks:        204.84.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:82:bb:21:50:b3:18:18:04:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:56 2024 GMT
            Not After : Feb  6 15:04:56 2025 GMT
        Subject: CN=02ebff33-d5bc-4704-8083-ac38734d07e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:6f:c6:59:53:9e:7d:1b:0b:78:34:3b:02:
                    03:48:b3:b7:95:e7:e1:26:16:6a:ad:33:2f:e6:20:
                    83:6e:a3:29:b3:87:dd:16:7a:13:f1:86:70:f7:78:
                    64:aa:b5:b0:28:f2:71:94:6c:74:80:16:97:e6:fd:
                    98:e9:2f:f1:88:fb:4d:d1:1e:ab:6b:2f:cc:bd:ce:
                    51:3e:0c:e4:da:2e:e5:ce:ab:97:44:a2:b5:44:a9:
                    21:8f:13:f4:16:d1:20:a0:a7:9a:95:37:7d:be:98:
                    92:d4:7f:18:12:31:d9:fd:37:ba:9f:2a:ac:71:f6:
                    00:71:4a:80:e8:72:5d:49:ba:92:6a:99:c2:fa:e0:
                    89:84:14:0f:68:60:89:a4:23:8f:5d:9d:86:c7:e9:
                    28:b2:88:18:70:9b:d5:57:60:bb:d0:88:dc:00:98:
                    13:fe:71:9d:80:bb:10:56:c8:65:6f:e3:77:38:6b:
                    4f:60:8f:f4:e2:63:89:18:43:cf:70:7b:4f:48:59:
                    9b:8f:8a:25:54:69:05:7a:9f:07:6b:b1:c8:90:2a:
                    72:91:e0:9c:ec:b2:0a:f2:60:5a:e2:c7:cc:a1:89:
                    a1:16:68:20:25:c0:36:a2:2b:ec:90:80:f9:d7:4d:
                    8f:de:cf:a1:13:d8:56:5c:bc:ae:ec:11:50:8b:f4:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:30:33:51:5D:B6:62:3E:9F:78:89:C4:7B:E6:64:45:12:60:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/db71afc3-9050-3493-9c39-a998324d5bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:32:29:98:f6:3f:4f:ce:eb:19:85:f6:f6:a7:fc:09:fd:
         ac:28:80:d3:f9:7c:81:f6:bc:db:5c:5c:dd:11:40:63:e2:c6:
         8b:06:41:e0:e3:d3:ef:0b:a5:93:46:1a:6e:92:48:b0:38:fb:
         7d:8d:b0:df:b8:dc:8d:d1:4f:ad:24:45:11:d1:88:83:5d:eb:
         e7:a2:70:72:07:3c:d2:f2:f5:91:f7:6b:85:22:a3:91:c1:be:
         12:42:8a:5d:72:bb:e8:30:48:6d:06:f8:5b:e2:87:82:b0:41:
         f0:f5:9b:43:85:a8:21:1f:4d:a7:61:20:99:32:fc:65:bd:95:
         41:bc:05:15:0a:b5:50:7e:98:3e:02:25:ae:dd:32:67:45:52:
         5c:7e:22:8b:12:fb:e4:dc:91:ae:51:74:2a:30:f7:f2:0a:85:
         3a:8a:18:64:95:16:f2:4a:8a:e5:ff:60:c7:aa:0c:1c:65:87:
         3f:99:15:1c:87:01:d8:03:58:d3:a5:3b:1f:61:4f:12:72:63:
         bc:e6:41:34:64:73:b1:17:57:6e:5c:18:b1:a3:49:90:3b:22:
         b9:b5:c1:c0:c9:7a:dd:0a:62:79:76:c8:90:64:fc:23:46:47:
         1d:c8:01:f6:75:1c:ae:cc:95:8b:09:a1:b0:6e:b8:d2:ee:40:
         06:f7:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:28 2024 by rpki-client on console-ams.rpki-client.org