Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa
File:                     b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa (raw, json)
Hash identifier:          zbueV20gPkFyAYtVUKxL+7aty+rJvE5TfcgJuIG0vDg=
Subject key identifier:   0D:08:A0:26:3A:DE:5C:98:60:D0:B0:8B:15:AC:FD:0F:17:9E:72:43
Certificate issuer:       /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial:       010D0C9F432858469199EC425333F226EC7A0000
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa
Signing time:             Wed 17 Jul 2024 14:15:22 +0000
ROA not before:           Wed 17 Jul 2024 14:15:22 +0000
ROA not after:            Tue 15 Oct 2024 14:15:22 +0000
asID:                     20057
IP address blocks:        204.235.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:91:99:ec:42:53:33:f2:26:ec:7a:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
        Validity
            Not Before: Jul 17 14:15:22 2024 GMT
            Not After : Oct 15 14:15:22 2024 GMT
        Subject: CN=484a23e1-65c7-451a-931c-27110c7988a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:4c:23:22:bc:ee:6c:8f:c0:a9:c0:be:67:
                    84:eb:d7:91:da:4e:78:e9:29:a7:02:17:7e:d1:07:
                    ae:57:4d:b6:ad:16:c1:47:f0:74:9c:d4:ce:ce:86:
                    3a:69:fb:11:a2:cd:87:f8:66:1c:7a:19:f8:90:5c:
                    57:ad:e2:9f:8e:53:38:00:e6:d1:8b:01:ce:e2:23:
                    9d:87:a2:b2:ad:86:fa:f4:6f:55:50:b9:29:f6:02:
                    4c:d3:06:1f:66:21:8e:26:2c:da:3b:71:d3:fd:e2:
                    5d:a4:32:93:88:3a:0d:59:5d:cc:8e:3d:5a:01:3f:
                    53:9f:00:e7:c8:d8:ee:d5:df:3a:03:0c:cb:ec:21:
                    e9:2f:75:ce:db:38:00:77:9a:94:7b:8c:9a:7a:87:
                    3e:18:18:9f:86:1b:17:49:75:bd:f0:71:ad:3f:36:
                    f2:3e:9c:d3:aa:aa:de:14:73:d6:60:7b:95:9e:87:
                    99:53:72:61:4f:74:08:a9:45:12:13:b8:d5:4c:67:
                    e8:5c:ed:8d:75:d1:97:15:65:88:7f:4c:a0:fc:ed:
                    4d:b5:f9:37:95:87:7c:0e:7d:2b:15:8c:f9:e9:99:
                    ea:52:42:96:3d:f7:d1:db:59:d3:69:e6:21:93:a7:
                    a2:61:5f:89:62:54:0d:b6:9a:d7:75:2c:b8:cc:27:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:08:A0:26:3A:DE:5C:98:60:D0:B0:8B:15:AC:FD:0F:17:9E:72:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl

            X509v3 Authority Key Identifier:
                keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f4:a8:f3:0a:50:e4:95:7f:25:60:c0:30:51:c5:d7:17:6b:
         87:28:ff:5c:a7:6e:ce:f8:ac:5c:64:a7:40:7a:b0:e7:c1:ab:
         5b:fb:9f:65:cb:cb:aa:45:79:e4:e0:34:70:c2:8f:ec:a1:18:
         86:a8:16:24:f8:33:33:a4:dc:cd:5f:32:c6:91:04:9c:f4:e7:
         bd:1d:3e:35:5f:a5:52:cc:fc:b8:19:3a:3d:78:11:24:6f:e8:
         6f:a4:b1:06:19:f6:b4:fe:c4:c7:4c:1b:ef:47:ae:ad:ed:2a:
         32:ee:4f:c1:13:ec:51:fb:4a:c2:61:c7:18:0f:7f:91:a0:ef:
         85:73:bf:cb:a5:41:d7:92:3d:5d:f4:5f:0b:6c:20:59:36:d8:
         c9:8f:ec:1f:6b:08:41:14:4a:dc:23:d4:20:ca:46:f6:08:ad:
         b6:25:0f:ee:df:fe:82:03:3c:15:2a:cb:f6:d8:bb:6c:ed:70:
         57:3e:01:72:09:4c:47:66:8e:56:4c:5d:c8:e5:53:2f:be:2a:
         f7:23:f7:89:03:fc:a5:68:f5:ee:a4:98:41:0b:57:44:55:a5:
         3b:fc:e5:70:a1:3a:84:6a:e5:d2:07:18:92:05:8e:d0:c4:75:
         53:e7:af:1e:7a:62:7a:d5:0a:c9:1c:41:9a:5c:ce:a2:3f:22:
         57:fb:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:23:05 2024 by rpki-client on console-fra.rpki-client.org