Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/b35ed2ca-f26f-3736-82be-d19951f21b7a.roa
File:                     b35ed2ca-f26f-3736-82be-d19951f21b7a.roa (raw, json)
Hash identifier:          iIqdTUIg4H7kbfQGvcMiI+kps24uRAqlBCuKnBHKHZ0=
Subject key identifier:   33:B7:CB:8B:4A:68:DF:4B:0C:6B:C8:8C:F6:4D:B1:F9:03:65:02:7B
Certificate issuer:       /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial:       010D0C9F432858479C11249FB034E2B8E3FC1CC0
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/b35ed2ca-f26f-3736-82be-d19951f21b7a.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     2055
IP address blocks:        204.90.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:24:9f:b0:34:e2:b8:e3:fc:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=911e81a7-2541-4aa5-819e-ef9a51bafb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:9b:ab:6e:12:5f:3a:3c:07:cd:bd:08:89:
                    da:9e:1f:62:19:1e:3e:87:92:00:19:73:ac:3d:14:
                    e2:1f:b4:69:50:e9:36:e6:a3:3c:2c:b1:8a:a3:f0:
                    f6:10:de:40:57:52:36:ce:1f:ba:e7:67:0f:a4:4b:
                    35:ff:79:23:8e:c1:bb:a4:fa:98:46:a4:c6:8e:7a:
                    db:23:63:09:fa:54:2b:30:2a:94:67:d6:52:4e:e4:
                    82:d1:45:5a:77:69:8f:25:40:cf:55:0b:ac:e9:30:
                    f9:2c:2a:52:01:4c:7e:22:9e:ad:ff:f4:04:9d:a4:
                    69:19:39:74:98:92:8c:46:7c:3d:57:c1:41:91:83:
                    61:be:08:29:2b:e8:04:f4:0c:48:57:70:a5:99:ba:
                    6f:1c:f0:27:55:49:d6:a3:d9:80:45:02:54:87:60:
                    47:9b:3d:d8:71:bb:c4:5e:58:e3:d2:e4:9b:a1:63:
                    8a:fd:b8:b9:e7:45:34:60:b7:0d:f5:c1:ee:a5:7b:
                    d7:0b:e6:18:ba:03:7e:ea:a7:c4:f8:7e:6f:c9:37:
                    30:46:06:7a:69:c3:63:61:72:02:0b:de:41:01:9e:
                    58:22:32:5f:27:03:b8:ac:c5:60:8e:70:f9:62:47:
                    4f:3c:fc:8e:5f:fe:5d:e7:ec:17:1a:60:22:20:43:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:CB:8B:4A:68:DF:4B:0C:6B:C8:8C:F6:4D:B1:F9:03:65:02:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/b35ed2ca-f26f-3736-82be-d19951f21b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl

            X509v3 Authority Key Identifier:
                keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7d:bc:09:69:bc:56:2c:1a:11:b7:b5:eb:72:e7:a8:cb:1d:
         60:1a:ce:11:06:7b:a6:cb:66:a2:b0:f6:1e:1f:aa:9f:a1:9b:
         73:9c:ff:90:42:32:12:31:92:87:80:1c:1a:ba:2e:bf:b7:c8:
         1a:7d:6d:05:c1:b3:28:d9:f2:66:95:40:e5:6f:d4:5e:24:39:
         c9:09:70:6d:c9:eb:d0:04:c7:3b:33:b9:0e:fc:d5:12:e0:4b:
         94:05:ec:9b:57:b1:5e:98:f9:6b:de:a2:97:0f:61:b1:7c:2a:
         c0:2c:fe:eb:14:a8:f5:81:fd:46:2e:fc:25:54:a0:2e:f2:dd:
         d3:75:73:a3:24:05:4d:53:f8:b8:ee:1b:90:04:3f:55:00:cd:
         65:7a:fa:f4:92:46:82:8f:9f:e3:5a:5a:e5:66:bb:c1:34:75:
         89:e1:c4:05:92:04:03:fd:31:bb:1c:4c:04:d8:e7:a6:23:d9:
         78:9b:84:7d:26:b0:2c:37:2b:80:a7:51:c4:ca:91:17:9a:39:
         03:c6:60:11:0e:3c:32:56:67:3c:6b:76:8e:50:ae:9f:fe:d3:
         41:c2:49:b4:4e:a4:fe:4e:25:33:3b:53:16:63:64:ee:af:c0:
         8d:17:59:00:0c:fd:9a:60:9c:8c:e2:b8:8f:cb:9e:44:46:69:
         d2:f5:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:38 2024 by rpki-client on console-ams.rpki-client.org