Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa
File:                     b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa (raw, json)
Hash identifier:          BVm4yHm/7BtZCu+giSMaTpAt5jQB5cWN4KUUNmmqdow=
Subject key identifier:   AB:89:1C:DE:76:45:A3:69:28:04:18:53:78:79:7E:2C:34:54:6D:91
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F43285847B3CC111F406E7EBE2DB924E0
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     32723
IP address blocks:        204.11.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:11:1f:40:6e:7e:be:2d:b9:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=6a914e9b-6fa3-44d5-9f8d-4cfcfbb598e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ad:dd:39:c5:de:69:2f:8b:67:10:95:8c:36:
                    7c:f0:6e:6f:75:e3:6e:e5:05:75:49:e1:53:18:00:
                    1f:2f:78:b4:b3:5f:d1:b9:c8:20:8b:39:85:85:9e:
                    b1:d0:d0:19:ee:d4:68:a9:46:a2:31:06:0b:48:17:
                    28:1b:bf:ca:dd:16:2e:73:21:eb:56:d4:e9:2f:4f:
                    2e:e1:d4:6b:5a:f8:05:72:40:45:90:dc:ac:0e:2e:
                    18:49:2d:eb:c8:2a:e8:e4:c8:49:7f:7f:35:1c:cd:
                    10:eb:c0:c9:1e:03:08:98:a7:32:01:bb:b3:94:54:
                    ff:5f:75:da:9f:e4:ef:e2:05:1a:42:3b:57:98:15:
                    eb:04:24:cc:93:a6:77:7e:55:08:c0:6c:4f:cb:fe:
                    38:f1:fd:ac:4b:99:b3:1d:74:f4:b9:35:6d:f2:2f:
                    83:35:5a:92:44:a5:97:86:b6:bf:74:41:71:d4:e1:
                    b1:32:ee:5d:fc:83:17:71:39:7c:4d:9e:3a:dd:3d:
                    18:dc:e1:38:c5:8f:53:e0:fd:6e:81:ef:8b:14:e3:
                    1d:4e:e6:e5:26:71:93:ad:ba:0f:be:9a:59:26:06:
                    e0:bf:93:ee:e6:80:c3:17:6b:21:b5:70:cf:e5:6f:
                    df:c7:8f:a9:24:23:32:fc:ff:e8:9d:e3:90:28:29:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:89:1C:DE:76:45:A3:69:28:04:18:53:78:79:7E:2C:34:54:6D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b8d1499b-5a94-353c-9840-3ef8b9f6911b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:07:ed:d4:20:22:60:16:0c:ad:61:92:f3:9c:76:be:6e:21:
         d8:9e:f6:d9:90:a6:6a:c6:c1:a8:82:76:58:ee:b2:2e:c1:3d:
         b8:08:65:fc:e2:17:01:5c:93:45:64:03:6f:96:af:e6:de:e4:
         43:62:86:98:5a:00:c2:2c:53:0c:b8:e5:43:c7:38:fb:5f:df:
         ef:e5:a7:81:b9:50:90:eb:f4:89:39:d5:e5:98:33:97:de:61:
         ce:ca:7e:d8:fb:a9:95:b9:a3:04:85:78:48:eb:7c:7d:e5:15:
         1b:ec:31:97:af:79:d9:9d:50:79:33:22:ed:11:40:32:d2:bd:
         c8:ed:96:29:2a:09:42:80:40:f4:36:1c:06:1c:9d:3e:77:72:
         f5:37:9c:58:d1:64:9a:4e:d2:e2:04:93:fb:8f:d3:47:c2:21:
         0c:27:fa:ce:3a:d0:99:7c:74:04:9b:7d:69:3c:3f:17:76:76:
         eb:5b:50:0c:69:bf:01:d3:57:67:52:61:08:ea:0d:9f:ea:9b:
         8c:25:fc:a4:85:e0:8b:6d:88:46:03:b7:8b:89:21:8b:6b:f1:
         77:d5:49:f7:b6:ef:c4:39:9f:95:60:8b:7f:ef:a9:b5:a6:cc:
         d1:c0:96:90:eb:ab:84:2c:66:4f:41:8d:f7:e6:bc:3e:db:87:
         59:88:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:09 2024 by rpki-client on console-fra.rpki-client.org