Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa
File:                     3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa (raw, json)
Hash identifier:          PcdiMQmcsMsMfbh62hBUMDvML3xAEaXsr7mTqtidt1U=
Subject key identifier:   64:5A:10:BE:8D:1F:94:E6:34:74:95:1A:61:95:30:83:75:7B:34:8E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DCAFD2BEA22414D5B6100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     12271
IP address blocks:        204.210.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:ca:fd:2b:ea:22:41:4d:5b:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=91de121f-e5b3-477e-8562-b0bd088187b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:41:5f:1b:be:ae:91:2b:34:f4:98:b7:cd:
                    5b:40:4c:33:f3:0b:6e:97:06:b9:46:cd:cd:f6:83:
                    de:58:3f:e3:68:b3:7d:89:6a:d7:63:22:38:d8:59:
                    0c:da:f0:ac:af:1c:69:cc:cd:c7:5a:25:5b:c6:df:
                    8b:b5:50:7e:f0:1a:d2:ac:44:79:24:1d:87:d4:f4:
                    1c:1c:04:93:ca:25:c0:d7:8a:cb:6e:eb:5c:90:f3:
                    22:4e:5c:ce:46:09:83:c4:8b:a0:c1:cf:f1:cd:5a:
                    45:8a:62:c0:d1:6c:26:55:72:23:a1:14:02:54:70:
                    6c:12:f7:d4:df:27:69:b3:10:29:9f:77:07:b2:6d:
                    6c:c0:68:2e:30:df:90:1b:27:3f:78:19:d6:a7:96:
                    15:bc:85:7a:0f:9b:1e:d9:09:f9:73:85:18:60:54:
                    29:be:bd:3e:af:0b:5c:7d:6e:c4:f3:b5:e6:c7:99:
                    8c:c0:b5:8a:ec:ba:3f:5c:04:01:57:95:df:c1:7d:
                    a0:db:5b:d1:23:7d:02:6f:59:dc:2a:b2:46:d5:d3:
                    4e:3f:8c:d8:f3:01:1a:c2:04:fd:19:96:06:e1:5b:
                    e4:8d:92:80:ff:23:dd:70:8c:aa:f3:46:46:de:fb:
                    7a:f0:85:6f:f3:88:be:cf:5e:79:b7:7d:78:da:b4:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5A:10:BE:8D:1F:94:E6:34:74:95:1A:61:95:30:83:75:7B:34:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.210.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6f:0a:7e:de:0c:ab:24:7c:0d:c4:2b:4e:0b:09:c5:7c:c1:
         2a:4a:a8:ec:0c:78:65:cb:8d:16:49:87:08:b2:68:68:ce:d7:
         85:f7:02:dc:26:b2:02:d5:6c:95:ab:08:34:02:20:8d:f2:4e:
         bd:8e:9e:81:46:f6:82:8a:08:6a:bf:91:5b:cd:51:82:c4:99:
         fe:44:3d:14:ad:12:6f:42:4a:ae:83:87:17:62:fc:90:bd:cc:
         a4:66:cb:9b:c1:42:5a:b8:6c:e6:aa:88:c7:e6:4b:c7:b1:f6:
         83:97:4f:1f:b5:e9:a5:77:21:40:f0:f4:2b:8d:c3:5c:88:80:
         71:cc:ed:f6:57:2a:c3:3b:e0:8b:6e:d1:34:a9:f0:cf:9c:94:
         b3:cb:a3:71:87:1d:2b:19:e1:09:94:d2:84:0f:29:b6:0d:a6:
         30:06:bc:f8:49:88:cc:60:4f:a4:7a:a4:d8:31:e2:af:4e:f0:
         05:d6:13:ff:a2:f4:43:4b:2f:88:fb:0a:c0:04:d7:f2:f6:42:
         aa:77:1d:2e:64:f6:a7:33:99:1f:2f:05:90:b6:ee:87:bd:b8:
         b9:a6:26:aa:92:f2:b4:34:f7:21:8d:20:f3:65:53:5f:15:2e:
         cd:3c:78:25:25:85:ac:6e:dc:c4:ba:b4:cb:8c:41:c5:ea:62:
         19:2a:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:16 2024 by rpki-client on console-fra.rpki-client.org