Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4021344-cc22-3018-ace9-7c208368bc79.roa
File:                     d4021344-cc22-3018-ace9-7c208368bc79.roa (raw, json)
Hash identifier:          KrSVvRfxtvqD6OZbAZdoIBO7jXbkzqde5V/SimR4z2s=
Subject key identifier:   13:1D:E2:15:D2:7E:FA:C1:2A:BE:87:0E:87:B4:5F:20:F9:F2:7B:28
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E3AB5E12B777F3327EE80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4021344-cc22-3018-ace9-7c208368bc79.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     3456
IP address blocks:        204.29.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:3a:b5:e1:2b:77:7f:33:27:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=a134bf6d-a441-4ad4-a9b4-08e0e64d3438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:bf:9a:5e:24:79:44:41:f3:4d:65:d5:e1:
                    3f:31:58:6a:20:57:10:57:7e:50:cb:34:9f:2b:02:
                    c0:a5:85:86:34:b8:e9:76:22:8d:98:28:76:56:c9:
                    f6:dd:2b:b9:6d:92:2c:6c:a3:fb:ac:e3:f5:97:ce:
                    eb:6f:e1:ff:5f:02:04:98:05:df:e6:28:6b:f0:5c:
                    6f:76:64:07:0f:96:7c:01:e3:da:3e:e2:ba:a7:7f:
                    9c:cb:61:fd:27:44:be:0a:0d:9e:57:48:9d:33:b2:
                    5d:ac:2a:85:ec:05:69:ce:0b:37:76:4e:d7:11:62:
                    ba:ba:ee:e3:ba:1e:59:cf:7f:96:aa:f7:36:00:b5:
                    6f:04:b1:8b:d6:05:87:bd:81:98:f2:3d:f6:5c:31:
                    a5:95:13:50:14:8b:47:b0:c1:3b:7e:a7:d8:f8:14:
                    60:f9:f1:d5:f9:89:55:57:ca:34:09:fc:14:3d:c3:
                    3d:b4:76:5f:a2:df:78:15:6e:db:fb:47:6d:a3:2c:
                    bb:0a:e5:c2:1c:c4:15:42:f5:a5:08:83:8f:3d:65:
                    71:9a:93:4c:96:39:be:77:3a:18:d8:93:81:ff:64:
                    5c:76:a3:de:b7:1d:0f:ed:d3:11:a6:d9:08:5e:26:
                    af:8b:cf:2f:9a:40:55:9a:f9:e2:96:c8:a4:df:99:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:E2:15:D2:7E:FA:C1:2A:BE:87:0E:87:B4:5F:20:F9:F2:7B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4021344-cc22-3018-ace9-7c208368bc79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:53:8c:e4:4a:4b:e2:d6:5c:86:ae:db:ae:71:e0:2f:ac:21:
         80:8f:c9:f4:87:ef:ef:5a:54:a1:f6:34:b7:2a:18:47:47:f1:
         34:ba:6c:84:1d:4e:28:3e:90:1f:42:54:01:56:a5:bb:d0:a1:
         53:5f:13:b7:48:e4:ad:43:94:31:15:d3:bd:a1:0e:a8:2a:83:
         72:7e:44:de:77:bb:13:48:40:6c:a8:e3:f8:48:d8:c0:40:93:
         12:ec:4d:4e:23:be:81:c6:25:46:ce:9e:c5:1d:d6:ac:46:db:
         50:99:3b:2d:12:09:e3:78:7a:20:94:6d:bc:3c:2d:5f:85:a3:
         d7:b8:c6:e4:d2:1a:43:8a:9a:bd:e9:10:14:93:41:13:bb:0a:
         7b:6d:8b:b3:e6:04:b2:55:31:1d:b5:1f:5b:d7:7b:16:46:f0:
         39:cd:4b:7f:40:30:37:c0:64:e2:a0:c3:e4:22:c7:58:a6:a7:
         c2:37:86:03:fd:81:f1:77:85:66:22:0b:a0:8f:62:fc:b5:0a:
         aa:5a:db:08:3e:de:a5:ae:ba:f2:17:3f:f9:92:9c:32:ec:96:
         d1:d3:37:33:b6:23:19:b8:db:f9:35:e1:1f:93:a2:d4:f8:f4:
         0d:05:02:e8:b2:32:13:2a:c0:82:84:3c:75:29:be:24:0a:26:
         af:af:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:30 2024 by rpki-client on console-fra.rpki-client.org