Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/cf15075b-b74c-3f4e-accc-d53935dce396.roa
File:                     cf15075b-b74c-3f4e-accc-d53935dce396.roa (raw, json)
Hash identifier:          B6AC1Q5oKvBrI41GZmY06pDqOmgDJgMMqA25dAxlrvY=
Subject key identifier:   21:C4:F3:20:DB:C3:15:CB:0A:61:2C:26:25:55:01:15:8C:27:59:26
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F43285845AB234F833D5E5ED1C25F3580
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/cf15075b-b74c-3f4e-accc-d53935dce396.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     64243
IP address blocks:        205.213.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:4f:83:3d:5e:5e:d1:c2:5f:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=6b333731-ac83-4d6c-b2c9-fc3ce0a09f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4e:67:ed:a4:e4:7b:91:7f:b9:2a:71:6a:7e:
                    34:94:c1:ee:31:9b:43:e9:de:b2:95:c2:9c:f4:e0:
                    c3:bd:ff:6c:e9:2b:f6:9b:1e:8c:c6:36:9d:67:4a:
                    e1:0b:15:30:7c:bb:b5:72:60:14:aa:ef:a2:16:89:
                    1f:7b:15:a2:0c:24:88:05:f7:72:ed:d6:f3:39:83:
                    ff:07:10:d8:b4:a3:98:67:40:e0:6a:11:4d:5b:9c:
                    dc:19:3b:67:3b:dc:27:82:37:39:18:84:8a:ec:ea:
                    e5:8f:5d:9b:91:81:93:37:a3:40:c8:5c:39:3b:1c:
                    12:6b:bf:28:6b:0f:de:e6:a1:f8:d2:b3:56:be:6f:
                    b8:1b:d2:84:59:fa:7f:10:1e:1b:b4:38:f6:65:42:
                    f5:a6:e0:8c:7e:98:8a:a4:1f:dc:28:8c:0c:88:c2:
                    d3:24:a7:bf:b5:bd:20:bf:a0:08:80:23:f2:7f:f2:
                    35:61:bd:59:c2:43:d7:17:d4:45:3d:f7:a1:ec:62:
                    a2:8d:ac:2c:da:a5:23:cb:9e:e0:98:bc:fa:1e:81:
                    f8:c9:f7:50:fe:3b:43:65:12:22:3b:20:39:ba:fc:
                    e8:4b:21:63:2b:3c:e2:f5:42:4a:23:20:0c:0b:9c:
                    84:09:45:d2:25:34:93:ce:a3:05:2d:68:51:82:6d:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C4:F3:20:DB:C3:15:CB:0A:61:2C:26:25:55:01:15:8C:27:59:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/cf15075b-b74c-3f4e-accc-d53935dce396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:51:de:1b:f4:3f:85:fd:7b:5f:f6:ee:c4:92:26:ed:42:a2:
         ae:ba:13:eb:a1:b1:1f:70:af:b8:63:75:3e:80:09:17:2a:62:
         48:7b:b5:8f:79:8c:25:19:82:df:f8:ff:47:1b:b3:b0:c5:32:
         35:2a:98:6d:e4:2b:89:84:17:b9:52:81:16:85:62:23:f9:c8:
         69:4c:97:0d:6a:8f:e3:ed:09:bd:c8:9a:c9:e8:a9:3e:bb:f8:
         55:d3:db:cc:3a:fd:d6:08:b3:66:b8:e2:b7:8d:d1:c0:55:d0:
         fb:32:28:a7:71:de:9f:16:0c:d5:98:37:04:3a:dd:a0:69:28:
         35:03:a5:53:5b:67:09:3c:32:e8:d8:bb:2a:e9:7b:80:6f:67:
         6e:53:59:11:ff:20:f3:a1:f9:d7:d5:84:63:3a:5d:a7:31:dc:
         16:56:13:b9:56:f2:bc:a6:3e:19:e7:77:bf:b5:24:67:87:8e:
         e3:a7:9b:3a:8f:a3:d3:57:7f:f9:aa:40:8d:50:31:13:cb:76:
         78:c4:b8:58:8f:9d:8f:62:95:eb:01:8a:8b:86:db:89:c5:ff:
         32:68:c4:58:75:28:3c:8c:c2:80:fc:4b:04:07:8b:2a:22:a3:
         a5:6b:f9:f9:89:33:9b:9b:05:c3:15:60:8e:fa:a0:7c:a8:d9:
         00:64:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:56:26 2024 by rpki-client on console-fra.rpki-client.org