Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa
File:                     5834bc55-35d7-3fe9-977a-8f2a30096757.roa (raw, json)
Hash identifier:          OHix73ItLbp9tHgJ+QxHVIl3DEaJyEaKwEyuYuiVR7U=
Subject key identifier:   13:F7:11:67:B7:30:B8:B7:A8:2A:EE:70:41:36:94:64:15:D3:1B:4E
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F43285845F51E82B1624B79055511F720
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     35950
IP address blocks:        204.156.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:82:b1:62:4b:79:05:55:11:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=1d003f57-87d3-4008-93fd-71487c858cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:33:8e:84:1f:0e:cb:60:31:fd:bb:84:2b:
                    f6:fa:c4:c0:36:c4:27:10:3b:d0:5e:91:e2:38:01:
                    e9:5b:1c:1c:f4:5b:16:6f:45:3c:db:cf:3d:ae:19:
                    7a:5c:ce:7f:42:44:7a:40:22:84:a8:71:db:23:6e:
                    37:7b:bb:06:5b:33:27:02:79:76:f0:69:8d:56:ba:
                    f8:b5:e3:ba:c7:d2:d6:e8:5a:96:99:5a:6a:13:3b:
                    2e:61:d7:1c:68:a9:d2:f4:fd:30:6b:00:59:ba:26:
                    49:33:9e:1e:82:43:88:09:8b:31:1f:6f:0f:23:ff:
                    d5:b1:57:56:8f:5d:bb:ed:ec:7e:7f:1e:a3:b3:3a:
                    64:8b:5c:80:c1:3f:6a:96:a2:32:c1:6e:4e:68:d9:
                    a7:b7:02:dd:3a:80:76:0b:fd:a1:ad:63:c9:e5:b9:
                    39:c7:88:94:7b:4a:2c:fe:c5:a4:03:01:5d:8f:a8:
                    fb:9f:35:9a:a2:42:9d:32:e6:45:c6:fe:16:70:67:
                    c4:0e:a2:2d:4d:6d:6a:07:cf:e4:3e:56:1e:8a:32:
                    85:b3:06:f2:ea:d5:aa:a9:cc:48:7c:94:ce:24:25:
                    08:c2:25:cc:d9:98:84:fd:a7:bd:6b:20:25:ec:44:
                    78:64:ad:f5:2e:84:f0:a4:30:45:1f:3a:8d:d2:a2:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F7:11:67:B7:30:B8:B7:A8:2A:EE:70:41:36:94:64:15:D3:1B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:d8:90:f7:ab:c0:9a:70:d9:4e:df:5e:45:92:46:b4:ee:
         6d:4b:35:d8:74:59:31:7c:c9:a0:d5:21:17:72:f9:47:5c:af:
         e4:f2:ca:62:89:d6:b9:06:0f:e3:0e:cb:a2:73:97:53:c8:26:
         13:61:44:6d:22:f5:10:97:fe:99:a5:5d:34:2a:0f:4c:c2:e7:
         2b:cf:0b:5e:61:ef:fa:ce:f7:1d:8a:19:b7:e2:5d:f8:a5:c4:
         1b:6c:a9:0c:a8:77:9c:95:ee:06:04:87:b7:eb:25:bc:17:e1:
         bb:af:a3:83:ee:e0:f2:e7:e1:5e:ed:23:42:f1:31:77:b8:11:
         0f:f3:0e:af:29:7e:37:f4:2d:3c:f5:89:9d:c2:cc:35:e9:ee:
         f0:b6:bd:dc:0f:c2:7d:28:85:0e:8b:e4:e2:2f:b9:6d:4a:a1:
         ac:bf:e7:64:d4:67:99:b7:03:7b:89:ce:68:04:ea:eb:a1:bf:
         43:e0:aa:0d:7f:af:c8:42:72:36:db:55:98:11:a6:d7:c4:cd:
         a7:eb:12:b6:15:25:f8:76:d3:42:5b:5d:e0:21:e8:e0:27:ac:
         1c:0e:61:49:27:44:b1:d7:7b:6a:09:43:05:9d:75:fd:7c:dd:
         85:e8:9a:3b:26:8c:6f:24:5d:14:39:fe:08:69:4e:0d:4b:e3:
         22:cb:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:28:09 2024 by rpki-client on console-ams.rpki-client.org