Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/d4177b93-8352-38bb-8fc5-d024efbd33c0.roa
File:                     d4177b93-8352-38bb-8fc5-d024efbd33c0.roa (raw, json)
Hash identifier:          n8aE6v5SmTxltNvg1enQOM1HH1h8ah9NcBxgdxAsYJo=
Subject key identifier:   F2:21:6E:2A:6C:B6:ED:CA:F3:E6:F4:3A:80:6E:FB:C8:2E:5A:B3:CA
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F43285845F253EF5B5C736CF466A1C740
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/d4177b93-8352-38bb-8fc5-d024efbd33c0.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     35950
IP address blocks:        204.156.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:ef:5b:5c:73:6c:f4:66:a1:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=08d1721c-ae28-4a8d-aea5-a3c0bcf3f8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:60:80:35:af:27:63:7b:79:dc:f6:49:39:03:
                    16:34:bd:17:77:c3:b3:98:14:76:13:15:45:5a:b5:
                    93:71:39:25:69:29:f9:1b:e1:99:ad:22:60:67:5e:
                    6f:9f:b3:ac:ac:a7:d3:75:a0:ab:2e:98:bf:95:44:
                    fd:0d:2b:e6:14:84:37:ee:d7:54:89:1d:0c:3b:45:
                    a5:27:91:87:32:a7:6c:84:aa:3c:cf:61:fb:db:a5:
                    13:e8:91:d2:12:a4:11:43:ff:ed:d4:1a:c4:54:68:
                    27:fe:73:e7:36:fb:29:19:ca:4f:fe:44:71:47:70:
                    be:65:b0:25:6a:c9:d3:d3:c6:6a:a5:f6:a5:5c:46:
                    7b:11:96:46:04:e2:8b:ff:b3:eb:0f:eb:49:aa:d3:
                    ac:8c:0b:71:af:e7:d2:08:b9:69:08:cd:98:d7:b7:
                    7d:b2:16:87:d9:6c:11:c5:f1:25:95:80:69:42:6b:
                    24:67:23:e1:cd:27:91:ae:02:33:7c:05:82:58:62:
                    63:c1:7c:23:2d:d8:df:a7:c5:4c:87:26:df:ac:4d:
                    52:e4:8b:0f:dd:8d:4b:0d:ab:e4:5b:0d:52:a5:50:
                    c3:8a:ed:8e:16:60:22:6f:d5:b5:03:d3:fb:c2:57:
                    8a:f4:39:69:46:0e:7a:af:6a:05:ba:d9:fe:77:d5:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:6E:2A:6C:B6:ED:CA:F3:E6:F4:3A:80:6E:FB:C8:2E:5A:B3:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/d4177b93-8352-38bb-8fc5-d024efbd33c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8d:6b:5c:9f:8c:24:de:8b:a3:ac:2f:f5:1d:b8:f9:66:e6:
         87:c9:7e:df:37:5e:e7:9f:57:89:78:93:0e:17:86:c3:ef:4a:
         85:00:d8:a1:13:9e:d4:d5:d5:df:c0:15:8c:51:72:51:91:9b:
         cc:59:bf:5d:fe:31:03:a1:bd:90:f6:21:8f:c8:fc:80:14:51:
         c0:a4:90:41:80:b7:85:3e:26:ee:52:94:d0:29:de:b7:9a:8e:
         9c:60:3a:7b:de:67:d8:61:33:40:a2:fa:15:a1:6f:b2:53:ee:
         74:b6:ff:e7:de:2b:b6:48:de:17:20:45:88:ab:8b:3a:51:4b:
         f9:08:7e:6d:2b:01:9a:8b:6e:8f:b2:c0:11:ee:fd:13:df:0d:
         a5:2d:7d:1d:42:85:11:7a:df:05:9a:37:c7:72:84:49:08:1e:
         75:19:5a:eb:80:83:85:53:e5:a3:6b:b7:64:6e:46:fd:ed:0b:
         39:0e:1d:9e:26:9b:87:55:67:46:b6:d9:9d:e5:93:f5:59:51:
         34:89:a6:6b:19:f7:25:4c:bc:85:33:9a:8f:08:7d:a1:a5:44:
         84:ee:e1:21:4c:e1:1e:2a:c4:6f:da:97:13:d6:6b:30:a7:7f:
         17:c4:60:dc:20:46:6f:9f:7f:0c:35:d2:59:b7:6c:04:75:46:
         b7:31:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:27:05 2024 by rpki-client on console-fra.rpki-client.org