Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa
File:                     942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa (raw, json)
Hash identifier:          FLX0pLyQYtTBnPTP54jouJ1+S7ZV60m8yQUhA5cHG9A=
Subject key identifier:   ED:1A:B2:E5:BA:D4:5D:05:5B:CD:82:EC:36:10:2F:41:21:F3:54:DB
Certificate issuer:       /CN=0d51e326-4804-4f59-a629-20153f71b7fe
Certificate serial:       010D0C9F43285844F0354646B43795B76AEB8F80
Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        204.239.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:46:46:b4:37:95:b7:6a:eb:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=2520abd5-26a8-4834-9c53-29c23b94c54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:b8:16:64:49:00:1b:7d:3d:b5:dc:ed:cf:
                    ed:57:2e:3f:73:28:fc:01:51:89:d8:a1:d6:a5:fa:
                    06:4a:68:41:30:96:f1:1f:b1:17:4d:ec:7a:55:51:
                    27:ad:8f:10:04:e6:bf:a3:f0:7d:47:84:2b:3f:77:
                    e3:69:b6:ac:fa:02:2b:61:28:68:ee:5e:e8:af:c4:
                    df:03:91:b8:70:6b:dd:b6:cc:1d:82:cf:2e:fa:8e:
                    11:46:bf:12:39:b0:4f:d6:d7:74:86:18:41:b6:f2:
                    3d:f2:6d:46:a4:5c:ef:37:14:23:3b:8d:a3:31:21:
                    c2:1d:93:b9:5f:e4:fb:1f:6f:71:35:cb:db:16:cd:
                    42:35:74:d9:e9:50:fa:88:9b:4f:59:db:7b:21:e6:
                    51:35:be:b0:ee:3f:56:d9:47:b6:c6:d5:d9:7b:9d:
                    5e:4d:7e:4a:39:a0:84:18:f0:f8:1a:27:10:b3:d6:
                    b8:0c:c5:0e:af:71:ce:06:fa:b6:a3:07:b9:7f:86:
                    04:2b:45:21:7e:f3:dd:1e:1d:03:3b:ea:0f:3f:77:
                    40:33:f5:3d:25:fd:75:a2:c7:c4:6c:ce:8a:de:ef:
                    7e:53:86:ce:30:2a:99:25:76:a5:cc:ef:e2:33:45:
                    97:02:85:68:67:78:83:af:4f:71:d3:ba:86:99:0a:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1A:B2:E5:BA:D4:5D:05:5B:CD:82:EC:36:10:2F:41:21:F3:54:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:f3:fe:1b:29:8c:57:4d:ad:77:64:61:3e:71:25:fc:35:
         f1:18:fb:df:ce:ae:99:fc:34:54:fb:70:0b:23:e0:2f:10:df:
         26:36:28:9a:82:fe:11:1f:0a:06:35:f1:4e:09:84:10:5e:85:
         13:8a:0b:ec:53:af:b8:b2:55:56:f6:c5:03:e7:08:eb:0c:46:
         11:91:fc:9b:d0:d7:be:c2:fb:67:a5:ed:22:95:70:f8:16:ae:
         9b:0b:d3:f5:16:f7:19:8a:1b:db:b5:dd:a3:f4:04:81:ce:54:
         f8:08:5b:ce:d3:5e:29:0c:c9:5d:c6:78:52:30:f8:bb:e1:5b:
         91:fe:2b:21:f1:fe:89:16:ed:37:4b:1b:04:d3:1f:41:cf:b7:
         04:b0:61:a7:4b:85:d3:14:34:35:ca:5c:ec:f5:90:d9:93:78:
         a4:53:f5:d3:8c:39:f4:5e:e0:dc:6b:fd:58:2c:5d:51:ee:c6:
         2d:1a:24:1a:3a:91:89:a2:40:41:cb:73:a7:3e:d9:7c:2c:1d:
         19:50:b1:59:9f:34:14:3e:ec:a7:09:36:7b:85:66:9c:35:bb:
         f2:4b:c5:52:ed:7f:fa:b4:2e:27:44:b4:fc:09:f5:6f:e8:2e:
         4a:90:40:bb:65:53:48:ba:57:22:fd:b7:e6:a4:f9:e4:d9:11:
         12:eb:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:44 2024 by rpki-client on console-fra.rpki-client.org