Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ee9b9991-b08d-3f2f-b22f-8d57cc7bb5cb.roa
File:                     ee9b9991-b08d-3f2f-b22f-8d57cc7bb5cb.roa (raw, json)
Hash identifier:          w2qEJoxPv+2s2tu3x/iRARTuMQMKditUYOXr/dLMERQ=
Subject key identifier:   68:AF:EB:4E:56:35:DC:10:39:32:D7:B3:A5:5C:14:AC:59:A4:52:23
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F43285845496D5C9301F0F415B37FB700
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ee9b9991-b08d-3f2f-b22f-8d57cc7bb5cb.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     54702
IP address blocks:        205.196.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:5c:93:01:f0:f4:15:b3:7f:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=aac33663-5b46-491e-9f08-f7b58c87fc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:57:37:dd:fe:e9:3d:7f:08:15:18:b1:7f:
                    ce:fc:1c:0d:e2:b6:0b:2d:f6:c3:64:e7:83:89:f2:
                    8b:9d:fe:2a:34:44:e9:d5:68:8d:e3:c0:d7:b2:bf:
                    d9:df:ec:9a:f0:3e:e7:df:e4:cd:3a:12:35:56:a7:
                    93:45:61:4e:ae:2b:2f:cc:54:97:5d:44:e7:b6:e1:
                    64:f8:32:6b:c6:4f:88:05:36:16:e3:1e:73:76:87:
                    14:2c:27:7a:6b:ac:a7:ac:af:ad:cf:4a:27:af:dd:
                    14:91:9f:4d:31:52:e2:89:3d:55:a0:8c:63:a5:0b:
                    29:fe:ff:40:de:4a:67:72:64:1d:1e:d0:ce:69:7b:
                    fc:a6:57:d3:ca:6c:3e:d8:ca:5a:8e:0c:2f:21:b2:
                    32:0f:a3:52:0a:ad:f6:8a:59:5c:08:fd:02:d8:8c:
                    5e:2c:13:5d:0a:c5:06:bf:14:0a:75:23:94:29:13:
                    26:7b:0e:75:83:f6:04:0f:e1:c6:14:44:9b:bd:3e:
                    fb:23:9b:0a:a1:26:ab:f9:c8:08:da:1a:43:b3:8a:
                    0b:38:0a:87:ff:84:a7:96:c2:a9:76:82:78:27:ce:
                    94:3a:41:55:4f:54:37:9c:fd:db:9f:02:8d:47:2e:
                    c9:b8:b3:48:9e:7f:fc:c3:04:7b:df:82:42:a8:95:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AF:EB:4E:56:35:DC:10:39:32:D7:B3:A5:5C:14:AC:59:A4:52:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/ee9b9991-b08d-3f2f-b22f-8d57cc7bb5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:0f:38:50:ff:58:1d:05:35:65:3e:e4:15:cf:61:e5:07:
         81:af:53:19:cd:14:eb:02:4d:0a:2e:90:55:67:04:86:38:55:
         b4:99:ec:ba:86:f7:41:4f:f1:97:01:90:2d:d2:e6:63:94:04:
         40:83:18:55:39:1c:a6:53:c3:fd:cf:39:85:83:10:2a:02:d8:
         8c:02:98:c8:ea:a5:21:86:0e:86:e6:c2:5b:2d:d4:1a:08:e5:
         a4:11:d5:52:29:ae:26:3e:03:6f:11:d0:3c:7b:79:77:b5:72:
         72:19:fe:8a:b8:e2:c7:63:25:85:b3:74:a4:a3:d6:63:b0:83:
         36:f1:fd:f0:4e:53:20:5e:ea:44:d0:03:27:7f:a5:b4:76:46:
         bd:d1:17:ad:ae:c5:b5:07:c3:4a:ef:d7:bc:e1:f6:66:8a:d3:
         85:a8:42:f2:9d:b4:67:f4:c5:8d:72:f3:70:62:29:36:b2:94:
         68:23:76:da:85:26:eb:a5:8d:d0:3b:46:f4:07:ec:8b:04:48:
         95:8d:46:f0:a8:71:68:27:fa:14:d6:65:be:f8:5d:01:88:d0:
         04:d7:38:cb:e2:47:51:21:9e:d6:55:a9:c0:36:af:e3:78:fc:
         02:9d:24:6d:cc:44:f2:08:78:eb:af:ab:16:61:7a:c6:08:7a:
         98:e1:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 08:12:37 2024 by rpki-client on console-ams.rpki-client.org