Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa
File:                     2d96d3a5-670c-3a8a-91ab-668e000828c7.roa (raw, json)
Hash identifier:          LUpkw1ASJwn7yJ1913jqaI2+zFuAhFgPAfs/iZOvMI4=
Subject key identifier:   4E:FE:2C:AA:AB:F6:BF:91:9F:98:AD:D8:34:E2:13:C9:93:DA:5D:99
Certificate issuer:       /CN=eccad7f1-567f-47db-a323-ab03604703b0
Certificate serial:       010D0C9F4328584582A87B7F20AF563FB29C4AE0
Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     11281
IP address blocks:        204.13.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:7b:7f:20:af:56:3f:b2:9c:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=b77f9128-bb5b-48c0-8b37-96132b432537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:20:dc:bc:41:cc:33:83:5f:2c:83:64:51:
                    5e:58:79:e6:57:2f:bd:9b:b3:5c:9a:17:4f:e5:c7:
                    e3:ac:ec:b6:2f:a2:2c:79:53:a2:86:4a:87:33:e9:
                    43:3e:f2:6b:55:b5:94:7d:d5:00:c5:54:9e:2a:3b:
                    09:72:23:14:c6:d5:c3:47:88:54:35:a9:6e:e4:8c:
                    70:e2:35:1a:d2:ec:14:1d:68:e2:f9:7e:68:cf:25:
                    cc:bc:97:3b:ee:19:95:9c:ad:d0:7c:2a:8b:24:4b:
                    a0:f7:c1:4f:be:2c:b5:35:3b:15:71:76:a9:fe:ec:
                    10:12:53:d3:0a:a7:ea:07:c1:af:9c:ed:74:94:c7:
                    e4:6c:75:5f:88:cb:c3:2e:41:d1:66:ef:41:b1:73:
                    1b:a1:79:8b:ac:10:68:85:9f:5e:0b:80:58:de:3f:
                    d9:a3:2b:74:ab:27:35:9b:be:32:9e:7d:84:8d:db:
                    b4:c7:66:28:c5:8d:c2:26:3d:15:c2:ff:a0:11:0e:
                    05:50:42:43:2d:2a:ba:ea:38:40:68:04:5d:f9:ff:
                    3f:b3:3f:98:46:51:a5:8c:df:12:b0:55:95:45:eb:
                    a0:70:4e:4e:e0:55:b1:74:b7:df:fe:21:02:9d:a7:
                    41:34:e7:40:74:a2:f5:a3:68:53:3d:16:99:e7:db:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:2C:AA:AB:F6:BF:91:9F:98:AD:D8:34:E2:13:C9:93:DA:5D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:4b:f0:78:5d:ae:17:2f:41:14:e1:cf:fe:36:f4:16:2f:
         25:6f:b6:39:81:90:0d:57:f3:a5:7a:94:bc:1b:ba:ed:47:04:
         b3:58:91:84:d6:2e:43:57:9f:89:88:d5:ec:58:ce:1e:29:4e:
         c1:d3:47:9e:f3:5d:72:2b:74:57:88:22:a8:6d:a4:31:41:ef:
         13:aa:cf:e2:38:e7:ca:16:1a:b9:6d:72:2b:c9:42:5f:1b:14:
         f2:7f:82:b6:84:c4:95:b5:05:83:c8:e6:14:5f:e5:bc:84:ad:
         80:6a:3e:eb:13:e4:21:4e:91:80:c6:d7:42:cf:77:66:cf:27:
         e1:82:ed:70:44:81:60:74:c5:89:16:b2:24:e2:b6:42:18:8b:
         d8:0d:91:fa:90:5b:b0:57:f7:15:8d:0f:d8:35:23:37:fe:91:
         80:e6:7e:af:19:eb:05:35:2c:14:64:6f:e8:78:a2:7c:5f:d0:
         a3:41:7b:84:5c:54:1e:20:5e:c3:2b:c9:66:7a:99:0d:1f:b4:
         52:98:0f:83:73:38:b4:90:77:10:ea:ad:de:e5:1d:43:20:f6:
         dd:07:e1:85:3d:87:d0:93:08:ef:47:c2:ac:6a:eb:e6:7a:c0:
         10:3d:09:c4:4d:8f:e6:3d:ca:a2:41:4e:fa:0a:79:0a:e7:78:
         70:19:6b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:54:03 2024 by rpki-client on console-fra.rpki-client.org