Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa
File:                     2d96d3a5-670c-3a8a-91ab-668e000828c7.roa (raw, json)
Hash identifier:          LanQNOopqyV5Rg/6/QOQi9feuCWsU/kRtpJyYfOBXyY=
Subject key identifier:   7B:7A:6D:A5:77:7C:EE:30:8B:4F:85:72:FB:80:99:B8:D5:AC:C3:41
Certificate issuer:       /CN=eccad7f1-567f-47db-a323-ab03604703b0
Certificate serial:       010D0C9F4328584742BB3A6C5C38236420965700
Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     11281
IP address blocks:        204.13.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:3a:6c:5c:38:23:64:20:96:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=18221707-c5d1-4627-b63a-761e4b3fe85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:e3:65:ed:4e:55:64:96:cb:32:0f:0d:13:
                    f5:dc:2d:df:f0:54:56:89:d7:22:f4:e6:ce:99:cf:
                    de:61:6c:ad:ee:23:83:b4:bb:b4:c2:39:65:6b:d9:
                    ba:d6:03:45:b2:84:df:eb:1d:fd:e4:46:3e:3c:19:
                    3d:06:5c:09:9b:38:6b:24:81:13:33:cf:12:93:87:
                    c4:eb:ae:1c:1b:b8:1f:40:a4:7e:80:f1:df:f7:32:
                    a3:da:19:73:b1:7d:12:77:30:79:e0:c9:dd:3c:f7:
                    de:0d:63:76:5b:21:f5:e4:1e:b9:6f:63:a1:78:8a:
                    fb:2b:bf:a0:ca:ba:2b:68:4f:9a:ae:95:b2:5e:8b:
                    15:83:72:a7:ee:60:fe:a3:8c:53:c1:1a:80:27:21:
                    af:b7:83:08:2f:42:e3:60:71:9d:49:f9:fd:8f:89:
                    96:61:db:a6:b5:af:d8:93:1f:ec:0d:e6:98:3d:71:
                    3b:87:f1:6d:ce:a3:c0:3c:06:a3:64:28:96:67:3d:
                    fc:c6:2f:05:20:ca:9c:07:14:95:2a:70:8b:db:3f:
                    8a:b5:0a:03:5a:f2:e1:0b:85:d2:3b:26:f5:1f:14:
                    78:a3:58:22:19:9c:45:24:d7:57:42:fe:93:d4:f4:
                    db:0a:56:63:fa:92:0c:8f:5a:8a:6a:b4:be:7b:36:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:6D:A5:77:7C:EE:30:8B:4F:85:72:FB:80:99:B8:D5:AC:C3:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:9f:ab:4b:24:70:64:31:cb:76:af:a5:85:ae:30:2b:e3:
         a4:6d:01:3e:14:ae:3f:38:53:86:45:87:a2:19:85:44:e9:e2:
         2d:17:ac:11:50:0c:33:30:c8:d3:8d:a7:20:fa:8c:c5:ee:d3:
         90:e8:b3:62:f7:1b:01:f0:3f:ca:4a:09:7d:e9:ed:55:50:63:
         72:63:39:8a:0a:86:6f:b6:93:f9:1b:48:bf:e9:66:7f:b5:49:
         90:ec:a6:8e:78:2e:84:4c:b6:93:4d:83:f3:2f:15:ea:55:5c:
         b4:9a:c5:e8:7c:f1:d6:ca:b7:d2:b3:84:86:04:10:bc:19:22:
         81:c2:14:ee:e9:ca:ed:c8:3f:0e:3d:01:84:2c:f7:ec:17:70:
         ac:d6:08:3f:99:3b:58:54:bb:86:de:55:ae:e6:48:58:5c:50:
         e6:f0:6e:2d:b6:a9:c3:27:92:b5:ba:65:18:f2:e1:ca:6d:6b:
         02:09:74:23:f3:a0:7b:8c:e8:8c:da:c8:33:79:f0:0a:e4:51:
         c7:cb:a6:e7:77:a1:e9:18:5d:cf:d7:09:fb:3b:86:d9:8d:3d:
         78:af:d0:2b:d9:27:e7:6e:b3:d9:82:1a:80:a1:e2:07:39:da:
         61:1d:c3:70:da:e0:0f:63:10:84:13:b2:0a:56:6c:24:18:b3:
         f0:8a:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org