Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/dd3f15e4-628e-32a4-b35c-957c51f9097e.roa
File:                     dd3f15e4-628e-32a4-b35c-957c51f9097e.roa (raw, json)
Hash identifier:          /Gg0CT5YkKrRL8iwtIV81RpVzng/2886aA6R6SepzJA=
Subject key identifier:   88:90:A2:61:02:CE:37:4C:CC:B3:5F:95:0B:02:38:BA:E3:91:41:B1
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F43285845EF893165EFA8B2B64552F0C0
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/dd3f15e4-628e-32a4-b35c-957c51f9097e.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     31919
IP address blocks:        204.10.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:31:65:ef:a8:b2:b6:45:52:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=34f24ae0-93f5-4a26-8f2a-00b7ff95ea75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:98:f9:d4:96:8e:2e:bd:af:fb:84:f3:6b:
                    57:29:6c:5b:61:5c:d0:31:c8:ac:28:12:58:0f:fa:
                    86:81:eb:bf:2b:87:cc:9d:8f:52:32:79:a3:fa:24:
                    ae:23:ec:cd:5c:80:30:76:40:9b:0e:bf:b7:38:e6:
                    8c:70:58:78:d4:a4:85:bf:b6:6c:4f:51:04:74:79:
                    f9:77:12:60:78:6b:68:f1:30:16:6a:c4:3b:82:f2:
                    d9:94:d0:03:e3:5a:d2:bb:78:0b:a2:87:23:7d:df:
                    c1:fb:7f:bd:21:37:04:ba:f6:27:74:5d:a0:f8:d0:
                    b1:be:a8:93:d4:d3:d5:b6:5c:d9:8e:cd:02:65:15:
                    2d:6c:a1:c1:84:a8:3c:94:6a:3d:9c:1d:9b:a6:4b:
                    06:c0:3d:b1:0d:a4:ae:73:31:59:97:f6:9e:2b:8d:
                    3e:7b:7d:18:9b:2d:32:78:55:7b:a4:0b:8b:0e:2d:
                    63:71:df:63:66:1a:01:40:0f:3a:9d:a0:13:b5:67:
                    30:a2:b1:08:76:1e:e7:18:97:35:1d:08:e9:db:b3:
                    c9:e8:6e:48:bb:cf:9a:fa:f3:24:18:72:a0:dc:24:
                    83:52:53:0a:5b:0f:64:c6:1b:c7:3a:d2:4a:f1:2a:
                    88:20:ad:40:41:a0:12:c7:57:78:d2:ef:b0:29:00:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:90:A2:61:02:CE:37:4C:CC:B3:5F:95:0B:02:38:BA:E3:91:41:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/dd3f15e4-628e-32a4-b35c-957c51f9097e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:18:01:7d:73:1e:40:c8:f6:e6:20:ed:e3:eb:59:b6:54:43:
         ee:5c:e8:b1:8b:a3:7b:8c:f8:cb:79:c1:e1:ae:2b:31:f8:b8:
         c7:06:4c:90:99:67:32:a7:32:6f:d0:db:00:0f:2e:03:1f:a2:
         c2:dd:f9:3a:87:2c:b4:87:ad:a5:e1:64:2c:73:09:4a:d1:ca:
         c3:b8:d6:87:02:25:73:40:8f:9d:02:8b:3b:3d:bc:bd:3c:39:
         55:c3:c8:ef:94:f9:88:99:53:9a:47:1b:da:3d:b3:90:6d:d8:
         96:c1:fd:8a:4c:08:30:a9:ba:77:e0:f1:24:5c:0d:1d:3d:e6:
         ba:4f:d8:83:7f:b1:3a:1d:06:1a:86:24:b0:a8:e4:99:cd:f6:
         2d:50:64:28:26:5d:13:62:6e:c4:b8:a2:a4:2a:62:ea:6c:65:
         9b:36:6b:fe:38:c4:80:e5:c9:a6:b6:d8:42:69:7c:29:8d:6d:
         62:7a:2e:26:5a:02:19:fa:b6:c7:1a:28:ac:38:e4:ec:ae:c9:
         32:39:c6:4b:0b:4a:d9:c2:7e:57:b8:0f:c2:6d:9f:ff:83:8b:
         75:1e:29:a2:72:8d:d1:1d:93:20:d7:d0:55:b5:0d:d2:a5:a7:
         07:7e:21:2f:7a:c1:82:26:26:36:67:91:e9:f6:42:6f:b3:ea:
         96:a2:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:40:49 2024 by rpki-client on console-fra.rpki-client.org