Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
File:                     459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa (raw, json)
Hash identifier:          roRGclAOTtEJoLgjW61gBHoCP9eKNtkf44pE4w2Tlfw=
Subject key identifier:   63:26:CF:AF:27:57:A8:E6:88:E6:92:DF:88:75:E7:52:37:F0:00:5F
Certificate issuer:       /CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Certificate serial:       010D0C9F43285844FB60013484D693208D5F7680
Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        204.122.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:01:34:84:d6:93:20:8d:5f:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=9fd772c0-dc5f-4011-b7bd-651d2ff32c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:42:c2:47:3e:a7:59:ab:9a:c8:dc:74:65:
                    d4:c8:3c:66:ee:18:18:34:a2:57:c2:23:dd:20:27:
                    a7:54:c7:78:8d:da:8c:2f:03:f6:2c:01:5c:89:01:
                    71:12:b5:a2:33:83:ec:0b:69:c9:45:f1:50:e9:41:
                    b6:a1:e1:75:90:74:e1:7d:df:da:e4:d5:ee:ed:c6:
                    9f:72:35:e5:89:0c:5c:9b:48:18:0f:93:b4:4d:1f:
                    cb:10:53:e4:e5:2a:cc:91:27:71:6d:7e:a6:87:a3:
                    1d:92:b4:78:bb:50:0d:6b:f8:44:06:b7:04:87:4b:
                    40:53:c4:a6:eb:1b:7a:3f:a7:ab:48:2f:bb:e2:42:
                    74:d6:42:55:74:98:75:53:6f:8c:aa:f3:4d:b9:c7:
                    a8:e2:ad:34:5b:29:9e:ca:4b:28:89:7b:34:48:87:
                    61:78:68:68:9a:21:b6:f8:b8:41:8f:f7:5e:65:13:
                    ae:d1:cd:3f:5e:ff:53:b8:23:ad:1c:f1:dc:a9:4d:
                    e6:fa:9d:f4:06:bf:5a:26:67:40:f5:5d:99:e2:27:
                    f6:01:6f:bb:66:b1:55:fa:e6:3e:43:04:a6:d0:6f:
                    94:8e:c5:33:3f:9f:46:fa:af:52:50:04:51:ee:22:
                    2f:32:d6:2f:1d:4b:2f:56:3b:c6:41:21:40:35:36:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:CF:AF:27:57:A8:E6:88:E6:92:DF:88:75:E7:52:37:F0:00:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl

            X509v3 Authority Key Identifier:
                keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.122.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:01:6e:2e:0f:a5:81:31:5c:ff:42:e4:00:4a:6a:16:ce:d5:
         24:12:80:2c:dc:1e:bc:f6:f8:92:1f:21:1a:23:83:71:7c:6b:
         5e:ae:66:ae:74:03:70:10:ab:33:6a:cb:94:ad:d8:f5:ad:78:
         f0:99:7f:3a:bd:df:76:b8:9e:00:9b:1e:40:61:ce:4f:10:1c:
         91:78:77:6f:c1:5a:ae:f8:a0:4b:65:f3:5a:f0:f1:a1:c0:4a:
         24:b9:9a:34:4b:f2:ca:35:b1:93:a2:aa:72:65:ff:70:59:b8:
         e0:54:7a:04:0a:32:3e:69:7b:74:b6:66:1c:cc:53:b4:d9:f4:
         7f:09:c6:f5:4f:5f:a6:1d:2d:16:09:70:1f:68:e1:03:27:8e:
         a0:9d:85:70:f0:38:fb:f6:4e:28:38:a3:b9:a7:f3:88:83:3d:
         eb:89:3d:53:a9:21:dd:bf:ab:fc:39:f4:7e:0a:56:00:98:1c:
         cb:d0:99:a7:8d:57:ba:ed:46:1e:68:9c:ca:f6:8b:b8:56:b6:
         9c:4b:b3:ee:2e:b1:9e:a2:39:3a:5c:2d:2a:a7:bd:df:07:a4:
         bb:53:f1:c0:81:79:0b:64:c2:c5:2a:e0:9f:e4:72:e6:39:7c:
         d6:b0:04:bb:61:b5:07:55:fb:4b:af:f6:5f:64:a8:d3:e7:ee:
         cc:ad:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:49:47 2024 by rpki-client on console-fra.rpki-client.org