Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa
File:                     caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa (raw, json)
Hash identifier:          T3beY3MA6zcVyuscDtSDfqaS15BdFV6UvvboP/0JxlA=
Subject key identifier:   59:BD:5A:13:73:F8:C5:6A:7D:43:CC:13:6E:82:19:DC:2D:FA:4E:90
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285845F94E76AEAC804A1208778200
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa
Signing time:             Fri 24 May 2024 01:00:25 +0000
ROA not before:           Fri 24 May 2024 01:00:25 +0000
ROA not after:            Thu 22 Aug 2024 01:00:25 +0000
asID:                     26480
IP address blocks:        204.19.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f9:4e:76:ae:ac:80:4a:12:08:77:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: May 24 01:00:25 2024 GMT
            Not After : Aug 22 01:00:25 2024 GMT
        Subject: CN=39d51029-8da8-4b81-81ef-b62d5a86fa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:fd:ee:f0:d0:1c:d5:a2:a4:1c:7e:65:b9:
                    37:4d:94:c8:23:0c:cc:e6:52:b9:6c:e5:ef:79:f3:
                    17:85:9d:ca:47:7b:d0:21:02:7b:b5:ab:bc:bc:22:
                    f3:93:4a:a5:8d:da:47:ed:2b:29:95:53:88:14:ef:
                    af:24:b9:f3:29:d1:19:f4:c6:10:29:36:75:8d:a1:
                    d2:25:67:fe:f2:ef:4d:6c:2c:18:77:f3:81:74:de:
                    f3:51:e2:58:d2:4e:97:82:ba:6e:12:dd:39:65:6c:
                    b3:0e:ac:d7:d3:f4:a1:42:88:24:93:b2:89:a9:5d:
                    d0:3e:0b:36:be:86:64:82:50:99:f8:b4:c9:f3:d7:
                    f7:f4:6f:f9:71:46:61:51:0f:0d:33:38:62:7d:26:
                    23:4b:ff:17:ae:47:96:e0:41:b7:a9:aa:f7:e0:59:
                    44:5d:5b:b0:3d:26:a9:26:6b:51:e8:ac:86:74:87:
                    11:c5:3a:52:92:0e:28:63:58:e2:d3:ab:dc:5e:fa:
                    d3:0f:f0:cc:bb:78:71:e9:1d:1e:8f:08:6f:7f:3c:
                    33:aa:7b:94:9e:82:ac:62:db:2f:87:5e:b3:82:7d:
                    ed:97:68:8e:46:a9:6f:ef:8b:99:a6:c9:cf:ea:35:
                    9e:d0:d1:18:e9:0c:f3:6f:6a:65:d8:29:97:b2:c7:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:5A:13:73:F8:C5:6A:7D:43:CC:13:6E:82:19:DC:2D:FA:4E:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:56:3c:23:50:57:8a:29:f5:02:2f:22:c4:6f:f0:18:28:
         08:f1:67:bc:89:01:c3:99:60:5f:81:bc:c5:3c:2d:29:cd:1d:
         93:17:42:57:72:09:48:e3:4a:33:80:7e:9c:e5:0e:6e:72:3d:
         ee:22:2b:ba:b0:98:ea:e2:6e:38:d4:b7:b6:fa:0a:4d:0f:e3:
         d6:f5:ab:a9:4b:56:84:44:2b:dc:64:af:cc:55:e5:d2:60:d9:
         b8:22:ef:f1:39:a1:95:27:fe:99:97:dc:f0:cc:9c:b4:60:9e:
         4f:4b:ff:e6:10:ff:3a:6e:fb:b4:c9:2e:3d:ad:91:eb:9e:7f:
         9f:f8:a0:09:f9:7a:59:93:34:c9:6d:27:e0:90:32:bf:5c:b8:
         7e:8f:28:27:5b:42:06:fb:7e:a4:34:a6:4d:75:9d:fa:4a:0f:
         16:e2:11:f1:22:a6:9a:87:34:ab:1d:fb:29:04:25:fa:96:84:
         fb:b9:32:27:45:4f:55:ee:37:d3:8e:c9:e9:48:3b:d6:70:a2:
         82:3f:19:6e:eb:76:80:ba:ba:7d:8d:c1:09:02:40:25:ab:5b:
         45:d7:21:90:fb:a2:a8:61:ee:95:d3:0a:70:4c:2f:8b:f3:ae:
         cc:cb:ad:c0:c8:4f:79:df:43:c1:57:38:48:ac:55:df:64:07:
         db:75:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 21:15:00 2024 by rpki-client on console-ams.rpki-client.org