Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa
File:                     f9734849-7012-30a9-be2d-be64e3d02034.roa (raw, json)
Hash identifier:          f3NfL84HQFKtgFHES4c/AL0EqSxmCJOaC3CBWhirchg=
Subject key identifier:   C8:F4:60:BC:52:78:23:41:B5:8C:1F:71:F7:78:DE:22:43:63:E3:BE
Certificate issuer:       /CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Certificate serial:       010D0C9F43285845F683D1EE6CABFBD8454E5E80
Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa
Signing time:             Thu 23 May 2024 01:00:26 +0000
ROA not before:           Thu 23 May 2024 01:00:26 +0000
ROA not after:            Wed 21 Aug 2024 01:00:26 +0000
asID:                     11758
IP address blocks:        204.29.12.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f6:83:d1:ee:6c:ab:fb:d8:45:4e:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e
        Validity
            Not Before: May 23 01:00:26 2024 GMT
            Not After : Aug 21 01:00:26 2024 GMT
        Subject: CN=653d8b2d-ff17-4d8b-8a28-edf5781f7f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:f1:52:a7:dc:df:b6:5f:8a:11:f6:b7:e6:
                    80:b1:85:5d:ac:ec:8f:bc:c8:10:39:4e:b8:14:53:
                    0f:b3:88:5b:38:fd:de:32:67:aa:a1:a0:40:af:80:
                    d0:7c:ee:be:53:1e:39:69:69:7d:79:0d:6d:d9:4c:
                    fe:d5:21:39:21:bb:53:b5:23:00:86:1d:30:4e:ea:
                    8f:fb:e0:27:70:ff:23:62:7a:78:50:d9:e0:06:c9:
                    5b:a0:74:a7:b5:b2:33:8c:0f:d4:7a:4b:31:56:21:
                    91:60:0e:69:64:8b:29:92:bc:18:b6:5f:b9:bc:2d:
                    3d:ef:91:b2:f0:56:1c:86:6a:8e:d5:75:d2:b2:2c:
                    5b:15:00:fe:fb:cc:9e:07:84:a7:f0:e5:9a:a9:96:
                    75:28:f3:63:cf:d4:d0:6d:b4:f9:e5:58:2d:bd:02:
                    6c:d7:57:d4:f7:cd:e0:6f:c4:2b:bd:b7:70:85:db:
                    1a:af:77:b7:5b:8f:ed:f7:62:32:92:aa:e2:3e:5b:
                    ef:3b:ec:72:5c:6f:a8:a1:a4:10:b5:42:17:d3:66:
                    d6:f7:75:49:3f:dd:c6:0d:9f:fd:4d:6d:36:96:f0:
                    38:dc:15:9e:40:bc:1a:56:26:19:88:a8:f3:2d:bc:
                    54:9e:e5:4d:28:2e:0c:9b:d9:86:83:1d:34:ac:fb:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F4:60:BC:52:78:23:41:B5:8C:1F:71:F7:78:DE:22:43:63:E3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/f9734849-7012-30a9-be2d-be64e3d02034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl

            X509v3 Authority Key Identifier:
                keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c7:ad:a1:84:7e:fe:11:b2:74:01:0c:ca:b5:a6:c7:81:b1:
         2b:5e:26:78:dd:dd:4c:ff:0a:03:cd:64:22:e7:a2:42:7f:f8:
         96:f6:36:02:69:74:17:f0:5c:03:ab:4f:fc:9a:89:65:71:21:
         29:a9:3f:24:e1:fe:f6:a4:26:cb:1a:7e:db:33:b6:28:23:22:
         7e:07:6c:ca:0c:54:d0:3a:7e:25:e9:c5:ff:10:0a:87:5a:53:
         dc:c0:8c:93:cf:e1:97:cb:40:d9:14:87:c3:a1:ae:a7:6f:52:
         37:c5:bc:08:37:0e:f1:6e:33:04:7b:88:6f:94:ae:e0:8c:30:
         5b:85:f5:0f:93:f3:4e:e5:d8:14:33:93:59:16:1a:6b:f0:b7:
         e6:4b:99:37:f0:ee:38:37:df:4f:e2:df:e4:47:31:ff:89:af:
         99:78:2a:93:aa:38:ab:71:4f:19:89:e2:f3:ab:97:bf:62:56:
         d0:7f:d6:1f:ee:9c:27:33:67:03:f0:64:4f:95:d8:b2:c5:47:
         ff:78:54:4e:50:a1:91:12:9e:5c:c7:fa:e8:b3:b9:b3:73:79:
         af:28:1a:39:ed:06:c8:d4:90:e8:6e:92:22:37:1b:a0:f7:0d:
         4c:05:c9:b9:11:59:76:e8:aa:d5:21:3c:6f:86:15:30:12:45:
         8c:1c:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:59:56 2024 by rpki-client on console-ams.rpki-client.org