Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa
File:                     488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa (raw, json)
Hash identifier:          KuFsNFSocQuHMq7lA16FXA2Bljk27XFjGC5uWhpemq8=
Subject key identifier:   C7:B0:17:54:EF:F7:FD:4B:A1:02:FA:D2:27:FF:51:18:72:91:78:66
Certificate issuer:       /CN=86906b9d-26ff-4ce8-b900-62739db43657
Certificate serial:       010D0C9F432858452540461E545C7C39A5F13100
Authority key identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     6653
IP address blocks:        204.16.224.0/22 maxlen: 24
                          204.10.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:46:1e:54:5c:7c:39:a5:f1:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86906b9d-26ff-4ce8-b900-62739db43657
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=3309132b-2239-4019-b370-10aa4e7191e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:46:fb:da:58:ea:12:8d:21:05:04:f7:50:
                    bb:c1:b3:61:8c:86:c7:e4:bd:de:66:a6:05:75:58:
                    f1:66:4c:b6:51:5a:20:89:97:5f:5a:ef:4f:03:c3:
                    75:31:85:b1:75:3f:69:16:51:ab:3f:83:82:27:e1:
                    b5:01:4e:6d:e8:d8:35:c7:4f:3f:84:5f:88:7a:c6:
                    99:71:f0:64:de:b1:23:4d:ec:05:ed:21:51:e6:00:
                    1b:f3:ef:80:c8:6d:5c:40:40:76:ac:74:fd:ea:89:
                    b0:1c:3d:ba:10:82:d2:3e:02:41:ea:e0:ac:cc:45:
                    18:85:f2:5b:52:41:3d:17:58:60:30:6e:d3:81:20:
                    6e:fa:ae:0f:27:fb:6e:c9:ae:83:1e:8d:02:5f:c1:
                    e4:35:00:4a:8f:b7:40:9b:1e:9f:74:ca:62:6e:be:
                    c4:49:71:bd:01:c6:54:a3:6a:44:0e:0a:2e:59:b1:
                    ef:90:57:6c:da:4e:47:75:99:44:d2:05:3e:49:1c:
                    ae:fd:6a:a0:26:80:1c:a1:77:e7:a6:f2:23:78:c1:
                    05:0b:ff:82:a8:3e:bd:b4:0b:b7:16:9e:04:bf:f0:
                    80:e2:10:c8:9e:0b:99:5e:69:1b:c4:d6:64:4d:aa:
                    6d:a2:fc:80:69:81:8b:ee:0e:7f:e8:a3:0f:0b:4a:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:17:54:EF:F7:FD:4B:A1:02:FA:D2:27:FF:51:18:72:91:78:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.124.0/22
                  204.16.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:22:8f:f4:c0:87:cf:f6:a4:5e:1b:fa:f4:4a:31:38:cd:
         3e:93:27:3d:af:24:ed:52:27:24:d4:93:1b:4e:03:79:86:bf:
         05:33:f6:64:d9:ec:55:fd:63:a9:3b:de:42:88:f2:66:5f:ba:
         2c:b5:b4:9a:fe:ed:32:c3:3f:05:fd:ea:87:78:d5:d1:2d:fc:
         91:47:8a:29:73:f2:8e:81:2e:05:96:d1:87:50:3b:ad:fa:cd:
         ed:35:47:2c:4b:b2:93:0a:50:60:8f:48:8e:0c:f8:df:1b:b5:
         7c:68:92:0c:1f:73:8d:1d:85:37:96:28:47:8b:47:a3:e2:12:
         56:2d:b2:19:d0:67:21:a6:7f:73:e0:3e:24:4c:81:14:d9:49:
         b6:c1:61:f4:71:3e:56:84:56:ae:d4:e3:86:6e:dc:3a:06:be:
         b7:40:ec:96:14:b0:a0:d8:81:68:fc:bb:db:25:19:40:dd:f9:
         e6:9e:d2:17:d7:a6:d7:e4:cb:91:9a:c8:e0:d6:d9:b3:12:4b:
         73:f0:b8:de:80:f4:a6:e1:36:1b:48:04:59:61:bf:34:17:e7:
         01:04:77:05:3f:38:c1:94:bb:31:b1:bf:00:82:2e:50:e2:5d:
         b4:66:e4:80:d4:f0:3c:11:5a:41:45:d0:c2:6c:99:85:27:cb:
         cf:a1:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 10:17:11 2024 by rpki-client on console-ams.rpki-client.org