Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/94faa8af-ce01-3f05-9cea-38558aaec61f.roa
File:                     94faa8af-ce01-3f05-9cea-38558aaec61f.roa (raw, json)
Hash identifier:          35SjLFbXGRalHDZp+ZyhhRTfP5jDRCNxgYfLKQIoXk4=
Subject key identifier:   AB:FD:75:24:80:AA:F6:9D:7E:76:BA:B0:51:F3:00:30:DB:12:7A:18
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F432858455498232A2CF02FD6A3127690
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/94faa8af-ce01-3f05-9cea-38558aaec61f.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        204.194.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:23:2a:2c:f0:2f:d6:a3:12:76:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=f72f727a-6255-491d-af53-9020a6680b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:d2:2f:dc:6b:cc:b4:89:fb:31:55:61:bd:
                    93:8e:f5:e1:ba:65:2d:5c:5e:18:14:5f:b5:43:28:
                    28:42:01:2b:7a:53:8e:92:c5:7c:44:98:40:d9:55:
                    ee:46:fe:85:d8:4e:da:eb:7e:a9:75:6a:28:33:75:
                    07:63:3d:ee:ba:6b:f2:42:d6:a7:58:4a:49:09:25:
                    96:9b:0b:2c:f6:da:da:fc:25:40:03:3a:18:0d:1b:
                    0c:f0:08:d2:6b:15:0f:72:b3:86:9a:90:72:f8:1b:
                    22:f6:69:31:e2:8d:ee:9d:d7:02:f9:09:29:18:72:
                    5a:22:c8:dc:59:8c:5f:7a:2c:f4:aa:db:ec:35:8b:
                    54:7b:82:d5:35:5e:5e:41:0e:94:09:82:19:ae:7c:
                    01:cb:14:30:bf:4d:f4:ce:98:7d:24:91:5a:23:63:
                    c7:1b:98:26:8a:ad:a5:3f:94:bd:41:03:78:ac:b9:
                    3c:67:92:e4:de:2f:1f:89:5c:0f:bc:60:fd:94:d5:
                    1b:a3:d6:ee:75:c2:9a:0d:62:2b:7f:37:8a:2c:58:
                    68:a0:ac:5d:1d:cc:a8:48:10:d8:86:dc:64:02:6e:
                    03:a0:84:e0:bc:19:6c:ee:54:2b:20:42:13:18:dd:
                    21:60:16:c8:44:37:52:00:dc:43:45:fa:e8:4a:6f:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FD:75:24:80:AA:F6:9D:7E:76:BA:B0:51:F3:00:30:DB:12:7A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/94faa8af-ce01-3f05-9cea-38558aaec61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:14:03:b5:8e:8c:3b:bb:55:21:e8:c8:1a:5e:f5:41:3b:8b:
         1f:8f:dd:c7:e9:06:d0:d4:03:b2:b7:c7:09:b2:5e:24:cd:7a:
         1b:fd:44:a1:d8:55:9e:5e:82:31:90:f2:fd:0e:2c:75:15:d0:
         d8:a3:c3:65:d3:a4:4a:73:03:83:8d:7a:95:22:56:cc:80:a0:
         13:fc:56:65:3e:31:1f:ca:35:a2:60:81:ea:30:2c:79:39:fa:
         c1:48:68:f4:5e:f2:24:4d:ee:5a:56:90:a5:63:31:57:da:31:
         04:80:73:a3:df:ac:16:59:64:a5:1e:fc:c0:0c:16:04:b3:2c:
         5b:f4:d9:75:64:46:e5:e8:4d:59:27:21:e6:12:5a:99:73:db:
         81:9b:2a:ad:98:c0:34:22:6e:1f:e4:da:a7:c0:d8:82:c3:0c:
         7b:92:3c:89:e5:3e:16:05:e5:63:1a:b6:66:75:cd:0d:ed:aa:
         51:49:89:a2:52:65:81:0a:7d:86:3e:26:90:40:04:11:c8:8e:
         13:07:a5:96:ec:42:55:65:14:86:03:11:62:e1:5f:71:12:ec:
         3e:72:ec:ab:88:42:c9:36:70:52:63:6c:a5:43:e5:ab:2f:4e:
         94:ff:1f:dc:ad:64:e5:df:fc:d9:6a:73:42:35:60:38:9b:28:
         0d:b5:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:54 2024 by rpki-client on console-fra.rpki-client.org