Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa
File:                     d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (raw, json)
Hash identifier:          eR+/FgxmGeAPU69F7weDhd0XoH4crty06GkSGqcqvbY=
Subject key identifier:   7A:2A:3A:19:A6:45:A2:E7:61:F6:45:1A:9B:83:D6:C1:04:18:96:3A
Certificate issuer:       /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04
Certificate serial:       010D0C9F432858481306884630D8A10B89D11500
Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa
Signing time:             Mon 02 Dec 2024 15:40:24 +0000
ROA not before:           Mon 02 Dec 2024 15:40:24 +0000
ROA not after:            Sun 02 Mar 2025 15:40:24 +0000
asID:                     32391
IP address blocks:        204.57.128.0/18 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:06:88:46:30:d8:a1:0b:89:d1:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04
        Validity
            Not Before: Dec  2 15:40:24 2024 GMT
            Not After : Mar  2 15:40:24 2025 GMT
        Subject: CN=1aab9d82-becd-4eb0-9fe4-89fe15f5bd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:58:43:ec:77:c7:8d:74:cb:af:73:b8:fb:
                    bb:99:02:59:b1:44:0d:aa:a4:c8:4e:9e:56:25:5b:
                    d0:0b:79:f3:97:44:dc:11:7f:0c:36:13:7b:0c:30:
                    fa:b5:20:b0:93:c2:ef:9f:6e:b1:58:ca:cc:66:06:
                    6d:fb:8e:01:52:16:e5:34:19:06:46:4a:6c:df:ec:
                    f3:93:46:e1:13:a1:27:b0:b5:c9:f8:d9:38:3e:a3:
                    6e:f7:fc:5a:37:82:9b:4a:23:7b:3c:44:3e:dc:03:
                    50:8d:e2:35:db:2f:04:43:fc:4b:8f:82:e1:bb:9f:
                    2a:da:86:2b:2d:5e:75:79:81:bb:f5:57:f4:33:56:
                    16:7e:6c:d7:04:11:40:b4:cc:f1:c6:34:06:67:91:
                    0d:88:a4:93:6d:28:8a:1f:99:ca:1a:1a:c6:3e:0c:
                    17:e8:32:cb:67:70:45:da:34:97:84:51:90:85:5d:
                    c5:ef:2d:0a:a8:e0:07:48:ec:ae:ed:26:cf:4e:61:
                    f0:ff:55:64:13:bd:de:ed:fe:ac:d2:28:3d:31:c3:
                    65:e8:c8:bd:85:1e:52:3d:4d:ce:b2:1a:f8:30:d9:
                    0f:46:35:e1:cb:cb:3d:4f:b1:91:f6:76:90:ca:a2:
                    f2:82:40:fc:90:61:a0:c2:1e:8c:8f:68:ab:e1:e5:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:3A:19:A6:45:A2:E7:61:F6:45:1A:9B:83:D6:C1:04:18:96:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl

            X509v3 Authority Key Identifier:
                keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:ad:c6:0b:32:9f:6e:64:9b:45:11:0b:23:4d:d2:e9:cd:
         93:3a:fa:da:70:7e:1f:e9:3a:3c:dc:1c:9c:fa:c3:69:3a:d4:
         cf:6d:2b:19:42:e4:3e:dd:b6:10:6a:ab:67:e9:9d:a7:d6:27:
         d4:21:4c:fd:dd:da:bc:ca:d3:a1:5a:7c:7c:fa:3d:74:e5:6f:
         2b:ac:96:45:5b:b0:cf:15:c5:ab:50:88:48:81:10:a7:f7:2a:
         86:e2:16:5b:7b:f2:32:e0:57:75:01:12:a1:4c:ce:9b:d4:1d:
         2d:05:37:98:75:5c:53:74:c3:e4:b8:21:6e:4f:95:c1:bb:03:
         d0:5e:82:c3:e3:7f:9a:24:8e:ee:7b:c4:ea:50:5c:fb:0b:2e:
         b7:8c:52:c3:2b:d0:69:cb:e8:d7:1f:b1:47:34:92:0b:63:25:
         42:81:d4:48:6a:7a:47:14:60:97:5b:fd:1c:39:ce:0b:39:8b:
         3e:9d:bc:cf:ca:2a:c7:15:33:1d:37:3b:6e:0d:1a:76:54:ae:
         00:5d:17:41:58:2a:04:dc:7d:12:4d:33:1d:0a:18:1c:de:e3:
         05:2d:6b:49:f5:40:b5:4e:93:b2:fc:cd:e2:08:b0:cd:af:86:
         b4:e3:14:97:b5:34:82:8b:b0:74:ea:ee:72:6d:35:df:fa:20:
         7e:28:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:16 2024 by rpki-client on console-ams.rpki-client.org