Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/995d2e01-efd5-30f3-bcb8-d8a21faa9c8a.roa
File:                     995d2e01-efd5-30f3-bcb8-d8a21faa9c8a.roa (raw, json)
Hash identifier:          JRx60OK7aoX5xCXbrhsuKabE1QKKzdoH3Y5y4vIf8bo=
Subject key identifier:   9E:82:C6:D5:08:DF:D1:9A:29:1C:BE:20:2E:DD:BD:73:4B:47:0C:49
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328583A23A7F042E1A7D7B0E46BABD0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/995d2e01-efd5-30f3-bcb8-d8a21faa9c8a.roa
Signing time:             Thu 03 Jun 2021 04:00:00 +0000
ROA not before:           Thu 03 Jun 2021 04:00:00 +0000
ROA not after:            Sat 30 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        204.79.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:23:a7:f0:42:e1:a7:d7:b0:e4:6b:ab:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun  3 04:00:00 2021 GMT
            Not After : Mar 30 04:00:00 2030 GMT
        Subject: CN=c96a2c00-ac96-4327-8339-6853c90fac55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:ed:3a:62:ae:43:13:5d:74:36:fe:cb:7d:
                    b7:f5:4d:16:c7:d4:74:80:a9:1d:b8:e3:40:62:77:
                    0f:85:41:49:da:fc:39:2d:ff:19:0d:9b:d0:6e:59:
                    f0:18:5f:70:2a:d4:ae:2d:01:80:f1:58:42:a6:84:
                    8e:6d:a3:56:8e:ed:8f:bc:e9:6a:6a:0e:89:e0:48:
                    f5:54:04:b9:d0:67:ba:28:ab:76:e4:37:5e:0e:99:
                    74:f9:57:1a:b6:ea:ac:37:06:8a:27:55:c7:f3:3c:
                    5b:d2:a4:cc:86:03:3a:62:2f:30:85:cf:2e:d5:f9:
                    a8:e4:6a:f8:2a:17:c2:3f:77:8a:cd:49:9d:9b:4b:
                    be:16:82:3f:ef:ef:fa:e4:cd:c0:fc:de:03:0f:56:
                    7a:e1:5a:06:c8:d4:a4:88:8c:9f:17:9f:27:f5:dd:
                    5f:8a:14:89:88:e0:41:1a:f4:9a:31:2c:95:97:5b:
                    3c:5b:4c:70:0e:30:a2:47:72:67:9e:ad:57:8d:5e:
                    cc:7f:80:cc:b2:6d:7c:8c:f2:e3:c0:ce:0f:15:f5:
                    0f:e7:39:b7:63:af:63:9a:d7:bd:a7:4a:e3:79:01:
                    7d:97:3b:51:8c:3b:af:3e:a9:f0:8d:8e:e3:b5:2e:
                    19:27:fd:25:7c:5a:96:94:9b:3c:98:3d:62:1d:a4:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:82:C6:D5:08:DF:D1:9A:29:1C:BE:20:2E:DD:BD:73:4B:47:0C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/995d2e01-efd5-30f3-bcb8-d8a21faa9c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:eb:a6:bc:ea:8a:e6:8c:64:c0:cb:c9:25:d9:d7:e8:2a:
         94:a5:7e:1f:56:d6:b0:ac:64:4c:f2:f0:ca:c6:2f:9f:9e:0e:
         04:7d:1b:27:5c:46:76:de:57:bb:da:90:f2:a5:f0:7d:9d:c3:
         3a:00:65:85:c5:2a:da:8a:25:71:19:df:74:5e:c6:91:9e:d8:
         a3:cf:8e:e8:5f:b7:ba:de:c6:e7:84:1d:30:7a:d1:bf:93:0c:
         c8:d5:0f:8e:58:0c:29:f8:8a:a8:00:12:10:f5:0a:ee:0a:44:
         9c:dc:36:39:cd:49:ce:f4:d5:58:c0:d0:9f:3a:7a:25:28:4d:
         18:82:90:31:b7:16:72:20:2b:89:e0:23:2f:f5:e0:de:69:4b:
         e5:5c:85:6c:ff:ca:ce:09:ed:9b:49:f9:c4:e5:ff:d4:ab:23:
         6b:7f:d3:99:6f:b7:6a:a3:9e:20:38:2b:1a:d1:03:26:a0:b5:
         96:46:1f:c9:16:1e:38:33:7f:a9:8f:33:e0:e6:f4:21:c6:35:
         0e:e1:de:c3:d8:49:db:29:7e:0a:a4:27:32:4b:ee:26:18:8c:
         5c:ba:9e:9e:65:00:6b:22:c7:79:16:a2:45:54:7c:da:f3:45:
         73:40:c9:ed:83:aa:f2:6f:54:56:e7:ec:c7:54:a5:bc:13:bb:
         b6:ef:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:24:40 2024 by rpki-client on console-ams.rpki-client.org