Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d15e2956-081e-305d-8e43-92418fd8c4cd.roa
File:                     d15e2956-081e-305d-8e43-92418fd8c4cd.roa (raw, json)
Hash identifier:          pM0CmrCFt9cQzttyLvuspKG0ozKLn37R5mdE+GInf8I=
Subject key identifier:   2B:1F:6B:DE:0D:A9:2A:99:35:E3:A7:E5:62:56:D2:AB:2D:DD:79:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2AD01A367FEF430F10AE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d15e2956-081e-305d-8e43-92418fd8c4cd.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     0
IP address blocks:        204.91.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:d0:1a:36:7f:ef:43:0f:10:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=8bcbb722-a2a0-42f1-bf9d-19123b1c8c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:c5:aa:da:1a:37:85:d8:4d:a2:d4:e3:92:
                    f9:6b:e9:c3:81:8f:10:3c:f5:35:0d:bb:e7:4a:9f:
                    6b:87:b8:3f:f2:0a:c3:cb:93:9f:10:19:8b:ec:64:
                    79:55:22:e3:0d:89:f2:d5:20:cf:9f:64:fe:68:bf:
                    50:ac:fb:ac:6b:43:de:b1:40:33:dc:47:45:f4:a9:
                    d8:3b:98:22:4f:6a:9a:50:70:d2:7b:f0:8f:ea:57:
                    f3:dd:32:ac:4a:b2:98:a9:bd:b6:7d:51:98:2d:fc:
                    ac:d7:b2:cf:f2:d4:6d:57:7c:ca:3d:21:a7:fe:a3:
                    ae:3e:70:a1:94:83:60:c2:68:54:69:89:eb:ac:3f:
                    31:ba:46:81:8f:54:25:74:53:79:5d:41:9e:55:b9:
                    34:d5:e1:10:e8:cd:94:b5:cc:c7:d3:16:fe:17:43:
                    1c:23:f6:64:dc:48:76:b3:70:4d:d3:33:a6:85:05:
                    9d:84:b6:c8:94:63:3d:62:b0:fc:ee:50:11:36:af:
                    9f:10:3c:14:a0:1b:04:e7:8e:e5:5e:06:3e:0b:51:
                    5a:34:6f:12:ed:72:ef:95:f4:25:e6:ed:36:3d:59:
                    89:e2:bc:44:0f:46:50:69:2b:89:b6:d3:cc:bf:4b:
                    c1:e4:56:7c:f8:2c:e1:8a:19:b6:ef:fd:98:fa:e1:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:6B:DE:0D:A9:2A:99:35:E3:A7:E5:62:56:D2:AB:2D:DD:79:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d15e2956-081e-305d-8e43-92418fd8c4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.91.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:bb:23:9b:85:f0:b3:92:76:91:79:71:17:eb:b5:dc:0b:
         be:49:03:de:d3:a8:59:a5:c9:f9:d3:a8:18:08:30:79:06:a2:
         25:af:ca:f7:de:97:ae:14:66:61:16:47:d2:73:fa:47:79:82:
         04:47:11:ad:34:08:ea:13:84:b5:bf:1e:a6:20:c8:3e:4c:f6:
         6d:08:60:aa:3d:d6:07:ad:c0:7d:0c:41:19:ab:9d:eb:43:57:
         23:c5:9a:7d:7b:24:78:05:a8:6b:64:e9:bc:26:29:30:8a:df:
         e1:ab:ea:9e:1a:56:ce:2a:ff:4e:2c:36:9f:21:82:1b:b3:4b:
         4a:13:ae:b5:c0:7b:e5:9b:b0:76:e5:e7:30:dc:0c:40:22:31:
         73:ad:af:c7:ce:5c:4a:26:10:0b:d0:5d:d9:f5:72:db:65:73:
         a5:be:f9:21:46:5f:fb:dc:16:3c:24:28:e9:9b:58:09:57:85:
         0e:a1:c7:bd:d4:45:a4:6b:fe:de:a3:cf:61:7c:3c:d7:a4:27:
         7c:cd:06:eb:0d:b9:0a:c9:ab:0c:84:82:9e:39:ac:8c:fe:f3:
         f9:98:b2:43:3e:08:c4:be:8a:ec:e8:0b:d2:30:df:3e:8e:ba:
         28:bc:44:0d:ce:62:86:76:36:b0:52:2c:f6:e9:20:ed:4e:aa:
         e1:ee:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:17:22 2024 by rpki-client on console-ams.rpki-client.org