Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/328041a1-f3c6-3309-845b-dbabc8241e3c.roa
File:                     328041a1-f3c6-3309-845b-dbabc8241e3c.roa (raw, json)
Hash identifier:          PyLo8l9UMO3qfUOEMtDgRL+9sViHoCQHVGMw6NA4xuY=
Subject key identifier:   7B:53:59:43:DC:16:D7:E1:42:95:1C:5D:EB:C6:E7:6A:33:A5:EC:7C
Certificate issuer:       /CN=9da5489c-943d-495a-995a-ee1d16049d29
Certificate serial:       010D0C9F4328584566BDB7C035FED46F755B92C8
Authority key identifier: 68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/328041a1-f3c6-3309-845b-dbabc8241e3c.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        204.75.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b7:c0:35:fe:d4:6f:75:5b:92:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da5489c-943d-495a-995a-ee1d16049d29
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=fa070ebc-a392-4599-b5e0-001d712994f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:c0:2a:eb:6f:ee:74:d5:f4:bc:c6:09:e5:
                    e4:35:f3:d6:e4:92:f6:cd:3e:ce:3e:00:b5:2b:53:
                    e9:f0:5f:fe:c0:22:b7:2a:40:08:7a:d2:0f:cf:28:
                    8c:b0:c7:5a:f9:be:72:8b:7e:d2:3f:43:2c:3f:0c:
                    18:22:51:fc:aa:fc:aa:bf:89:07:4a:36:e3:58:37:
                    16:79:f6:70:a3:5d:72:9f:7c:7f:c6:78:13:b7:29:
                    94:e5:1f:5e:ff:47:db:d1:bb:e6:a3:29:36:60:49:
                    4d:4b:a1:c1:75:9b:ee:fa:7f:8d:7d:03:13:5b:89:
                    6b:4e:16:bf:c1:cb:aa:f0:65:76:53:e8:fc:1d:da:
                    0f:33:aa:5b:92:da:9b:2e:cf:ee:5e:54:92:44:38:
                    82:fa:07:48:85:ea:79:65:c9:14:a7:f8:59:5f:97:
                    6e:75:0a:cd:1a:f0:56:25:1e:3e:f8:ea:87:35:b3:
                    e7:a0:ae:de:e7:61:53:b5:3c:80:d9:40:51:aa:9d:
                    6e:34:0a:94:3c:c6:79:83:b4:99:85:fd:1f:f5:6d:
                    66:29:07:0c:78:7a:23:e3:ef:8f:2e:92:58:96:c2:
                    dd:76:d3:77:94:ef:c3:c4:03:67:31:2a:e0:54:7f:
                    4f:b9:62:63:6e:44:40:49:4f:98:d9:b1:2c:0a:a7:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:59:43:DC:16:D7:E1:42:95:1C:5D:EB:C6:E7:6A:33:A5:EC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/328041a1-f3c6-3309-845b-dbabc8241e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl

            X509v3 Authority Key Identifier:
                keyid:68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.75.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:22:93:77:18:65:98:32:f2:5d:3c:b2:2e:20:62:a0:32:60:
         ae:80:a0:5d:fa:f9:76:80:e9:6a:52:1e:1b:ed:9d:51:d4:9b:
         4b:a7:99:61:ce:97:83:41:5c:16:e0:1d:1b:ab:f0:62:2a:44:
         72:ce:c6:48:2c:bf:4c:2b:83:95:f9:8d:66:03:b9:d9:4e:88:
         7b:bc:ef:65:86:59:5b:0a:bc:1e:2d:ff:a3:45:e5:88:d6:9e:
         a5:ed:fd:19:01:da:c3:e5:10:c7:10:5f:0b:d5:10:73:99:dd:
         2e:29:6e:0b:ce:81:13:b0:b8:25:fe:3a:a1:16:18:43:37:3d:
         dc:4a:eb:a9:5b:8a:14:0f:85:30:61:cb:3e:21:bb:5f:3e:95:
         57:7a:bd:f4:e0:41:13:7b:34:05:01:cb:7d:db:3d:57:66:2d:
         9d:4c:c6:37:e4:8d:8a:bc:0d:f5:21:4e:29:8c:72:c0:55:b9:
         9e:0d:73:9f:6d:89:69:95:4b:a0:23:8f:88:18:6d:93:99:e6:
         5a:4c:7b:23:2c:75:64:e5:8d:4f:31:96:ac:0f:bf:e2:47:c2:
         07:90:93:14:2c:bf:a3:b6:ee:c4:1b:5a:7d:c5:79:51:81:5c:
         ab:42:44:95:18:44:a4:a8:da:50:b6:24:30:61:71:c3:98:58:
         14:ec:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:59 2024 by rpki-client on console-fra.rpki-client.org