Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/81e668bd-706c-36be-8a06-fbd313f75f42.roa
File:                     81e668bd-706c-36be-8a06-fbd313f75f42.roa (raw, json)
Hash identifier:          thOXyuF4VmSVkFdsJ94XzisLzHn7uQ3ykpRoQc4bkD0=
Subject key identifier:   2A:05:DB:0B:66:04:DE:9F:AB:B1:9A:32:BE:1D:8C:FF:3C:7D:86:CC
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F43285845883DE6A74BA7823B6FC58D00
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/81e668bd-706c-36be-8a06-fbd313f75f42.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        204.110.219.0/24 maxlen: 24
                          208.71.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e6:a7:4b:a7:82:3b:6f:c5:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=30c9d5af-ce32-446a-9cc3-e225b8a640a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:ab:19:f2:60:b5:9e:77:38:30:f5:a3:ae:
                    42:b3:46:79:c1:8a:55:17:ff:37:0c:a0:1d:7c:98:
                    8d:c0:62:32:95:15:8c:21:61:91:d5:3b:8b:8f:32:
                    a4:70:dd:4f:79:79:f9:92:1f:79:ec:ac:8b:2b:27:
                    09:32:0c:60:f1:b7:f8:0f:2e:b9:de:54:86:a4:71:
                    31:eb:9f:a9:25:14:e2:c3:44:08:5a:20:95:cc:f6:
                    b8:5c:3b:d8:d3:79:ff:d9:f9:dc:9e:71:4f:2d:af:
                    5a:d4:e0:2a:89:bf:d8:34:8e:ee:a4:ce:24:36:10:
                    95:41:33:0b:e3:37:f7:04:89:bc:83:98:bc:2f:6f:
                    4d:4c:a3:61:90:77:40:66:c8:7b:6c:f5:72:79:b5:
                    30:bc:cb:91:91:96:9e:f9:5a:45:f4:f5:23:0c:74:
                    a6:b2:48:d9:e2:18:77:2f:a2:47:2d:16:9c:77:fe:
                    48:3e:8d:03:ac:b3:92:d4:f2:00:7e:78:52:eb:ca:
                    90:50:27:3c:7f:8e:e3:cd:17:72:00:6d:f0:04:9b:
                    84:91:8d:75:d8:3b:67:15:eb:97:13:c2:b4:e7:1e:
                    ca:99:a0:a3:d2:18:28:7f:5e:85:6a:7b:e7:1f:cb:
                    74:2d:8a:65:22:b6:86:c7:34:5d:33:13:8c:2b:2d:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:DB:0B:66:04:DE:9F:AB:B1:9A:32:BE:1D:8C:FF:3C:7D:86:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/81e668bd-706c-36be-8a06-fbd313f75f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.219.0/24
                  208.71.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:21:2a:bf:46:29:45:35:d9:31:ac:64:a3:26:34:de:9d:09:
         99:1f:21:65:d4:f2:d4:c2:cf:db:5a:95:6e:08:20:9c:69:cc:
         06:84:a3:c5:65:b9:ca:15:32:2c:1e:db:1f:f6:2e:ea:86:e4:
         9f:61:aa:1c:40:1c:2d:32:4c:f3:67:f7:d5:5e:61:08:d9:d8:
         37:ae:3c:a3:22:d1:d9:f7:ce:e4:0c:5f:d4:00:cb:b4:ad:ed:
         3a:ce:45:c1:5d:05:91:ad:ba:3b:a9:c4:07:92:f0:90:c8:1f:
         12:38:8a:c3:3c:be:c3:c1:01:ab:2a:9a:3d:c9:94:43:b2:13:
         48:64:6d:cb:3e:01:5a:6e:5f:f4:57:02:cf:61:50:71:e9:d1:
         2e:48:82:87:df:14:22:57:5b:42:dc:14:98:9a:ed:d8:b1:ae:
         7a:f5:26:f1:b9:20:8f:06:46:f5:b7:b7:0f:98:cb:f9:20:06:
         dd:f8:32:78:79:cd:ac:0b:36:63:ea:9a:83:bc:69:2c:d3:65:
         12:97:2a:a1:c4:fb:73:a0:66:03:f2:46:20:20:f8:7e:b8:91:
         79:31:41:f4:aa:6e:90:13:dc:f7:e7:79:82:6d:f0:a6:3a:10:
         d9:38:28:13:54:8b:c8:dd:b2:03:9f:57:d6:a1:68:0b:87:e5:
         1d:4b:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:52 2024 by rpki-client on console-fra.rpki-client.org