Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa
File:                     9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa (raw, json)
Hash identifier:          eDeBl4yvO2GjAQV42612ZPr1AbpEsQnolptGKdRZNlY=
Subject key identifier:   68:6C:7D:F3:11:8E:72:26:08:4F:80:A3:94:A0:7C:8A:F2:81:9B:8A
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584738F605044420CFE80EA47100
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     8014
IP address blocks:        204.236.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f6:05:04:44:20:cf:e8:0e:a4:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=26457be9-8e00-4588-9ba6-b61f592c6507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:73:4d:1e:c1:89:86:47:aa:ef:11:80:12:ac:
                    0d:f6:5e:81:0f:48:be:58:d7:07:80:c0:45:ca:71:
                    d9:6e:c6:94:23:cd:66:61:a5:ea:1b:7e:b4:e9:80:
                    fd:7e:3f:55:ea:17:4f:4a:aa:ea:78:8d:8a:73:12:
                    7c:97:76:c4:71:13:07:92:93:55:bc:40:3f:b4:bd:
                    a0:48:aa:58:6c:51:b5:17:72:4d:f7:d9:d0:26:5d:
                    4f:40:2a:98:0b:3b:52:d5:85:95:7f:57:9c:5c:4d:
                    b6:f9:81:8c:ef:c6:66:a1:97:0b:5c:c5:2c:8f:49:
                    f6:3d:71:a1:97:71:bf:af:ce:b7:bd:c1:47:9a:5f:
                    6a:dc:28:ee:20:5e:cb:f3:99:65:3f:fa:34:6c:fd:
                    69:c2:9d:03:89:f4:43:da:27:92:3b:b5:41:9e:36:
                    7f:b4:e8:49:ce:a6:1d:43:cd:d7:d2:7e:81:b3:60:
                    fa:05:3d:0f:e1:e1:b1:73:c7:b9:72:fa:37:66:f3:
                    72:3a:2b:f7:fe:b6:b3:33:a8:0c:03:9b:b6:8c:f4:
                    78:8d:a6:aa:b7:80:ce:10:29:0d:36:a6:ed:11:9a:
                    45:c4:35:03:74:39:42:37:06:f0:80:de:e6:1d:45:
                    e3:b0:8b:f6:13:81:82:36:52:85:64:79:f3:44:a4:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6C:7D:F3:11:8E:72:26:08:4F:80:A3:94:A0:7C:8A:F2:81:9B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:67:9b:fd:ad:cf:12:bf:7d:7e:4c:6c:d9:1d:33:d3:e5:
         93:f6:c6:c6:5e:8e:68:98:fb:90:08:51:16:65:8b:78:d6:f0:
         7c:9a:bb:ec:03:5d:a8:9f:11:92:33:24:83:3d:76:c4:cb:2a:
         35:34:a9:dd:e4:e2:be:54:b2:23:89:ff:25:a7:b7:e9:2e:f2:
         90:b4:0d:73:14:bd:ab:73:ba:8f:4c:e6:20:73:fd:39:f6:c8:
         8b:8b:74:bf:52:a4:c8:9f:db:be:7c:f2:30:b5:84:2f:66:3e:
         d1:8b:89:fd:c6:fb:59:00:10:bf:d0:1b:5e:d9:c4:e4:a0:a3:
         c4:8d:53:a0:3a:4b:51:f0:89:a1:e6:0e:51:57:5e:d6:5d:8a:
         8a:98:88:20:e3:e7:5a:49:71:cf:65:9b:6f:97:f0:32:22:06:
         30:94:d8:a4:8f:39:06:b2:41:75:c3:16:5e:86:9d:39:dd:73:
         1b:67:24:ac:d1:c5:13:b5:23:35:8b:c3:0b:64:77:9a:1a:b3:
         ae:98:ab:24:ef:44:d8:0f:c5:fc:50:2c:c9:e9:c7:22:64:5f:
         bc:56:63:cc:e7:d9:55:41:4d:d0:85:c6:00:55:70:f1:98:dd:
         7e:97:41:fe:8c:79:79:c3:0e:79:f1:f0:c6:0e:e1:c6:2d:06:
         a7:26:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:41 2024 by rpki-client on console-ams.rpki-client.org