Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/f10fac4d-edef-379c-9cc7-37cf908054d5.roa
File:                     f10fac4d-edef-379c-9cc7-37cf908054d5.roa (raw, json)
Hash identifier:          LhJf7QPsWfz3UyQVRkkl4m7qw3e63HTAymiDA4z/Lyg=
Subject key identifier:   E3:FF:D3:36:EA:FC:E3:2F:14:3D:48:F5:F6:DC:A0:54:1F:C4:4B:E0
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F432858451A158BE8423C128CC0EFFE80
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/f10fac4d-edef-379c-9cc7-37cf908054d5.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        104.254.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8b:e8:42:3c:12:8c:c0:ef:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=8162c8ab-6217-4645-b2cf-f07ab6d3b113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:15:91:5d:1b:c2:c3:7c:25:29:69:5a:9f:
                    b6:dc:ca:0e:4e:3b:48:4f:e7:7f:5a:12:9a:6a:e4:
                    7d:85:14:81:a3:f5:ce:d1:85:72:a7:80:e2:99:36:
                    71:01:b7:65:c3:a7:92:20:59:f4:30:c5:93:4a:01:
                    c2:c7:83:d3:16:2e:3c:fd:f6:8f:b9:7a:da:2c:f3:
                    75:45:90:48:53:2d:0c:47:a3:66:41:ad:f9:aa:e9:
                    bd:a9:e6:48:c2:87:46:76:bf:26:7e:3d:88:e9:90:
                    bb:1f:77:30:ee:56:43:3c:f3:9f:5e:15:19:f5:4f:
                    07:77:9c:ad:a4:53:5c:04:38:fc:02:b8:4b:31:cf:
                    13:0e:e5:38:03:ce:84:81:1c:17:35:80:8b:a1:78:
                    72:4b:30:4d:aa:8a:be:3f:3c:3b:34:03:b9:9a:ca:
                    ad:bd:95:6e:37:64:d9:03:9e:7a:d4:4d:ed:b5:f1:
                    10:4f:af:df:9d:0b:51:e0:66:fb:cd:d4:98:b5:41:
                    68:f4:a3:27:24:b9:33:4a:0f:66:37:5c:ed:21:b4:
                    7a:a1:1a:d4:f2:37:da:c8:bd:e7:80:55:da:a1:0a:
                    a8:c9:6f:3d:03:7d:32:85:2f:6b:a9:e1:d2:63:23:
                    88:9f:73:b5:a7:0c:63:a7:f9:2d:12:bb:5b:4d:88:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:D3:36:EA:FC:E3:2F:14:3D:48:F5:F6:DC:A0:54:1F:C4:4B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/f10fac4d-edef-379c-9cc7-37cf908054d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:c1:82:02:46:46:d1:28:f0:c2:54:7f:fc:3d:b0:f0:a3:
         8c:3d:16:40:4e:72:51:42:52:a5:1a:dc:fb:c3:0d:fc:f0:2e:
         b2:8f:ef:6d:4b:82:6b:5d:82:93:eb:d2:95:f7:66:69:7d:83:
         dc:71:9d:0a:8b:7b:fc:49:24:a8:22:d8:4b:98:40:79:24:a9:
         aa:df:6c:d8:f5:64:66:de:e6:3c:91:7d:0e:2a:c5:bd:29:12:
         64:ac:fa:bd:ce:e7:1a:3d:07:02:a3:b3:fd:5a:25:b0:d6:33:
         8a:66:71:c0:d0:5b:e1:e2:22:a1:7b:bd:5a:cc:2e:a3:5f:c8:
         ea:d9:5d:10:35:40:60:9b:f3:92:f4:70:51:c5:e0:58:87:61:
         b8:01:5e:a8:80:9f:d5:fd:7f:2c:80:b3:da:42:57:7e:bc:74:
         aa:f9:db:83:72:1f:9c:b2:c5:4b:01:48:13:58:77:34:90:3c:
         b1:90:d3:29:9c:13:ee:71:bd:a8:fc:9d:31:78:00:36:3e:83:
         b1:ca:94:a4:d7:9d:36:66:0e:41:6a:de:bd:43:fc:95:8a:13:
         12:30:9f:22:69:00:6d:1a:ce:91:6c:f8:32:b8:12:88:a7:7a:
         60:f9:a1:3f:7d:e9:d3:fb:b9:b7:89:88:d3:66:fe:3a:c1:34:
         4c:4e:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:40 2024 by rpki-client on console-ams.rpki-client.org