Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1da86aa8-b63a-3ffe-a7d9-2256c433a4ea.roa
File:                     1da86aa8-b63a-3ffe-a7d9-2256c433a4ea.roa (raw, json)
Hash identifier:          V/z9l9Rsu8DNqjJnEq+JmWbBYPNQMeUZhWGNJjGjvaI=
Subject key identifier:   CF:C4:83:DA:6B:17:B6:AB:C3:87:3B:2E:86:E8:17:88:02:06:61:71
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845E1609882CD1170F787587300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1da86aa8-b63a-3ffe-a7d9-2256c433a4ea.roa
Signing time:             Wed 15 May 2024 11:17:35 +0000
ROA not before:           Wed 15 May 2024 11:17:35 +0000
ROA not after:            Tue 13 Aug 2024 11:17:35 +0000
asID:                     45671
IP address blocks:        104.250.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Jun 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:60:98:82:cd:11:70:f7:87:58:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 15 11:17:35 2024 GMT
            Not After : Aug 13 11:17:35 2024 GMT
        Subject: CN=9675710b-842d-49f4-ab92-f882aa562ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:ef:2d:d0:7f:b5:f5:50:bf:2d:03:6a:e2:
                    12:3d:58:3e:86:12:46:44:f9:fd:35:7a:34:4f:5c:
                    a3:91:bd:f5:bc:1e:64:21:33:d8:69:bc:3c:89:5d:
                    61:3e:da:05:92:1d:6e:48:b8:d0:33:44:4b:e2:35:
                    1b:68:a7:52:6c:50:34:8b:78:75:bc:78:31:a9:c1:
                    a3:02:81:03:6c:e3:f9:fd:e8:5c:d6:e5:f4:31:db:
                    84:c4:7f:3e:d5:3c:a0:af:cc:58:c8:7c:2c:20:7c:
                    04:4f:fd:ff:78:4a:c5:15:0e:0a:c6:ac:5b:c7:65:
                    af:6d:44:70:da:e2:6e:46:15:a9:97:33:4d:39:6d:
                    ec:21:4a:78:0f:95:14:8b:19:a9:4b:0d:23:18:cd:
                    83:8d:57:36:28:06:4c:d8:56:f8:f8:c3:58:2b:3f:
                    3f:f3:74:11:87:41:35:f1:f5:74:31:64:63:64:ba:
                    48:71:b2:97:df:73:6c:34:e5:28:3a:17:5e:fa:fc:
                    1e:32:5f:b3:89:9c:74:a0:d1:ff:f6:ed:a4:5c:88:
                    13:69:b2:a7:49:05:8d:47:f7:5f:94:3d:d8:47:18:
                    26:2a:50:c8:30:f2:03:6f:7f:49:be:59:a2:9b:82:
                    07:77:69:bd:c5:06:24:6f:ad:10:9e:8d:0f:72:33:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C4:83:DA:6B:17:B6:AB:C3:87:3B:2E:86:E8:17:88:02:06:61:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1da86aa8-b63a-3ffe-a7d9-2256c433a4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:5f:a2:3d:ff:63:41:8b:95:1f:d1:aa:6d:79:fa:27:5d:
         0b:71:db:68:41:dc:20:5b:e5:e4:c1:85:b2:de:80:4a:e5:85:
         30:3d:ce:e7:a2:62:30:23:38:0d:15:92:c9:20:08:3e:45:93:
         e9:2e:b8:63:af:0c:2d:6c:28:4b:95:d5:4f:47:67:30:20:df:
         61:ba:85:78:ad:01:81:bc:4a:ed:00:9c:e2:8d:1e:6d:40:44:
         32:4f:de:1b:45:3b:57:9c:31:e9:62:a2:8b:23:dd:cb:49:b7:
         d4:c3:c6:23:29:72:97:87:56:41:a6:5b:42:0c:07:a8:30:6e:
         40:5a:ec:c7:78:f6:19:ae:d7:0b:41:95:f7:d9:68:5f:f7:6c:
         4a:6b:51:1b:f9:57:ae:18:05:82:b5:9b:d0:e4:e9:ce:52:e1:
         dc:0d:82:81:ec:a6:db:b9:e7:50:90:d9:a7:f0:5f:6a:f7:5a:
         8d:3f:d7:fb:68:0b:cb:9d:8b:6d:d7:13:1c:c9:67:5c:99:38:
         cf:dd:26:c5:c9:ab:70:5f:62:a0:16:eb:e8:ab:f1:f6:15:68:
         5a:67:1c:4a:80:cf:38:12:95:db:1f:06:a9:36:c0:81:c6:11:
         ea:37:3d:01:7d:53:93:54:a4:2b:c6:98:22:d5:a5:d1:82:bb:
         57:e4:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 04:49:25 2024 by rpki-client on console-ams.rpki-client.org