Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa
File:                     bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json)
Hash identifier:          VttPsxV6sik8PjhpRr0KEEF2c9R7aNrI7j55lxFI4zw=
Subject key identifier:   EE:F9:3F:58:15:08:5C:DE:76:6E:35:02:F6:82:6A:BC:E7:22:81:E1
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845B4E8DB3928BB64F3185477A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     212238
IP address blocks:        104.243.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:db:39:28:bb:64:f3:18:54:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=3fe87045-2a10-42e3-9aa5-8f813ede1308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:11:33:bf:b8:31:ed:9d:74:27:48:d5:55:
                    77:7d:d4:1b:3f:e5:bf:70:22:a5:4b:d0:22:b9:67:
                    ad:1e:01:99:f8:80:a8:28:6f:39:16:6b:2c:a5:d9:
                    c8:12:d1:8e:d8:ad:a2:f2:86:69:2a:cb:ac:c1:9e:
                    3c:ca:9a:fe:bb:8e:c9:31:d2:db:94:74:2b:f1:d3:
                    22:58:6e:5f:a8:08:38:fd:56:d3:ea:34:94:b6:a6:
                    ab:50:1d:e5:09:0b:a7:0e:3a:08:86:08:ef:7a:7e:
                    88:55:3f:47:74:45:5d:d3:b2:4f:87:22:2f:89:8d:
                    f3:0e:91:d3:0e:b7:27:b6:f8:9c:6a:c1:72:30:66:
                    6f:ad:04:86:d1:5a:2b:7f:50:ab:9a:6b:77:03:7d:
                    cb:10:7a:5e:3a:3a:12:1f:74:dd:36:8b:ad:08:de:
                    eb:df:0b:91:cc:ea:d5:79:85:a4:44:5c:31:79:b4:
                    8b:a9:60:d6:83:87:74:0c:a1:93:7b:27:1e:0e:0d:
                    f8:9a:e0:86:93:83:1c:b7:f3:3e:67:d0:29:fe:96:
                    b5:50:e2:5f:c7:5b:42:50:d2:10:71:9f:e6:42:0a:
                    f5:9e:50:94:f3:79:49:d2:65:50:4d:41:fa:a6:35:
                    18:f5:5e:1c:25:4a:8d:ed:d0:75:71:ae:68:08:ec:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:3F:58:15:08:5C:DE:76:6E:35:02:F6:82:6A:BC:E7:22:81:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:41:7e:35:52:cd:b3:5b:bb:9a:f2:42:77:51:4c:21:cf:99:
         a4:9b:49:6e:5d:e9:18:73:59:5a:cd:ac:58:16:a8:d9:a4:4d:
         43:b6:66:43:87:fc:29:d1:30:90:45:5f:93:b3:ac:42:ba:95:
         f0:60:06:dc:5c:e2:9b:e5:19:0e:96:84:21:af:81:f1:1e:5b:
         ae:ab:ab:21:0c:7b:55:4f:ca:a9:ba:48:9e:8c:c7:6e:8c:7f:
         b6:17:e7:02:23:00:ab:f0:ad:b6:0d:d6:e1:a5:5d:ff:d5:7f:
         2d:00:91:e8:6d:ee:d2:b4:2d:5f:15:fc:37:70:a0:ac:48:7d:
         b7:91:c1:a1:d1:90:80:4d:17:2f:da:1f:54:43:0f:c2:a8:09:
         7c:21:fd:e5:d4:0e:8d:a6:6c:d9:60:db:b0:2d:69:cc:b3:60:
         b1:99:ba:92:ef:26:1d:ce:56:f1:31:d1:d3:ae:7f:07:c7:fc:
         dd:a5:65:12:96:60:f4:b2:94:f4:67:b7:54:ef:ab:1c:8a:53:
         00:6c:ac:e3:8c:3e:df:58:6f:42:47:dc:8c:76:7e:56:eb:6d:
         f2:72:db:e9:a4:bf:a6:f9:94:b9:48:0f:26:aa:7a:50:a5:84:
         4e:d0:74:5a:ce:21:61:5b:eb:24:7f:77:98:6b:6b:20:8c:4f:
         ec:6f:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:45:23 2024 by rpki-client on console-fra.rpki-client.org