Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8a77a1ce-1ae7-3067-bed1-0f8209cb06ec.roa
File:                     8a77a1ce-1ae7-3067-bed1-0f8209cb06ec.roa (raw, json)
Hash identifier:          da/uMCqJIFDGO9sVWvysZRk6ryt3+CrBF20B2P4+4rY=
Subject key identifier:   1D:FD:10:37:95:F8:69:A5:D2:F8:61:EB:EB:45:77:E3:EA:03:54:17
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584540BADB8A4D0E386007EEAB10
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8a77a1ce-1ae7-3067-bed1-0f8209cb06ec.roa
Signing time:             Mon 18 Mar 2024 22:14:18 +0000
ROA not before:           Mon 18 Mar 2024 22:14:18 +0000
ROA not after:            Sun 16 Jun 2024 22:14:18 +0000
asID:                     36040
IP address blocks:        104.237.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:db:8a:4d:0e:38:60:07:ee:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 18 22:14:18 2024 GMT
            Not After : Jun 16 22:14:18 2024 GMT
        Subject: CN=e2234d37-5b3d-45e3-80d4-c96e0dd81a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:e3:69:89:94:50:c3:9c:78:a6:4b:9e:82:
                    c9:bb:dd:d5:33:6f:76:11:16:28:82:84:bb:07:bc:
                    24:4c:54:cb:10:3f:9e:b8:d4:52:e4:03:bc:e1:e2:
                    74:10:cb:6e:8e:bc:45:34:3a:a5:e1:36:5d:1b:bb:
                    68:57:d1:d8:c8:59:aa:d7:b6:dc:0a:2d:5e:d6:9e:
                    44:0f:68:74:db:3b:10:0b:8a:fa:e4:b3:d4:fa:c6:
                    cc:f0:76:24:5d:f9:a8:ad:d4:ec:5a:cd:6d:01:ae:
                    70:12:b0:c0:5d:25:68:a7:0c:60:0b:17:4b:b8:6b:
                    cd:95:ce:dd:f4:54:b1:04:62:44:34:91:f2:02:40:
                    6d:50:3b:e7:cd:66:74:84:46:d0:a9:30:b3:0e:93:
                    a7:c3:68:1a:d9:8e:98:1b:02:3d:c3:16:c2:a3:80:
                    97:f8:6b:24:2b:9d:ee:02:94:a9:0c:90:3e:69:a4:
                    1f:24:de:94:24:7e:d5:84:e3:87:30:c3:4d:c7:b2:
                    b4:3e:59:b7:a6:77:36:09:49:44:09:48:09:22:b2:
                    d0:c6:6c:cb:56:85:39:e9:6f:4e:84:6a:23:61:c2:
                    a8:b4:1e:8a:18:b5:20:9b:ff:ec:84:fb:ce:4c:a8:
                    56:89:91:91:d4:0b:7f:3f:e3:8f:cd:ae:d2:b0:20:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:10:37:95:F8:69:A5:D2:F8:61:EB:EB:45:77:E3:EA:03:54:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8a77a1ce-1ae7-3067-bed1-0f8209cb06ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:9c:4d:87:91:a0:64:25:02:49:e3:6d:df:98:2d:34:99:
         36:dd:14:23:ca:26:26:40:fa:3d:9b:64:77:e6:8e:0a:a7:ec:
         b1:fe:e9:3b:9d:fc:40:39:57:89:8d:fc:c1:41:62:f9:05:35:
         30:8f:dc:5e:52:3f:a1:76:fc:21:0d:90:27:b3:ca:6f:da:8b:
         b5:44:e6:5e:5c:52:3f:6f:ce:97:cc:e9:2c:89:e4:ed:fc:f6:
         74:2e:b9:b9:57:2e:35:b7:d9:84:72:20:ea:45:02:7b:57:27:
         1a:1b:84:0f:03:45:30:16:c8:12:b9:c7:0f:b8:4d:05:70:c7:
         82:c5:65:65:24:a0:1d:cc:03:8b:88:f3:67:42:1f:8f:d3:49:
         d0:bd:a6:b6:48:a3:0b:dd:64:7e:58:5c:74:8c:97:b6:90:51:
         87:99:15:bf:c3:36:3c:71:42:70:43:a3:67:ba:b8:aa:cc:dc:
         f1:19:ce:07:a8:a0:a1:c4:b5:8a:66:70:12:54:e6:fd:6e:3b:
         c8:f0:77:cd:9e:c6:76:49:00:6d:55:3c:0c:f1:d6:a7:67:98:
         94:4b:67:16:34:50:8e:cd:e9:91:60:bc:99:8e:dd:fa:f0:d0:
         aa:ee:16:b8:da:14:06:89:27:0a:57:cf:7a:69:e4:05:45:aa:
         9b:2e:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:09 2024 by rpki-client on console-fra.rpki-client.org