Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c33deb7c-2e84-3677-a90e-973de04fa5de.roa
File:                     c33deb7c-2e84-3677-a90e-973de04fa5de.roa (raw, json)
Hash identifier:          mDgYJnloCX/DPm7CMiZ62kQch/vKCiFWB037pE/OWj8=
Subject key identifier:   59:FA:D2:E2:BA:8F:19:E6:D2:B5:5A:56:35:19:03:3A:4C:F9:97:EB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584540B77FCA935F1012209AA480
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c33deb7c-2e84-3677-a90e-973de04fa5de.roa
Signing time:             Mon 18 Mar 2024 22:07:32 +0000
ROA not before:           Mon 18 Mar 2024 22:07:32 +0000
ROA not after:            Sun 16 Jun 2024 22:07:32 +0000
asID:                     36040
IP address blocks:        104.237.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:7f:ca:93:5f:10:12:20:9a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 18 22:07:32 2024 GMT
            Not After : Jun 16 22:07:32 2024 GMT
        Subject: CN=3233a833-c5d7-4668-8d01-26f5c6e93414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:8d:54:77:07:73:86:bc:c6:5b:61:74:12:
                    ab:88:66:6a:49:82:c9:30:f3:28:77:9f:fb:11:0b:
                    96:50:bc:42:41:eb:fd:43:db:d4:84:93:19:97:00:
                    5a:56:2b:8b:48:7d:be:a4:ee:1b:c1:27:d0:87:de:
                    d7:4c:34:1e:fc:f0:5b:52:77:0b:72:72:03:49:1b:
                    31:db:87:97:ff:aa:42:45:40:4f:91:5c:d7:b1:93:
                    2c:25:62:3e:95:12:cf:a5:47:dd:40:8d:6f:25:b8:
                    ed:2d:8b:ef:ef:06:f7:f4:f3:7e:3f:82:d0:10:dd:
                    9a:25:5e:d6:c7:51:2a:3b:8e:a7:c1:f5:e7:71:47:
                    80:0a:50:44:e1:b6:40:6d:ad:24:f2:27:74:ee:6f:
                    b6:d3:42:67:e4:de:54:94:19:8b:cf:85:af:9a:a8:
                    b0:94:70:dc:f4:c9:7b:04:44:0d:82:f3:8a:a2:ae:
                    14:b0:d8:db:af:3d:9e:31:dd:95:14:c1:34:e3:81:
                    f2:ea:54:ae:b6:7f:61:68:04:85:2c:5a:b0:c5:d7:
                    97:e4:1e:ca:5f:ef:dd:c5:2e:a3:be:f9:1c:16:e5:
                    85:e2:89:bc:b2:f5:ad:50:67:52:a7:68:1a:f6:37:
                    6f:97:f9:08:b7:f7:eb:32:5f:89:a4:dc:23:e3:ad:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:D2:E2:BA:8F:19:E6:D2:B5:5A:56:35:19:03:3A:4C:F9:97:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c33deb7c-2e84-3677-a90e-973de04fa5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:aa:21:68:a2:a6:6f:31:1b:b1:5d:cd:c3:a2:83:03:49:cf:
         87:2a:99:0e:8c:ad:7f:1e:85:65:c2:67:b5:8b:f9:4e:91:55:
         7b:1b:dd:b1:72:81:78:b5:81:f7:69:01:82:db:56:86:0d:65:
         cb:8d:4a:66:f7:da:4d:d7:a3:43:91:ad:e8:b4:9f:56:6a:e1:
         fc:b3:03:c1:24:6f:ae:c0:2a:4e:8c:a6:e8:ee:29:c3:10:55:
         ee:be:d7:37:ae:62:70:8f:c0:66:80:09:58:f4:2b:3e:aa:fa:
         67:71:02:2f:04:5a:d6:35:85:7a:d1:97:fd:72:19:34:a3:8d:
         16:fc:d8:89:48:78:8a:30:27:7f:b3:f1:96:dc:44:8b:4e:b7:
         88:f5:d0:57:a2:a3:e8:9f:d3:c0:76:16:f1:cc:5b:4b:c7:80:
         52:50:8f:94:ba:2d:ff:0e:e4:85:d1:43:99:54:37:8c:98:46:
         29:eb:95:58:8f:f2:48:bc:a4:c0:45:30:39:1f:cb:4b:aa:ca:
         94:d6:1c:af:e3:3b:79:49:e3:d9:f8:9d:0a:d9:54:5f:b4:a4:
         70:16:0d:5d:6c:f4:ce:5e:0d:06:8d:42:ea:52:bc:ea:bc:f7:
         ac:14:a4:ef:cd:7a:de:0a:f2:15:da:11:5a:c3:c9:df:29:b4:
         8d:05:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:09 2024 by rpki-client on console-fra.rpki-client.org