Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa
File:                     ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa (raw, json)
Hash identifier:          XO8qC8jgg/OhTZZx5+FGwKm2GvTHhDA3+JRpa5uXudU=
Subject key identifier:   6B:2E:4F:4A:71:4D:A7:71:74:D2:FE:B2:76:48:03:09:BA:36:D4:71
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584540B962AC9C012D7A6209A000
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa
Signing time:             Mon 18 Mar 2024 22:11:20 +0000
ROA not before:           Mon 18 Mar 2024 22:11:20 +0000
ROA not after:            Sun 16 Jun 2024 22:11:20 +0000
asID:                     36040
IP address blocks:        104.237.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b9:62:ac:9c:01:2d:7a:62:09:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 18 22:11:20 2024 GMT
            Not After : Jun 16 22:11:20 2024 GMT
        Subject: CN=93aaecd8-778c-469e-a4b7-ec61b24d715e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a1:14:75:a0:ee:58:5c:23:e5:38:4b:70:d8:
                    9d:69:ed:c5:58:d3:7e:05:72:40:a8:24:4a:aa:4a:
                    1c:8a:80:7f:9a:0c:de:03:55:fc:c0:16:0b:bc:cb:
                    35:11:95:cf:81:9e:e4:92:96:f1:df:dd:a4:11:29:
                    96:df:fb:dd:cf:b9:38:32:87:76:26:97:3f:a2:6f:
                    1a:b5:9a:cf:46:cd:d8:21:c7:a6:d5:d0:cc:3d:82:
                    c1:95:af:d2:fb:7f:f2:58:3c:78:9a:a3:a4:bf:3f:
                    a8:17:66:62:06:17:cc:9c:0c:7f:2f:35:c6:b2:cb:
                    99:b5:d6:3d:30:de:34:f0:cf:65:bf:b5:9e:f2:44:
                    48:88:19:f9:f9:83:7c:14:6e:fa:00:66:b7:5f:d5:
                    11:cd:11:6f:02:7c:64:34:af:ba:a0:68:48:a5:4e:
                    d9:9f:f6:df:a2:4d:66:22:f8:5b:c1:7f:27:47:87:
                    f6:7a:78:91:0f:54:e4:bc:26:e5:73:b4:7c:60:f4:
                    c0:6e:12:38:ea:81:c0:dd:60:21:e5:22:2c:52:e0:
                    ce:98:b8:e3:04:6d:ff:63:75:74:f2:5e:f6:17:3f:
                    b1:8c:3e:64:25:81:da:5c:0f:2b:87:cd:f9:eb:bc:
                    50:63:0b:e3:60:18:7a:01:cf:ef:2c:de:04:d1:c1:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2E:4F:4A:71:4D:A7:71:74:D2:FE:B2:76:48:03:09:BA:36:D4:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ee3821bf-3e5b-32e3-aa31-b949e21eb26d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:04:1f:9a:f2:02:0a:b2:41:6a:55:59:06:96:f8:87:a3:d8:
         a6:2e:10:96:b6:cf:d7:97:7e:cb:60:81:8f:53:1c:9c:21:2a:
         22:c3:49:65:a9:12:a0:21:be:d4:b6:2d:4c:04:ca:3f:29:9b:
         e5:ea:19:f2:7c:70:d8:10:88:be:cb:d3:69:65:d0:59:4a:d0:
         fb:33:65:a2:91:47:01:04:24:2d:60:a1:eb:8a:34:ad:27:46:
         a3:94:a5:39:fc:08:68:64:c9:b9:15:78:b8:10:3a:ea:98:36:
         8d:f7:a4:3d:88:21:8d:5d:5b:85:d0:4b:85:2a:d0:eb:54:f3:
         41:7a:80:dc:c1:7d:5d:ec:40:55:84:f2:fb:65:20:7a:62:f1:
         eb:71:ce:14:52:ce:72:9c:48:6f:58:f4:b0:3a:d7:66:c5:1d:
         86:7b:df:47:b4:fc:bc:dc:78:6d:0f:47:51:1d:c2:2f:c6:0f:
         c2:7b:74:40:86:e2:c3:ee:04:3a:5a:60:6e:db:c8:55:c6:14:
         3b:4e:69:a3:20:47:74:c4:b7:9e:ce:0e:72:96:8c:69:fe:6e:
         e4:d3:12:ac:d3:35:09:ec:e6:04:04:3c:a0:0a:96:50:dd:48:
         52:2f:52:ca:56:d9:b9:23:93:df:b8:66:4d:44:aa:ab:a6:c1:
         38:a2:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:27 2024 by rpki-client on console-ams.rpki-client.org