Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c6795d5-f46b-35f6-8643-14188ce72d97.roa
File:                     2c6795d5-f46b-35f6-8643-14188ce72d97.roa (raw, json)
Hash identifier:          I9ZHNWTVA1Kl84mP+8ui2t0FIhrKQT/iNjLeKQbSceI=
Subject key identifier:   B8:48:22:F6:EB:90:C4:8E:4E:05:79:9D:06:72:04:B0:5A:13:B6:94
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540BCAEC2F3A9327E83AECAE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c6795d5-f46b-35f6-8643-14188ce72d97.roa
Signing time:             Mon 18 Mar 2024 22:17:59 +0000
ROA not before:           Mon 18 Mar 2024 22:17:59 +0000
ROA not after:            Sun 16 Jun 2024 22:17:59 +0000
asID:                     396982
IP address blocks:        104.155.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:ae:c2:f3:a9:32:7e:83:ae:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:17:59 2024 GMT
            Not After : Jun 16 22:17:59 2024 GMT
        Subject: CN=c8b93dee-0fd1-40f9-8eb3-f4751024463c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:ae:da:01:02:e4:53:ae:1c:5b:70:ff:b1:
                    06:a0:a1:12:64:b3:00:16:f7:41:0a:04:f1:ae:73:
                    08:fd:0c:2a:b9:64:b6:6c:09:2c:c5:4d:c7:ac:c3:
                    08:ca:8f:99:cd:be:8e:b3:69:2b:bd:6d:24:d7:e9:
                    1d:dc:56:b9:96:1c:83:d3:39:e3:09:f4:02:0f:72:
                    67:fa:10:b5:ce:ea:6b:f3:63:05:f0:71:51:fe:16:
                    09:7f:64:fa:c7:27:d5:52:76:dd:58:2a:39:0f:ba:
                    73:15:a8:0a:3c:d8:36:bc:16:d5:2b:89:9c:8f:d6:
                    70:0d:89:fb:5d:8e:50:1b:49:3b:53:68:93:57:e2:
                    b6:87:7f:f4:ef:a3:d8:aa:61:7d:f7:21:49:2e:74:
                    c9:f4:de:e5:73:30:f4:e5:08:3d:e1:be:36:a2:83:
                    94:46:53:05:09:63:cd:83:54:7b:d6:59:09:38:f1:
                    75:79:b2:20:d8:a6:df:92:eb:41:3c:93:fc:b0:d5:
                    9b:11:7e:cf:a2:db:07:e0:40:be:96:a1:89:29:58:
                    44:94:36:1b:77:e8:41:77:ca:23:06:40:58:ed:2e:
                    9b:cf:b6:38:df:c9:d9:56:6b:8b:3c:19:15:fc:47:
                    3b:cc:a0:d6:ce:d0:32:d0:a3:27:c5:ce:ec:e1:fe:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:48:22:F6:EB:90:C4:8E:4E:05:79:9D:06:72:04:B0:5A:13:B6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c6795d5-f46b-35f6-8643-14188ce72d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:31:4f:1e:11:7e:a9:5e:7f:5c:5a:20:43:de:66:89:99:c9:
         03:e2:47:d6:db:7e:c2:a3:ac:78:9e:bc:02:45:cc:a5:aa:33:
         53:2a:8d:94:d7:92:3e:35:95:cb:30:a3:60:7e:a2:64:3f:42:
         60:7f:62:f8:4d:62:e8:c2:09:19:f5:8b:3a:a5:1f:d7:66:b1:
         23:c0:24:0f:50:f9:f6:f1:68:93:13:4f:2d:21:2e:ac:4d:71:
         91:79:fe:67:77:90:87:a0:a3:9a:07:14:37:ee:4e:62:29:3a:
         cd:04:1f:0b:cb:68:35:b6:11:e3:b1:22:5a:98:95:fe:8d:cb:
         be:f5:72:cf:d5:b0:16:fa:b4:f0:38:c4:93:4c:7a:26:4e:5e:
         97:f8:8b:ff:16:0e:bf:c9:93:5e:a4:00:9c:e7:80:d6:a4:e6:
         e9:25:ff:6a:47:92:17:3b:ca:1f:ba:dd:67:53:83:35:0d:b4:
         c1:39:f0:c2:cf:9c:34:e1:3c:e0:4f:42:08:3d:ca:50:73:f5:
         c8:1a:87:85:31:2c:a4:3a:5a:58:bd:f7:55:92:1f:7d:8f:4d:
         60:b4:62:a8:a9:5c:c2:99:8c:1d:26:93:44:a0:1b:31:65:49:
         c4:dd:ea:69:70:60:a1:58:e6:f5:4a:4d:2f:a7:35:ad:55:98:
         21:80:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:04 2024 by rpki-client on console-fra.rpki-client.org