Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d2b463-fb46-3628-a1a8-a3d28da18923.roa
File:                     d7d2b463-fb46-3628-a1a8-a3d28da18923.roa (raw, json)
Hash identifier:          kU0r8caNiMIFsarYSP+Z020LnL2xUbPhYEeeswxAXvo=
Subject key identifier:   33:BF:4C:D3:73:25:0E:5C:2E:08:9A:EB:4F:68:D6:A9:C2:35:00:EA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540BA698792DC50DDCF0F28E8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d2b463-fb46-3628-a1a8-a3d28da18923.roa
Signing time:             Mon 18 Mar 2024 22:13:24 +0000
ROA not before:           Mon 18 Mar 2024 22:13:24 +0000
ROA not after:            Sun 16 Jun 2024 22:13:24 +0000
asID:                     396982
IP address blocks:        104.198.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:69:87:92:dc:50:dd:cf:0f:28:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:13:24 2024 GMT
            Not After : Jun 16 22:13:24 2024 GMT
        Subject: CN=9504511a-f986-4157-99fc-f6884134edf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:2b:70:b1:e5:a5:21:6c:ef:ea:a0:0b:81:
                    ef:60:87:73:8f:e7:06:e4:78:63:ee:dc:59:b5:54:
                    dc:f7:aa:1f:72:ff:47:d5:f8:57:eb:dd:54:9f:c0:
                    99:5a:7a:9e:9b:0a:4f:95:f9:a9:f0:66:19:9c:15:
                    b6:56:6d:c7:c6:1b:a0:ce:4c:ae:99:b1:f8:e6:f4:
                    9e:6b:31:a2:06:3c:f5:e8:be:48:59:39:eb:5d:3f:
                    c4:cd:94:a5:91:f3:0b:c7:57:b1:c9:f0:b1:da:9c:
                    1a:1b:ba:30:b3:1c:28:00:85:10:9c:82:52:a7:25:
                    7b:3b:ca:80:6f:bf:76:33:f9:cd:37:30:35:02:a1:
                    11:d6:24:b6:e8:0b:c2:15:ea:ae:eb:bd:e7:81:2f:
                    a1:9c:28:9d:43:26:62:18:6d:c9:11:05:be:f7:76:
                    8e:79:34:62:26:01:25:36:b5:c3:7d:f5:7f:ec:ba:
                    86:6d:9c:05:58:9e:89:04:83:51:b1:b1:e8:91:a4:
                    0f:45:8d:ef:af:06:6d:3e:6a:00:3b:82:ec:6f:34:
                    28:cb:6d:9c:d1:ed:0e:a5:32:61:08:ef:0c:e2:ca:
                    f9:21:6f:29:69:1e:21:3b:43:86:94:6f:cb:6f:93:
                    2e:02:b5:5c:2e:e2:ab:c7:1a:c3:3e:c0:1e:a0:d6:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:4C:D3:73:25:0E:5C:2E:08:9A:EB:4F:68:D6:A9:C2:35:00:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d2b463-fb46-3628-a1a8-a3d28da18923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:b8:2a:72:f6:f4:fb:89:dd:b3:52:0f:58:3e:f3:21:0e:
         20:2c:e4:29:59:a7:2a:27:b2:70:0a:62:ac:3c:13:49:e7:43:
         ad:0a:7e:41:6c:ac:55:f3:ee:c6:bc:64:7a:44:9b:17:26:b7:
         c3:82:cb:8a:23:39:e3:20:98:fa:c7:30:33:bd:51:11:d9:3c:
         b9:a7:c4:8a:3b:c9:73:14:85:d1:f7:0e:40:76:02:0e:31:96:
         db:a0:8d:1f:1b:5a:0e:a6:99:37:d3:63:e5:1e:92:c1:8e:21:
         84:f9:7c:b7:a8:06:74:7e:e6:24:de:b0:be:7c:23:4a:56:b3:
         e1:42:e7:23:7f:0c:fb:1b:83:a7:27:0c:d1:12:a0:00:95:82:
         0f:a3:9a:00:57:86:26:e8:4c:72:e0:ad:ee:54:42:35:60:1b:
         fc:49:30:02:9e:2c:b8:3a:a0:3f:2f:2b:84:53:59:66:da:02:
         21:a6:0f:22:1f:70:59:0a:e0:78:0f:23:9b:58:0e:b7:6f:0b:
         28:8a:cf:e1:c5:54:dd:5a:eb:3e:6c:22:26:1b:d0:6f:dc:43:
         77:26:78:30:57:91:1e:5a:01:35:a6:08:fe:a1:59:75:f1:d4:
         33:54:b0:5e:8e:27:78:14:74:2c:cf:d5:0f:e3:1e:48:5b:c7:
         bb:25:ac:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:08:26 2024 by rpki-client on console-ams.rpki-client.org