Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa
File:                     dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa (raw, json)
Hash identifier:          sOV9dTeStfBJKweAuJqUKKzrkOWBtj4hifVKtVqpy9U=
Subject key identifier:   BA:06:A5:CC:F0:BD:5C:05:6E:4B:9F:83:7B:B4:CB:1F:27:BC:E0:F2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540BBBBD2EF649F8D131E0638
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa
Signing time:             Mon 18 Mar 2024 22:16:04 +0000
ROA not before:           Mon 18 Mar 2024 22:16:04 +0000
ROA not after:            Sun 16 Jun 2024 22:16:04 +0000
asID:                     396982
IP address blocks:        104.154.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:bb:d2:ef:64:9f:8d:13:1e:06:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:16:04 2024 GMT
            Not After : Jun 16 22:16:04 2024 GMT
        Subject: CN=517b9e7b-a04c-4fe9-8b4b-77e89cbbc1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:3c:ee:89:6c:2b:7a:e1:aa:ef:d1:74:17:
                    23:d3:fe:fa:3d:d4:5c:2c:ba:19:68:14:0b:dd:60:
                    0f:5d:8a:b7:80:d8:7b:b5:5e:9e:b9:b0:d4:26:5f:
                    91:e4:c0:82:63:ef:56:6d:cf:66:c0:eb:d3:ac:31:
                    b1:e4:9f:46:39:4a:f4:04:fd:9d:da:0c:0b:6e:ec:
                    c5:7d:b7:1d:d6:da:41:43:d1:66:01:1a:99:89:95:
                    7a:50:af:fa:70:b6:b1:3d:27:4f:15:b8:94:da:97:
                    aa:47:11:f0:60:0a:c9:ee:43:20:ee:de:9e:f1:a2:
                    30:b1:4c:f1:d1:8d:0b:dd:b9:91:5d:e5:37:60:8c:
                    79:80:c8:9e:27:05:55:b0:42:ea:19:1e:b2:89:2f:
                    b0:2c:94:b4:58:bc:3a:b2:ca:4d:53:2d:94:c2:5a:
                    10:26:ea:a7:61:0f:ba:0d:83:2a:d0:40:96:8d:2e:
                    09:a2:f7:a5:aa:b6:fa:ad:b5:2b:cf:fd:f7:79:b0:
                    c1:f1:32:6d:05:1a:55:65:10:b8:24:f1:83:92:3b:
                    54:05:d1:09:26:fe:86:33:45:94:86:56:e9:c0:3b:
                    7c:f1:33:7b:d5:9f:5e:77:71:8a:28:03:59:0d:69:
                    5c:78:51:30:cd:dd:a0:58:19:1c:a5:1e:ce:45:97:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:A5:CC:F0:BD:5C:05:6E:4B:9F:83:7B:B4:CB:1F:27:BC:E0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:91:fb:0a:56:da:69:8d:00:88:d1:33:eb:48:0d:bd:43:34:
         63:b8:2d:6f:16:cd:af:c0:14:38:8d:8f:08:f3:b6:0c:11:6a:
         92:ed:df:e8:99:80:52:c7:01:ef:39:e8:87:7e:df:70:e0:90:
         1e:48:8b:b0:e9:ee:2c:02:49:b8:c8:d5:83:b9:38:86:37:4e:
         4d:59:f4:c1:4c:0a:ae:a4:58:30:aa:ed:51:9c:76:d3:02:18:
         75:8f:46:39:59:f2:4a:fe:4f:e7:c3:cd:9d:76:46:eb:1f:9a:
         3c:7d:63:56:82:8d:57:f0:4d:ae:45:d1:fb:a2:09:2a:d4:f7:
         55:5a:f8:eb:19:cf:08:fc:8c:e2:fe:1a:75:4f:fc:87:77:60:
         36:f4:26:8a:27:c9:e0:09:3a:67:d3:9d:d4:60:37:03:0a:f4:
         ad:9b:ec:8d:0c:e5:0c:90:71:c3:26:f1:12:c7:2c:a3:96:57:
         78:0b:9b:df:95:e1:05:2a:06:5b:80:77:fe:50:38:14:fd:f5:
         98:20:86:9f:c3:ce:4d:83:7e:df:22:fa:92:47:1a:19:4e:22:
         76:da:80:66:9a:1e:61:48:21:46:d5:c4:09:c5:f5:e0:6d:c0:
         06:de:ba:36:ba:c9:d2:13:5a:c3:35:dc:09:4c:a1:8f:f6:2c:
         3e:20:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:50:13 2024 by rpki-client on console-ams.rpki-client.org