Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/feaae0b6-acd6-323c-9b03-282aa05be908.roa
File:                     feaae0b6-acd6-323c-9b03-282aa05be908.roa (raw, json)
Hash identifier:          bVJcnEjm58U24/ROdQYY+nrmP+jM001K1WlwTQHjIek=
Subject key identifier:   8B:CC:BF:80:C1:93:42:52:BC:68:FC:7E:D3:18:C8:1A:A8:8B:45:A0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540BACF281BECCB8019A9E640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/feaae0b6-acd6-323c-9b03-282aa05be908.roa
Signing time:             Mon 18 Mar 2024 22:14:12 +0000
ROA not before:           Mon 18 Mar 2024 22:14:12 +0000
ROA not after:            Sun 16 Jun 2024 22:14:12 +0000
asID:                     396982
IP address blocks:        104.154.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:cf:28:1b:ec:cb:80:19:a9:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:14:12 2024 GMT
            Not After : Jun 16 22:14:12 2024 GMT
        Subject: CN=7c3d8b03-1d3f-41ae-b9ac-c3b253dd922b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:60:b8:d8:bd:aa:79:3b:4f:85:c7:87:ac:11:
                    de:6d:c7:71:1b:14:08:82:aa:9d:79:be:6d:f5:02:
                    39:67:13:0a:9b:e4:3e:76:e5:08:3e:b9:b9:1b:28:
                    67:6d:70:73:4e:31:7a:1f:5e:39:1e:e8:9b:a4:f8:
                    af:87:1c:b9:79:fc:27:5c:4f:2b:12:d2:bc:a6:55:
                    d9:ff:d9:89:9c:87:d9:bb:e6:2d:29:08:92:32:33:
                    d3:8d:a6:81:f6:3c:7d:72:c3:8c:85:4a:88:35:40:
                    6e:5e:df:e7:80:52:7e:d9:41:01:b7:6b:23:fe:8f:
                    c5:b2:98:bd:f9:a6:1e:59:4d:2c:0b:07:70:83:88:
                    6b:61:73:7d:71:71:50:49:9c:e9:dd:b0:4b:52:c9:
                    a4:94:1f:68:2c:1c:fe:16:a0:fd:23:05:b8:61:b0:
                    85:e7:19:4c:86:bc:3a:b6:24:52:41:7e:ee:d6:44:
                    03:d3:4e:c3:f3:3c:f9:e7:a5:12:84:5b:14:63:39:
                    6a:16:1c:bc:ee:fc:30:8d:ea:fb:51:b6:c4:b8:c5:
                    d7:34:31:66:a4:bb:cc:0e:a4:13:0b:fb:42:b0:70:
                    b6:4a:1e:ab:3b:ae:83:4c:c6:38:ff:cc:3a:5c:61:
                    d6:ac:fa:d7:00:dd:f9:2e:fd:a8:79:f4:26:e6:6c:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CC:BF:80:C1:93:42:52:BC:68:FC:7E:D3:18:C8:1A:A8:8B:45:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/feaae0b6-acd6-323c-9b03-282aa05be908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9c:35:69:2c:8f:e1:5a:36:d5:82:b2:b7:63:3d:b0:a2:08:
         60:a6:2f:79:7e:71:2f:b1:95:7f:48:8a:f5:f4:f5:6d:e3:d8:
         d3:24:1d:40:12:1c:e3:b0:6d:b8:3f:d8:87:ad:77:dc:da:d6:
         d6:5a:94:4b:cd:b6:4c:87:e0:2c:f1:ed:46:67:3d:12:0a:5f:
         46:21:3a:ed:11:8e:ae:8f:c5:55:76:e5:34:98:cb:92:06:a3:
         a4:e7:2f:03:07:91:98:d5:87:e1:4f:3e:78:92:e0:14:94:ee:
         f6:c7:70:62:27:49:ed:a9:2a:f2:ce:3a:02:9b:01:fe:66:05:
         37:6c:19:69:aa:4e:c5:a0:df:e3:19:32:66:2d:b6:79:af:c4:
         a1:8d:fc:42:cb:71:89:ca:e1:c8:33:9c:ec:1d:29:bf:36:67:
         62:2c:74:98:0a:22:72:a5:c3:fd:4b:ce:76:59:9e:f5:4e:c3:
         47:a2:c2:be:2e:98:4b:01:6c:fe:a2:80:be:8b:1a:0c:b4:41:
         76:97:02:dd:61:62:c3:74:36:b4:66:fd:86:37:35:c5:c3:dd:
         66:c0:72:db:88:71:cb:57:bc:7b:f0:d1:f0:64:02:49:8b:24:
         04:03:e4:ad:cb:37:57:2a:d3:76:5a:ac:90:5a:2b:cd:96:1f:
         ea:18:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:08:36 2024 by rpki-client on console-ams.rpki-client.org