Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
File:                     dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa (raw, json)
Hash identifier:          wrFOaBqdVvDP9JgHA0+FnMrwYZYUgWHTHGXmv32Gu0c=
Subject key identifier:   F7:E6:09:57:52:04:AA:74:37:E9:62:8E:1E:1F:83:A4:69:7A:ED:F2
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858459368BA116FABA2344D025B00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     23470
IP address blocks:        104.156.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:ba:11:6f:ab:a2:34:4d:02:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=cd4064c7-3e1c-4a5e-b6ed-41031c835061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:b6:83:45:16:92:cf:b5:42:ae:e7:f6:3e:
                    73:70:cc:5f:d4:96:34:8c:0f:47:ef:be:e6:06:1e:
                    8b:24:57:d8:9d:83:1a:32:26:a3:07:a5:f1:af:63:
                    db:44:d6:a3:d0:15:93:c1:b3:a1:ee:e5:ae:28:a8:
                    fd:e7:84:11:31:03:00:b9:83:63:d8:fc:16:0d:01:
                    0a:4f:a6:b7:f1:ed:41:af:b5:d7:e7:26:82:04:48:
                    f4:db:7e:bb:a6:36:9e:4b:e7:5c:1d:75:b2:ac:4a:
                    24:be:e8:80:52:b5:ba:bb:19:b2:55:ef:b0:18:d3:
                    45:78:3a:f9:b9:a3:07:6c:bd:41:01:5c:5e:fa:9a:
                    d7:f0:43:1d:13:dd:64:1e:2e:f7:21:14:87:82:4a:
                    db:db:c4:c4:1f:dc:09:22:b0:f7:66:9a:07:58:70:
                    92:6d:7a:5b:6f:5e:fb:7e:d1:54:e6:23:bc:c4:e8:
                    58:3e:82:3c:f3:c5:30:fb:ad:9f:6c:ab:35:af:e7:
                    5e:53:94:55:fe:6b:2a:e1:84:09:e8:26:82:af:03:
                    16:c3:37:15:66:e5:e8:e7:00:6a:c1:22:e9:b0:c2:
                    6d:d3:a7:d5:d2:6e:87:40:e6:f7:f4:b8:c5:a1:45:
                    f2:e2:4b:e1:c3:e1:8a:37:56:b0:43:97:e7:3b:09:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E6:09:57:52:04:AA:74:37:E9:62:8E:1E:1F:83:A4:69:7A:ED:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/dd95e269-7c40-3c0a-bf42-77a3bf7072c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:21:0f:a0:61:55:d2:46:a2:b8:cf:47:8c:5f:03:23:01:a9:
         5c:f5:14:81:f7:80:66:cf:6c:fd:61:66:bf:7d:1c:ad:6c:50:
         cd:db:53:32:73:e4:79:4b:eb:5c:f5:17:97:04:48:6f:6e:77:
         16:0e:d4:e3:70:2a:a0:d8:7b:2f:79:5e:05:c1:9e:f0:b9:52:
         55:db:4e:51:91:80:ee:0a:71:c5:cb:4a:ae:59:0e:26:7f:aa:
         ae:a2:f3:3e:99:17:bc:85:19:5a:15:35:da:69:fc:0a:6a:50:
         26:22:99:81:12:5f:44:e4:45:0f:6a:da:32:31:5d:18:97:83:
         62:e1:9e:6d:c9:b1:46:d4:dc:03:da:65:ce:f7:5f:95:37:ae:
         48:3d:bc:f5:2e:73:63:46:1a:fc:cb:ec:1a:8a:82:b5:a3:99:
         bb:fc:b9:ed:c5:2c:35:53:86:b7:3c:14:bb:69:8c:9d:e6:08:
         14:00:b1:bc:e2:a9:f0:07:7c:95:ce:71:17:e4:08:d9:4d:13:
         54:64:07:fd:ce:45:c5:b4:5d:9b:2e:2d:1e:51:9e:c9:8d:43:
         18:3e:00:ee:cc:0c:ef:44:61:99:40:12:70:ba:ff:b4:6b:8e:
         8f:d3:7a:49:b3:94:2e:7f:99:d6:0d:aa:c6:41:f0:e2:d9:5a:
         c9:63:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:58:53 2024 by rpki-client on console-ams.rpki-client.org