Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa
File:                     407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa (raw, json)
Hash identifier:          ivozDMlcBPfjsw0mkpol+vsALE9LA3MBaTrWGuQ9n34=
Subject key identifier:   2C:4E:2F:EE:B3:B8:D2:30:54:35:13:00:C7:2B:A9:B6:F3:9F:A4:C8
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584548081FF7F11B2033A72CE980
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     16433
IP address blocks:        104.243.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1f:f7:f1:1b:20:33:a7:2c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=0345c806-4067-4254-9d13-17cee648f3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:64:90:77:93:0c:33:3e:ce:b6:96:d3:9e:
                    ee:45:09:cd:56:d6:05:f1:f9:0e:99:04:5a:fc:ff:
                    ae:c5:a0:9f:60:da:ab:00:61:3c:47:62:a7:bc:7c:
                    ba:3a:57:9b:c5:c9:91:a6:af:53:4d:2b:dc:4a:29:
                    0d:5f:d8:44:ea:d8:f9:53:86:f2:50:0c:13:4c:91:
                    12:08:62:68:dd:47:0a:fa:68:7d:80:45:1c:41:44:
                    13:ff:8d:b0:3d:82:d9:17:73:df:a6:f7:c1:28:df:
                    69:52:58:cd:f9:b4:37:bb:9e:f0:03:cc:f3:21:9d:
                    fd:81:fb:4c:d9:87:9c:16:ce:f6:1e:c6:41:b7:e8:
                    3e:4f:0f:93:c8:9b:71:c5:4b:01:ab:27:5a:79:37:
                    0a:cc:c9:b1:49:7e:76:5b:f1:09:aa:68:db:1f:54:
                    89:8a:d5:5c:f4:4a:16:25:cc:00:55:2b:4d:bc:02:
                    45:ee:00:5f:7b:28:31:97:c2:20:af:12:bc:32:7b:
                    2e:2c:32:d9:68:03:2e:b3:29:e8:c5:b5:6a:ab:c6:
                    93:82:84:1b:24:bd:69:d8:08:8a:bc:ae:25:c8:06:
                    96:77:d7:1d:75:0c:cb:9e:52:a2:fb:a0:29:22:e8:
                    d0:a3:5f:35:a2:d7:a5:0c:72:b5:00:6e:5c:ce:fb:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4E:2F:EE:B3:B8:D2:30:54:35:13:00:C7:2B:A9:B6:F3:9F:A4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:67:91:3d:aa:13:07:2c:17:0c:3b:5b:96:01:87:c0:36:
         93:94:a0:4b:92:21:64:7b:90:fe:8e:a8:c5:4c:f0:bb:52:33:
         f7:33:4a:09:ec:af:09:33:0c:45:9b:3b:96:e7:16:28:37:62:
         84:3d:a5:2f:3a:20:36:f4:18:45:e3:fd:57:77:3a:73:83:b6:
         24:82:b8:74:73:c6:ba:cb:48:76:7b:49:96:d1:db:f4:a0:23:
         2a:ed:f9:6b:e4:b5:b9:5e:f0:40:39:d3:ec:19:05:df:95:40:
         59:35:e8:41:f0:e5:1d:3d:cc:78:a6:f4:69:c2:1d:aa:18:d2:
         11:a1:c1:89:d2:4d:3d:62:1f:9a:e5:e4:55:f7:ea:13:b2:93:
         35:47:d0:c8:ca:f9:a7:73:b1:65:9b:43:eb:dc:fd:df:fd:7d:
         04:e2:95:43:ce:da:3c:24:ec:f9:78:53:76:e0:c9:21:f6:e4:
         01:33:ac:6d:e9:a6:40:6a:e9:c1:88:93:a1:9c:77:82:5c:aa:
         d2:82:48:da:88:a9:e0:40:8d:86:23:fb:da:78:93:9c:ec:52:
         4c:7f:be:88:3d:09:87:b4:ce:99:fa:fb:72:f0:aa:1c:93:98:
         5d:46:2a:83:17:35:b2:20:ef:aa:dc:87:0a:cb:31:22:e2:56:
         7a:7c:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org