Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/90925d72-6482-3d0d-b571-8b76bfd22cd2.roa
File:                     90925d72-6482-3d0d-b571-8b76bfd22cd2.roa (raw, json)
Hash identifier:          FJMYRMvG2WWUZ6l/WXN21VQ0qM5Dl5LaZYE818RgH9M=
Subject key identifier:   FA:5B:49:FD:76:39:57:10:9C:81:7D:55:08:FB:6E:12:B5:2E:CD:3D
Certificate issuer:       /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Certificate serial:       010D0C9F4328584507F01E3E99A471FA63C44300
Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/90925d72-6482-3d0d-b571-8b76bfd22cd2.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     13438
IP address blocks:        104.232.42.0/24 maxlen: 24
                          2602:fc78::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:1e:3e:99:a4:71:fa:63:c4:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=7c690a20-696c-40d1-affc-c4c30a60263e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:3e:18:23:b9:7f:6a:80:c9:a9:30:e6:e2:
                    d4:d9:91:be:25:7a:22:c2:b3:d7:ea:8a:34:3a:85:
                    55:54:63:b1:4f:dd:27:93:86:f7:da:5a:b8:e5:4a:
                    7f:17:7d:0b:b9:df:d6:63:e0:8c:68:cb:22:4f:38:
                    53:aa:03:96:35:fb:5d:d1:db:34:c0:e6:ba:5a:19:
                    fd:ae:55:f2:2b:4f:5a:db:c1:f8:4e:9e:0f:af:b7:
                    f7:fa:16:06:4f:13:77:fa:50:86:52:77:49:64:c5:
                    3a:b4:21:c6:df:5e:c3:d3:9a:79:9e:02:c4:2a:82:
                    b7:34:fb:bc:d9:f9:6f:9f:81:34:5a:64:2c:88:60:
                    7d:10:0c:78:55:a7:ef:2f:af:40:3c:28:bd:da:43:
                    3d:1e:99:c5:8b:fa:59:4b:ce:5e:d5:ed:02:11:f5:
                    35:d3:3b:db:e4:7b:22:eb:e8:a4:64:85:97:51:45:
                    8b:18:51:ee:07:ff:a5:3a:d1:0d:f8:5a:17:ac:25:
                    39:11:2b:3a:ee:cd:25:3e:5b:5a:51:2b:d3:63:bc:
                    bd:22:e4:51:c3:fb:be:9c:0d:33:15:9d:65:bd:ed:
                    11:e8:61:f5:33:0f:e1:89:8d:91:09:45:2a:cd:54:
                    f6:6e:fe:27:93:6f:bc:ae:5f:34:4f:2e:83:d6:93:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5B:49:FD:76:39:57:10:9C:81:7D:55:08:FB:6E:12:B5:2E:CD:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/90925d72-6482-3d0d-b571-8b76bfd22cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl

            X509v3 Authority Key Identifier:
                keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.42.0/24
                IPv6:
                  2602:fc78::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:29:b5:8f:c6:3d:c6:ec:7e:6c:21:69:22:31:1b:b2:f5:
         b5:7d:69:52:3e:17:62:7d:73:cf:2e:5b:08:ec:be:44:06:18:
         57:ae:17:80:2f:08:cb:f9:db:90:36:c8:ea:79:9d:9c:5f:7f:
         78:2f:cc:ee:9b:97:b2:15:ef:d0:56:f8:d7:6c:4f:9a:34:19:
         23:20:ce:b1:1c:f5:7c:c3:88:bc:3c:f5:37:85:81:77:8e:ec:
         49:6b:5c:39:5d:56:81:a8:5a:ab:4a:aa:b1:b6:08:6b:f9:fa:
         47:82:db:b0:71:d9:92:97:97:07:00:2d:c3:f5:47:03:e7:b1:
         de:5d:ae:44:fa:3f:26:9c:f4:ef:b8:c0:96:b2:38:70:af:d7:
         f4:d4:af:92:54:92:32:2a:0f:56:c5:06:6a:3c:f1:8d:76:fb:
         0c:cd:5f:56:3e:70:5c:82:21:4e:7b:20:b6:43:62:b5:d8:7b:
         7e:d9:71:27:2a:ea:5f:2e:f0:f6:40:15:e5:21:1a:4c:57:10:
         24:63:ef:54:5f:fc:55:4a:91:30:ec:10:a6:c4:8e:b7:de:9d:
         54:97:ef:b1:e5:19:77:0b:10:e9:8a:4f:2d:bc:13:fc:0c:46:
         76:31:bb:e3:f1:4d:cf:3d:d6:f4:ce:b9:32:eb:a4:f3:90:ee:
         9f:31:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:14 2024 by rpki-client on console-ams.rpki-client.org