Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa
File:                     499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa (raw, json)
Hash identifier:          d7QKfvzx8Z+e0fXWgibcHqzIBZkxUo9tSM3XMhUveH4=
Subject key identifier:   8A:47:3D:A5:E3:96:62:F6:10:28:76:90:CD:6C:E3:89:12:6A:59:D9
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584523DAFBA366A17A662E39AB20
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     21559
IP address blocks:        104.218.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fb:a3:66:a1:7a:66:2e:39:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=2c6f13fe-6a07-4fb1-a974-2100e8bdc6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:76:0a:57:93:f3:2d:eb:6b:3c:10:ee:d1:
                    9d:1b:fd:3e:88:fc:90:8c:a2:48:ad:a6:17:57:99:
                    79:d0:8e:11:cb:e4:e5:38:88:58:78:c4:32:2d:34:
                    0d:99:87:5b:3c:1e:4c:73:42:27:37:db:a9:28:00:
                    c5:e7:f0:0b:9c:47:6f:4f:7a:e2:03:d0:60:0d:f7:
                    e1:4d:28:7f:b2:68:a1:e7:de:79:c8:b3:23:f3:1a:
                    e7:32:33:bc:80:cb:3a:05:27:de:6b:a1:42:7f:99:
                    04:c8:20:4f:e4:59:7a:d1:78:9d:68:cd:2a:9f:1d:
                    fd:5e:aa:bb:79:6f:46:0c:da:63:50:0b:a6:a8:a2:
                    26:04:49:0b:2c:64:20:bf:75:08:19:ed:81:67:1c:
                    d2:c3:ce:69:82:24:57:1c:2c:d1:da:36:00:25:72:
                    d5:0b:58:4b:8e:7b:43:3a:2b:12:60:c7:4e:2b:71:
                    3a:37:38:33:8f:4b:2b:38:78:15:3c:94:6b:a3:31:
                    db:c9:07:47:9a:81:a4:94:29:38:f6:82:e2:25:60:
                    34:77:ba:eb:9a:d6:88:4b:05:e9:f7:4e:bc:ba:a9:
                    04:c2:a1:ba:f8:3a:0f:d8:40:aa:f8:e4:ba:8c:4b:
                    05:c6:68:5b:9b:50:4b:6b:8e:18:42:6f:d8:4b:a9:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:3D:A5:E3:96:62:F6:10:28:76:90:CD:6C:E3:89:12:6A:59:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/499cf111-e9c6-38d0-a6ba-d9d43accee6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:34:1c:4d:9d:7c:4f:68:ea:e9:c4:37:b0:51:59:3f:ec:
         a4:4a:70:3b:a9:10:aa:9f:71:b5:a0:a0:65:ca:0f:07:64:29:
         d9:50:4b:ef:29:69:51:46:8e:d8:da:02:ac:77:fc:8d:c7:94:
         e9:ac:56:8d:6e:93:36:9a:bb:6d:76:ae:57:39:90:1b:29:d1:
         08:34:34:84:b0:fc:cb:de:c1:41:a5:fb:d4:a1:a1:8a:08:ae:
         51:5e:df:56:93:fb:78:8d:94:e1:d8:93:91:37:89:c8:19:e0:
         06:22:5f:d0:d8:3b:6a:36:4e:a6:48:3c:9d:4b:24:2d:34:2c:
         fe:e4:b6:5f:7d:54:69:76:b9:d6:c6:30:11:df:c5:6e:9d:66:
         4c:66:e1:21:70:d5:2a:4a:fe:8d:c2:d8:21:ae:9d:23:2a:00:
         e0:fe:98:a4:09:4a:70:f7:e6:c3:73:a8:c5:e7:90:f4:23:5e:
         c6:5f:56:75:c0:2e:10:ba:02:d2:75:08:7c:4f:9e:c5:22:3e:
         86:45:5d:e1:3d:7a:0c:3b:43:e8:e5:93:f9:cf:0b:f7:3b:87:
         04:a3:40:7b:34:2d:eb:29:62:54:8f:3c:88:76:58:09:0f:8a:
         d1:f6:03:a4:7c:60:e7:ea:56:2b:eb:cc:8b:46:35:63:0f:45:
         d5:47:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:21:57 2024 by rpki-client on console-ams.rpki-client.org