Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
File:                     c243a375-2e4b-3391-8643-ce860578a4b0.roa (raw, json)
Hash identifier:          2a6wNwA/zr+5jWX2I1SRaa0iTRtizRmNvY4TAHvrhE0=
Subject key identifier:   C4:4E:43:A5:31:64:52:86:56:61:42:C2:63:8D:B8:93:F6:98:C1:BB
Certificate issuer:       /CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
Certificate serial:       010D0C9F432858477EC10E99E17165623FF81B80
Authority key identifier: 38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     18632
IP address blocks:        104.200.192.0/20 maxlen: 24
                          107.182.32.0/20 maxlen: 24
                          170.75.128.0/20 maxlen: 24
                          2604:3600::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0e:99:e1:71:65:62:3f:f8:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=f67a8b75-d45c-4bbc-8551-b15860e42f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c4:81:1e:8a:50:21:24:72:49:f6:1b:42:f0:
                    6c:14:43:fb:51:7d:45:ed:5f:43:09:fb:66:2a:40:
                    4c:57:f4:03:4e:fa:c7:24:2f:3f:3e:0f:91:62:33:
                    97:4a:fe:6e:8f:3d:6e:ba:42:3d:b1:52:3a:84:de:
                    3b:b3:09:13:77:f2:db:66:92:f0:ae:66:b4:9b:82:
                    9f:11:de:08:41:3a:ed:5e:b6:b3:08:60:d9:4c:fe:
                    fe:f9:06:8a:5c:1c:3c:1d:64:d0:56:d2:8c:8e:57:
                    90:16:89:88:8f:17:ce:8f:7d:5a:77:02:db:f9:8a:
                    32:c0:aa:b9:0a:1d:37:1d:6c:84:52:d4:04:bc:52:
                    6c:a6:e9:12:29:92:a6:2b:14:19:05:dc:96:c4:4a:
                    d8:6d:73:f7:8a:53:96:09:1e:b0:38:cd:c4:fc:1a:
                    4c:f7:d0:2d:d6:c6:09:e6:5d:54:cf:f8:80:13:30:
                    c6:d1:97:d4:28:65:83:6e:53:b0:02:e2:c9:fb:60:
                    be:0f:7e:6f:2e:05:cd:c2:56:33:ac:19:de:6f:88:
                    25:ca:83:a5:53:49:4c:4e:9f:ed:04:fc:8a:94:68:
                    7d:97:15:fc:ce:47:83:e0:d7:cb:b7:55:a8:bf:5a:
                    9b:7a:fd:5f:4f:d6:cd:6b:1f:e1:71:8a:33:a2:9d:
                    7f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4E:43:A5:31:64:52:86:56:61:42:C2:63:8D:B8:93:F6:98:C1:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.crl

            X509v3 Authority Key Identifier:
                keyid:38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.192.0/20
                  107.182.32.0/20
                  170.75.128.0/20
                IPv6:
                  2604:3600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:16:ac:ab:a2:92:80:a8:d7:17:f4:31:06:2b:8e:83:bb:
         b5:a9:80:af:a0:5f:f5:16:e7:00:ee:a9:c5:f8:88:b3:3a:67:
         47:44:9b:ed:d9:8c:78:9b:af:cd:08:49:73:4b:97:e7:11:18:
         99:5a:af:ab:b7:4a:c3:8c:b3:6e:b7:ff:a3:ba:fd:85:24:d0:
         c9:a7:ee:f5:7a:6a:28:e1:51:ea:d0:35:b1:b6:b7:a1:93:c4:
         78:e7:a1:b4:08:98:69:ca:58:be:54:94:5f:d0:64:3c:91:68:
         56:ab:d4:b9:e3:5b:e6:4e:99:f4:e2:e0:86:fc:3c:ce:07:5e:
         cf:4f:02:a6:e2:08:24:87:27:d8:a8:50:27:10:d7:c2:d5:77:
         1a:83:2c:f0:d0:55:d4:48:2d:49:d4:16:50:a0:3d:16:08:2f:
         a8:0c:8e:2b:49:5f:5d:7c:27:91:59:d7:83:67:81:93:f8:82:
         f2:57:ca:3a:dd:7c:86:66:ab:75:5a:cc:c6:e1:6b:78:f2:7c:
         66:68:33:1a:4c:89:1b:9c:20:37:10:32:6e:f3:7d:3c:e4:d6:
         35:de:ba:c4:36:fe:2c:03:d6:2d:8f:92:d1:15:06:df:59:b5:
         c2:31:23:53:7f:57:cb:fb:f8:50:f4:98:78:50:39:6a:81:47:
         74:39:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org