Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa
File:                     84cde4f4-6b3a-32b4-8547-230c540ead1d.roa (raw, json)
Hash identifier:          Ex82l/dX8ELBZY8sC5Vv+p36plYrDfpH25V6ijM80nU=
Subject key identifier:   E2:FE:A2:58:70:65:49:D2:51:21:D1:7D:63:22:1B:F2:8C:2D:E0:B6
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584793B1117725B9160B8A63F710
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     23470
IP address blocks:        104.238.204.0/24 maxlen: 24
                          104.238.205.0/24 maxlen: 24
                          104.238.206.0/24 maxlen: 24
                          104.238.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:11:77:25:b9:16:0b:8a:63:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=6061363b-6d90-4e52-8276-efdc288f09c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:ec:ac:44:df:6e:84:af:f2:48:c9:9d:4d:
                    39:ce:27:ac:28:22:e5:db:a4:4e:96:d7:70:97:ab:
                    3b:06:a0:00:61:e9:90:7d:c7:cc:29:29:53:d6:68:
                    76:c4:18:0f:33:ea:5e:fa:99:12:0f:3b:08:8e:3a:
                    50:49:67:14:5d:d7:38:15:a0:0a:1b:d2:59:57:74:
                    eb:d1:c1:6a:c9:99:02:c9:4d:ef:6a:5e:8c:f3:01:
                    66:ab:98:6b:73:07:c4:b4:5d:a2:77:cf:0a:c0:e5:
                    b1:7e:91:82:c0:f8:eb:93:91:30:28:bd:85:2b:03:
                    26:19:98:98:19:5e:1f:cb:35:a2:78:05:5d:c6:1a:
                    01:c8:bf:df:f8:ea:73:47:ad:79:af:5c:07:9d:7c:
                    82:3c:8f:01:09:40:1c:37:d2:3a:0f:b8:9e:74:1f:
                    72:c6:e2:24:04:2d:65:23:7d:90:9f:df:b3:8b:41:
                    87:e4:e0:13:27:9e:62:a7:ff:d2:53:0c:55:71:e4:
                    d3:b3:4d:ae:ec:d5:14:b1:02:69:cf:aa:f1:c3:a4:
                    c5:48:3f:47:d8:8f:34:c3:91:e2:8c:5a:34:30:ac:
                    e7:00:64:f5:49:69:32:95:0e:e1:d7:24:7b:92:66:
                    ed:a9:03:dd:85:8f:55:7c:5a:70:f1:2e:47:d3:23:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:A2:58:70:65:49:D2:51:21:D1:7D:63:22:1B:F2:8C:2D:E0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/84cde4f4-6b3a-32b4-8547-230c540ead1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e3:fc:63:b9:42:1d:75:65:f4:23:64:e1:08:e0:2d:30:bf:
         83:c8:42:d0:96:ac:21:95:33:19:d9:b5:60:f4:4a:f9:01:8c:
         e2:45:61:d9:c4:a1:ef:af:d9:13:35:a5:30:85:cb:1b:b8:40:
         a4:66:e6:8a:c1:b3:0e:fa:2b:93:22:43:2f:a5:d9:5c:9a:68:
         e2:f6:8e:84:68:9e:89:0e:f4:a3:3d:e8:95:05:05:82:cb:83:
         5a:21:31:17:a8:c2:cf:11:c9:63:65:0a:fa:a9:8a:e4:d5:b3:
         2b:5d:24:1c:c5:cd:c3:98:f9:5d:5a:aa:33:c8:f1:12:22:8b:
         74:b2:da:98:f2:c0:a1:e8:78:b2:69:d0:2a:06:0d:3a:6b:9d:
         87:21:2d:eb:9a:6f:6f:77:2b:73:18:01:33:f0:e3:17:e5:7f:
         46:c3:d0:7d:5d:34:18:25:64:3a:bf:08:bf:7f:a5:04:43:63:
         8a:40:56:b3:05:58:ba:16:23:4d:40:37:ca:50:21:2b:dd:b6:
         a6:31:8c:6b:ab:17:f3:85:d0:fd:a8:9f:32:4a:15:8d:c6:9f:
         ea:44:37:e3:ba:43:73:02:f1:4c:55:c4:97:23:47:32:5b:39:
         a5:84:ec:0b:7e:ee:41:2e:08:40:2f:7c:f2:aa:78:56:55:55:
         4b:ea:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:14 2024 by rpki-client on console-fra.rpki-client.org