Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/91827ade-0f73-3c1e-a650-d9eee56d17dd.roa
File:                     91827ade-0f73-3c1e-a650-d9eee56d17dd.roa (raw, json)
Hash identifier:          CkNOFyweLGiIzLR8HDNQ0/9XmS15DL/Q7oEwdVnDAWY=
Subject key identifier:   29:B3:7B:B4:C4:19:F7:30:6D:EF:8B:F3:11:46:5A:7D:25:AA:26:15
Certificate issuer:       /CN=1d669241-5dfb-43f2-99a8-90b846457b5b
Certificate serial:       010D0C9F432858456C531B45024E735C08C1FE20
Authority key identifier: AF:EA:52:BA:EC:9F:EB:98:25:59:92:63:3B:5A:30:2F:25:7B:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/91827ade-0f73-3c1e-a650-d9eee56d17dd.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        104.238.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/1d669241-5dfb-43f2-99a8-90b846457b5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/1d669241-5dfb-43f2-99a8-90b846457b5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1b:45:02:4e:73:5c:08:c1:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d669241-5dfb-43f2-99a8-90b846457b5b
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=7185e95b-b4c2-4030-9c34-f878eb5e9b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:29:04:69:69:a3:92:d3:c9:00:f7:3a:8e:ab:
                    20:fd:25:c2:c2:ec:99:af:fb:f1:f6:78:56:03:51:
                    b5:a5:f2:d5:d1:ed:76:c3:13:1a:b6:42:3b:46:19:
                    b8:27:7c:a0:6c:3d:0a:16:73:0f:32:0e:ca:98:b6:
                    be:dd:45:75:80:fe:83:5e:f1:92:a9:e0:45:7f:30:
                    41:36:9d:f5:c1:08:4f:5c:46:fc:a2:4e:9d:29:6c:
                    a6:b3:88:27:a7:82:ad:5b:30:eb:a0:ae:9c:9b:d6:
                    58:bc:fd:a7:5c:10:ab:34:3e:9d:d9:e2:b9:a6:21:
                    fa:6d:df:fa:0c:87:61:77:3a:51:ea:27:0d:39:a0:
                    41:ae:1b:57:70:45:b0:b4:cc:50:a5:a0:66:60:f3:
                    68:25:c9:47:5b:29:aa:fa:5f:a0:9e:3a:d9:f4:c9:
                    34:ba:59:91:9f:4e:c2:31:36:09:55:e4:47:44:fd:
                    96:df:e6:e0:96:d2:e2:19:fc:24:1d:f0:97:db:63:
                    1c:b0:ed:d4:9d:51:3d:e6:4b:74:c2:8f:84:b7:0d:
                    01:83:19:ab:99:67:01:e7:2e:a1:88:d6:af:64:3b:
                    76:c1:47:e9:1e:de:a9:e6:1a:e6:bb:9a:43:42:1d:
                    20:26:a5:31:4c:3c:35:b9:c1:8c:24:3b:e3:95:f4:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B3:7B:B4:C4:19:F7:30:6D:EF:8B:F3:11:46:5A:7D:25:AA:26:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/91827ade-0f73-3c1e-a650-d9eee56d17dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/1d669241-5dfb-43f2-99a8-90b846457b5b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:EA:52:BA:EC:9F:EB:98:25:59:92:63:3B:5A:30:2F:25:7B:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:55:f7:f5:d9:aa:04:57:09:2b:19:e5:40:fd:4d:e2:44:d5:
         fc:d0:02:e0:20:99:08:ea:10:c8:e0:26:cd:83:b8:6a:67:7c:
         78:5d:fc:1b:d5:6d:ea:d6:c6:ff:6f:b3:51:e7:e4:24:fc:10:
         ea:65:88:e7:0f:8c:a2:0e:66:d5:2e:cf:2d:5a:3e:ee:2d:cd:
         a0:5e:c1:54:66:4b:d7:26:81:00:bd:44:32:75:ad:ac:b4:34:
         6a:3e:4b:76:e3:47:7c:50:46:1c:b1:4a:8e:93:53:20:4b:8d:
         51:de:b3:9d:e6:d6:e3:e8:55:7f:6a:2f:f5:dd:1d:6d:5b:3d:
         9b:e1:cb:89:23:5b:68:29:34:c0:1f:95:da:13:12:62:95:e4:
         0b:8d:bb:cd:98:07:97:27:62:21:f0:74:cb:49:24:7f:4a:d8:
         bc:59:1a:45:12:8d:f2:a8:57:30:12:1b:7f:55:57:d0:e2:e9:
         c1:75:95:55:25:6d:f2:84:d4:87:54:03:a8:74:52:ee:5c:b3:
         e1:a1:e3:31:49:49:d0:2b:44:a1:3a:40:33:52:9a:1f:83:0c:
         af:02:74:6f:39:10:30:a2:ab:7e:55:d9:e0:12:d6:cb:4b:30:
         30:47:a2:2e:5f:4e:f2:f9:2f:fe:8e:2d:34:f2:4c:7a:13:ea:
         cb:7a:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:53:35 2024 by rpki-client on console-ams.rpki-client.org