Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa
File:                     7972f1ff-9f54-3af8-9eff-7da8a92874af.roa (raw, json)
Hash identifier:          dLAQ9lhGvvB9lseDUR5mpy9ch1pDuHIAzohvc/mvLmc=
Subject key identifier:   5A:C1:31:81:36:9B:8B:15:47:1B:A1:28:18:60:AF:37:F0:48:4F:FA
Certificate issuer:       /CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
Certificate serial:       010D0C9F4328584561285C78C18DE58BBF8734C0
Authority key identifier: C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     48252
IP address blocks:        104.245.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5c:78:c1:8d:e5:8b:bf:87:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=1508b734-48c1-4206-944a-00d7c8bd14bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:1a:6c:b4:a1:08:1b:1b:17:9c:73:13:3e:
                    6f:6d:1b:b4:31:ae:5f:fa:7d:02:3b:35:73:f8:8c:
                    dc:d9:e0:1b:8f:f2:a5:b2:a0:48:14:f7:01:0d:cd:
                    ef:12:10:9e:3d:54:42:5c:8a:81:d2:04:3c:ae:55:
                    fe:a1:de:f5:0a:51:39:bd:09:22:de:6e:df:e6:54:
                    03:64:ff:05:31:8b:47:0a:9e:3f:88:c4:ec:d3:2e:
                    a2:d9:1e:dd:37:a8:3f:e8:41:f6:42:3b:87:23:95:
                    03:16:d8:b2:fb:a5:2f:f9:36:95:ff:59:c1:2a:e7:
                    01:d6:59:50:37:1c:58:e0:9d:96:30:c4:5d:c7:2d:
                    60:75:7c:f7:f2:73:d0:8e:7b:9b:79:bc:f2:b2:e1:
                    f8:76:6e:00:66:1e:78:9a:0b:b3:65:51:35:0b:6e:
                    1b:6a:47:57:4b:d8:b8:eb:38:e7:f3:9a:08:09:e3:
                    dc:8b:db:2a:47:ae:07:dd:a8:80:08:bc:16:57:76:
                    73:0e:38:c4:a7:e4:e4:cc:94:ce:9c:25:ef:08:06:
                    fd:32:f7:39:72:b7:29:1c:95:bc:6f:86:30:8a:11:
                    56:a6:26:b4:06:f4:95:d5:55:d3:68:6d:e0:8d:d1:
                    6b:d9:47:14:8d:a0:e0:cd:36:1a:11:57:a3:82:1a:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:31:81:36:9B:8B:15:47:1B:A1:28:18:60:AF:37:F0:48:4F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:58:1f:15:83:d4:0f:5d:91:3a:a0:9c:d2:2d:37:f0:8e:4f:
         76:2f:22:81:f1:7d:7b:90:e3:04:a5:92:1a:20:a9:25:e9:59:
         7e:9d:9f:c8:1d:fb:64:cc:48:2e:b9:87:c5:a0:09:ae:ac:c3:
         f9:df:60:81:5f:c6:a4:1c:ce:5c:ef:7c:7f:19:da:b4:90:d0:
         27:69:3a:6c:87:97:0d:6f:6a:69:e4:b9:54:83:55:e1:ab:9a:
         72:f1:8d:d4:e4:d3:70:f2:2c:fd:15:fe:e3:1c:ff:66:7a:79:
         02:eb:5a:f0:b0:14:fb:59:76:92:3e:d4:28:53:26:70:fb:dd:
         7c:17:69:fd:15:c4:84:7d:f3:de:cb:0e:06:45:d2:ce:52:87:
         ec:67:c9:7c:d1:e5:a3:22:13:f0:01:ac:fb:29:24:3a:ab:2d:
         be:f2:02:76:78:4a:c7:0f:6f:0d:00:ab:19:57:40:b7:29:69:
         5c:f3:7f:81:b1:17:24:43:c0:f4:7a:e4:0d:30:c4:0e:9d:d6:
         48:ee:f5:3d:56:ad:f4:34:83:f6:17:61:1f:10:4b:2a:71:81:
         d9:ed:0b:3d:0f:5a:19:e6:b2:ae:b1:11:96:a3:2a:58:ed:cb:
         fd:21:22:52:c2:07:03:ae:6e:22:a9:a1:c9:ac:8e:37:1e:e6:
         f2:1e:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:05:50 2024 by rpki-client on console-fra.rpki-client.org