Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa
File:                     490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa (raw, json)
Hash identifier:          TUDiUlP4RUhUuZuQAPEndKqn1Gn7LeiFEgTWY0x5qpw=
Subject key identifier:   76:AC:98:96:91:28:2A:46:BD:6A:94:C0:35:4C:92:B0:52:0E:03:E1
Certificate issuer:       /CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232
Certificate serial:       010D0C9F43285844E3A53BA972830ADD4586E940
Authority key identifier: AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa
Signing time:             Wed 14 Feb 2024 14:00:30 +0000
ROA not before:           Wed 14 Feb 2024 14:00:30 +0000
ROA not after:            Tue 14 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        204.27.244.0/24 maxlen: 24
                          104.232.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:a5:3b:a9:72:83:0a:dd:45:86:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232
        Validity
            Not Before: Feb 14 14:00:30 2024 GMT
            Not After : May 14 13:00:30 2024 GMT
        Subject: CN=1be9b2f7-5541-4ec7-b271-e28c99635dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:f1:a8:de:d3:38:2c:c4:34:de:58:da:f7:
                    1c:c8:ac:31:fe:66:11:77:ca:2e:de:22:cb:77:0a:
                    09:df:88:1b:22:e2:2d:d6:27:c2:7c:94:2b:93:46:
                    4d:31:c3:19:d8:f8:cb:8a:e0:8b:0b:44:4f:93:e2:
                    d6:8c:73:c0:72:86:2d:00:79:9f:74:cd:3e:f1:52:
                    f5:a2:d3:2b:8b:28:0b:7d:8c:d2:76:a1:5f:50:99:
                    dc:01:2b:d8:14:bc:3e:b8:91:dc:3b:16:55:6d:63:
                    b3:e7:d9:3f:6c:12:6a:b8:dc:c8:97:0c:6d:74:4c:
                    d7:6d:51:43:bb:f9:99:e0:72:c5:24:9b:bd:87:d5:
                    24:65:9b:25:a4:51:4e:b3:6d:6f:e9:a1:b1:fc:66:
                    c0:47:6e:8e:e8:e4:20:4f:09:1b:f6:57:8f:8f:fe:
                    fd:44:90:77:d3:78:3e:00:9b:8d:9a:bc:40:ee:63:
                    56:1f:ac:83:31:71:a9:d3:db:e4:7d:53:19:6d:3e:
                    f9:55:69:4f:a2:b7:a6:3c:19:3b:ed:90:38:68:13:
                    05:18:2f:65:24:a6:21:79:0c:38:e2:c9:1a:d7:5a:
                    e9:8b:af:88:44:9c:59:22:5f:74:3e:61:f4:f1:15:
                    19:d9:7d:c5:05:d2:90:14:cf:23:0f:04:4a:91:5a:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AC:98:96:91:28:2A:46:BD:6A:94:C0:35:4C:92:B0:52:0E:03:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.crl

            X509v3 Authority Key Identifier:
                keyid:AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.45.0/24
                  204.27.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:00:8d:75:b2:9b:2d:1c:f5:87:fd:64:60:2c:66:b9:4c:
         61:6f:ee:a3:9b:41:90:ed:51:5f:09:a3:df:a5:31:0e:e9:7d:
         b9:d1:21:bc:b1:de:e7:5a:db:b6:22:68:4f:3d:2f:72:56:34:
         2a:1e:7d:9f:09:09:8b:0f:f5:73:8b:81:b3:cd:14:82:d2:98:
         c2:fe:06:e5:dd:2e:9c:16:82:50:43:6f:c2:b6:d7:22:d0:d0:
         75:63:99:c7:45:b0:95:ba:b9:3c:f6:53:a6:a3:a7:be:85:21:
         0e:60:e7:0a:58:ec:7f:8d:e8:1c:32:72:79:68:5d:a0:13:86:
         28:2e:94:34:b1:ed:56:9d:f9:86:33:64:de:a3:68:6c:d5:6a:
         a3:f7:e6:73:c7:40:cf:49:9d:74:48:5a:30:05:ce:95:b0:ec:
         4e:ab:3f:23:e7:a7:6e:38:0b:b6:f8:ad:7c:20:87:26:46:b4:
         18:7f:84:88:e2:03:23:04:ab:f1:e9:17:f5:ff:8e:3d:96:a8:
         b2:a2:5e:1f:61:03:ea:08:bb:a9:d8:cf:14:81:ad:06:24:a1:
         14:82:62:79:d4:30:74:24:d0:c0:9a:95:68:b8:cf:bc:b9:53:
         5c:aa:a6:25:f6:85:88:df:e2:80:bd:19:9b:67:4c:a7:2d:32:
         f1:b7:2a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:13:42 2024 by rpki-client on console-ams.rpki-client.org