Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/104c293f-7b2e-3e35-ae5e-16a5266213c9.roa
File:                     104c293f-7b2e-3e35-ae5e-16a5266213c9.roa (raw, json)
Hash identifier:          C/XWOM9aojVubbOga+UHlSamuPJPADJuYm0B5clnAdA=
Subject key identifier:   D1:70:54:A5:E9:C3:29:9B:E5:40:3D:DC:1F:47:74:74:69:6A:91:71
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F43285845CE0908E40DE073D685C72480
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/104c293f-7b2e-3e35-ae5e-16a5266213c9.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394893
IP address blocks:        209.112.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:08:e4:0d:e0:73:d6:85:c7:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=b24e41f6-0007-47ad-a7dc-3ffeda61d7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:4d:53:63:12:68:15:51:39:54:5a:94:1a:
                    d4:00:ab:89:eb:2f:9b:62:d1:e3:fa:4a:f1:35:ca:
                    15:e9:88:0f:41:d5:7d:a8:07:58:45:c5:b3:0f:40:
                    80:1f:47:ea:51:8d:b8:62:9d:9e:a3:0c:e2:47:d6:
                    b2:e7:a3:3e:b1:f3:cd:ab:a0:5c:b8:52:f2:a7:1b:
                    06:43:d0:cb:f3:ea:17:44:6a:ea:dd:68:79:82:ec:
                    a1:19:92:b1:dd:e9:18:0b:15:ff:3b:c0:0a:d1:03:
                    46:ca:6b:75:5b:5d:79:98:f1:b2:a9:1c:cb:22:39:
                    53:cb:0f:69:e3:95:69:f3:d1:88:78:b8:62:72:2b:
                    0b:9d:10:1e:b1:b1:aa:d3:90:ba:06:bd:b4:87:4d:
                    56:37:77:89:ce:5a:10:da:91:03:f2:77:ed:76:b7:
                    56:9c:2d:9d:fb:ca:78:a2:4d:f4:c2:03:de:5f:f9:
                    14:af:a2:6b:ea:be:c1:45:f8:4d:c7:45:86:60:6a:
                    aa:04:f9:08:62:0a:72:8d:fa:ad:8b:93:c7:4c:e6:
                    94:9d:7d:ad:f7:fc:5a:24:91:4f:7a:2e:df:32:49:
                    b2:99:25:1a:fb:0b:8a:69:a5:57:c0:05:31:97:60:
                    33:d0:a7:1d:c5:7d:a2:2f:24:c7:5b:ca:a6:6c:e5:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:70:54:A5:E9:C3:29:9B:E5:40:3D:DC:1F:47:74:74:69:6A:91:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/104c293f-7b2e-3e35-ae5e-16a5266213c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:31:27:b7:8c:2c:66:c5:1c:fb:58:10:f6:e0:b2:11:6c:
         06:ed:f7:31:d6:a0:26:6d:af:80:f0:a6:f1:22:56:57:9b:60:
         98:3d:a9:3f:f7:16:44:d5:00:4a:b7:a7:d5:11:d3:5c:2b:05:
         33:17:65:98:55:83:fb:e8:26:2f:55:f4:6a:15:7c:c5:f1:1d:
         f9:6e:98:c4:a2:5d:3f:bb:83:dd:d6:6b:c3:2d:f6:18:c0:41:
         8d:48:c2:b6:ae:cd:97:76:d5:ee:20:64:bd:ff:ba:5b:1a:00:
         fe:8a:ca:42:da:57:fc:10:65:3f:4e:93:e9:5a:39:76:c9:65:
         cf:c9:74:c3:b8:a3:6e:d6:51:59:7c:e6:73:10:66:6b:4b:22:
         3e:22:b6:f2:90:78:eb:9e:e7:fc:6d:8f:e5:d6:00:23:0e:7b:
         c3:b7:d3:e2:aa:e7:e8:48:0c:ba:22:1d:f1:9a:77:1a:be:2b:
         11:1f:ee:de:91:4b:1c:f3:5c:f4:75:47:dd:11:d8:4d:e4:ea:
         1c:7a:c4:5d:51:a6:e7:68:6a:c8:8f:cb:a0:39:45:85:4b:5d:
         f2:dc:13:3f:b8:22:32:06:bf:7e:79:dd:e2:35:53:ed:e9:b5:
         83:0f:ba:2d:89:2f:13:04:47:6b:86:25:1b:a0:bd:e6:8a:49:
         75:86:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 16:54:53 2024 by rpki-client on console-ams.rpki-client.org