Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/be4cac34-b973-3119-9fd6-6d5866291690.roa
File:                     be4cac34-b973-3119-9fd6-6d5866291690.roa (raw, json)
Hash identifier:          6wIDbrLCuzwBZn+I2iVg+WaA0C0cpIrMxpyMujcU3KE=
Subject key identifier:   0E:9E:66:AE:19:F5:D7:EC:6E:DE:2C:23:30:6F:1D:56:1A:62:77:C2
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584507F01F657C509821A2F4C900
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/be4cac34-b973-3119-9fd6-6d5866291690.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     11758
IP address blocks:        104.171.208.0/20 maxlen: 20
                          2602:fd43::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:1f:65:7c:50:98:21:a2:f4:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=3795f6cc-d1f4-485f-8bae-24e3ca37ba6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:47:62:3b:60:5d:75:4d:db:ff:45:ad:a8:
                    e2:91:9b:a2:14:80:43:8a:e1:57:cd:da:62:1c:57:
                    5b:78:fd:20:ea:8e:71:46:9b:62:b8:f0:3e:b5:f2:
                    70:6d:37:0b:20:3e:46:f9:a5:8f:3a:54:c4:39:a0:
                    8c:e5:b3:40:e4:ca:8c:61:45:85:9f:a1:01:8a:69:
                    7c:53:fd:45:d8:e7:7d:65:18:8f:80:c0:ea:81:db:
                    c0:d9:c5:aa:74:d6:3f:2f:45:02:b3:9d:49:9f:82:
                    47:5c:95:a7:ac:91:41:21:67:a8:35:1f:a9:8a:b8:
                    68:b0:10:c3:fb:51:b3:0f:e3:4c:67:47:44:f9:ef:
                    6d:75:e4:b5:46:8b:97:7d:7d:30:eb:c9:c7:af:46:
                    34:8f:e0:62:ab:d6:73:4f:f5:c5:c8:af:3a:a2:e1:
                    0b:14:fa:58:57:46:41:02:3d:2e:54:db:28:dc:55:
                    8b:de:0d:bf:e1:39:4a:e9:66:4b:59:72:18:45:13:
                    2b:0b:b2:1b:fc:28:6b:18:1e:6b:65:39:8d:e5:b5:
                    6b:49:17:c6:11:e6:dc:52:46:1e:43:96:82:ca:1f:
                    05:9c:8a:18:66:11:8c:b6:57:07:95:43:21:e9:3d:
                    95:9e:a0:3a:2a:48:97:38:78:bb:69:47:50:7a:0c:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9E:66:AE:19:F5:D7:EC:6E:DE:2C:23:30:6F:1D:56:1A:62:77:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/be4cac34-b973-3119-9fd6-6d5866291690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/20
                IPv6:
                  2602:fd43::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:9b:cb:78:31:12:08:88:49:47:55:04:d7:5d:7b:aa:82:
         58:f8:5f:b4:72:42:4f:56:fd:cc:76:18:7b:42:64:15:6f:31:
         57:82:cf:57:86:38:17:01:84:43:d2:46:03:00:f2:b9:58:93:
         f9:e3:bb:74:51:b1:b9:8a:e6:2a:25:7c:cf:f0:87:a9:4b:2f:
         64:33:8b:d0:83:c2:13:d9:08:d3:17:5e:6d:d4:79:eb:b3:27:
         45:7d:c1:e8:d3:50:af:88:34:6f:b4:14:6b:e4:b4:11:90:b0:
         4b:a3:47:d0:90:9e:46:73:d6:13:3c:57:c6:52:8c:a3:4e:03:
         d1:93:fd:f0:7d:2b:0d:df:b1:0c:93:64:2d:95:39:25:5e:d0:
         bf:04:10:51:02:72:59:f6:16:72:8d:c3:2a:91:28:2c:4d:3e:
         fd:25:3d:dd:45:29:6e:ef:d6:4c:67:dd:b2:64:46:ec:4f:c5:
         57:8c:6c:64:35:aa:e6:df:77:42:9e:6e:f9:82:fe:65:83:9b:
         e7:f6:e2:bd:ec:70:d7:d3:a6:8e:8a:bf:bd:67:2d:37:69:5d:
         7d:72:97:1d:f3:11:4a:ab:f1:e9:86:ea:1a:17:11:f2:c0:ac:
         e3:e4:99:30:74:45:6d:1f:a7:d5:d9:46:a2:49:78:b8:8d:ff:
         80:4f:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:15:57 2024 by rpki-client on console-ams.rpki-client.org