Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa
File:                     45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa (raw, json)
Hash identifier:          PUz4A5AoNBoMKUGTw5NdLehvFjFV7U12tnFR+2mGyo8=
Subject key identifier:   16:46:8A:4A:D3:14:AF:F0:F2:B4:1B:36:9D:D0:9F:F1:95:34:D8:CD
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285847BEF6D22D6F860743205AD080
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     14061
IP address blocks:        104.236.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d2:2d:6f:86:07:43:20:5a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=731f1c36-94e7-4914-a46b-c65d86bf799d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:f2:1b:bb:ed:3c:fa:87:a0:12:1b:0c:c3:
                    fd:f9:b6:65:d2:5b:f1:75:10:c0:63:2d:9f:d7:5d:
                    0f:9c:15:e6:5c:20:1c:11:a3:4a:6c:c3:a7:2b:2d:
                    6c:18:54:8d:56:7e:c8:dc:cc:9c:34:c2:7c:f8:5e:
                    26:39:92:da:da:38:17:9c:b1:92:8f:ce:92:91:9c:
                    c4:60:2d:a3:4e:7d:22:9e:21:1d:40:1b:fa:2c:87:
                    f4:20:bd:3d:bf:01:fd:f3:e0:27:91:13:92:30:4e:
                    da:cf:26:be:63:39:6a:a5:43:f1:e9:e2:38:ff:25:
                    8f:9a:d1:31:e5:76:36:95:30:4e:10:76:4d:ce:b3:
                    66:e3:e0:a9:9a:cc:f3:50:fc:55:0c:e5:69:42:b5:
                    68:58:a0:47:fa:12:53:03:2d:ae:4b:da:84:ec:09:
                    d1:36:b7:62:cd:af:76:cc:75:8b:55:35:1d:6d:3e:
                    d1:c0:1d:43:08:f0:87:22:be:70:93:28:9c:9a:fc:
                    25:85:ba:be:53:41:31:9c:ef:21:01:7a:07:65:82:
                    bf:1d:10:d0:e0:a3:e1:2d:b9:4c:60:d1:35:51:95:
                    09:24:40:e0:65:6a:fa:42:3f:39:40:6f:01:0b:8c:
                    04:ed:1a:31:4c:da:2c:1b:ae:8d:77:2d:89:be:9e:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:8A:4A:D3:14:AF:F0:F2:B4:1B:36:9D:D0:9F:F1:95:34:D8:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:50:b8:8b:2a:49:8b:c6:cd:4b:f4:65:26:0e:80:2b:d0:4b:
         60:88:b3:18:0a:82:44:ae:cd:5e:4c:9b:f8:6a:64:53:f1:08:
         a6:56:a1:6e:96:51:9b:83:be:b3:ee:18:ed:ef:28:ce:7e:fd:
         81:56:eb:42:0a:87:93:a4:7b:0f:03:9e:34:b6:f7:44:31:c4:
         39:86:ca:de:e3:85:09:dd:2b:c8:96:d3:70:2f:2d:5b:7c:38:
         53:b1:b2:b8:eb:4a:4f:fd:6a:b8:c9:1c:d4:77:cc:77:7c:85:
         72:4d:d9:30:60:07:9c:bb:08:81:c0:75:13:e0:85:43:32:1e:
         36:25:b4:f3:1a:90:6f:2f:b5:c1:c6:c1:a7:46:78:41:0b:57:
         27:72:0a:41:fd:48:a2:ca:48:e9:6d:a1:6a:34:66:3b:ca:85:
         1d:00:04:d4:06:98:06:4e:c9:e6:83:13:39:01:88:f0:9e:8c:
         1e:ec:e7:06:9e:b0:76:4d:b7:8f:3c:96:0a:57:07:8b:13:01:
         76:23:ff:c5:f9:84:2c:f4:a3:b4:5b:a0:3c:05:68:a0:94:bd:
         bd:62:6d:3a:f1:18:7d:c6:b4:36:dd:06:1d:40:af:34:f6:52:
         16:8f:09:18:31:f7:4b:82:97:07:b7:38:70:8a:5f:b4:76:aa:
         30:f9:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org