Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa
File:                     800c6431-3fb5-37fb-bd44-84155cafeb2d.roa (raw, json)
Hash identifier:          4jOcHqpmde75mlGBOHqtQ299MkXhN3WllWBVdNv1D8I=
Subject key identifier:   51:A7:40:84:8A:33:9C:9B:38:3A:D5:A5:83:65:B1:6D:2F:AC:F5:34
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584754E0EB06E46FA771D3197924
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     53334
IP address blocks:        104.153.198.216/32 maxlen: 32
                          104.153.198.217/32 maxlen: 32
                          104.153.198.218/32 maxlen: 32
                          104.153.198.219/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:eb:06:e4:6f:a7:71:d3:19:79:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=803cc934-7db1-4174-880c-9408628671ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:9d:a8:24:0e:88:9a:09:66:59:61:e3:38:
                    62:97:b4:52:e5:d2:ac:c9:92:3e:26:e5:12:76:37:
                    14:c9:5c:39:00:39:3c:e5:eb:67:9d:7c:5c:75:e4:
                    38:c7:aa:26:4f:68:76:a6:87:21:cf:db:e7:2c:08:
                    20:d3:77:d3:40:7a:68:35:98:ab:25:f5:e6:ed:37:
                    17:24:7d:42:55:22:8c:fa:82:5f:10:d2:ae:c7:af:
                    81:df:b7:f6:81:c1:7b:49:e3:e3:89:51:2b:f1:fc:
                    2c:24:0a:82:9e:0b:3e:40:5f:ff:64:aa:5c:ab:bb:
                    6d:70:06:fd:36:72:6c:29:8a:1e:3b:c4:16:e3:d0:
                    5a:c0:08:ce:6f:95:a1:26:a5:65:2f:26:24:ab:35:
                    68:b7:82:75:ac:45:9b:55:56:44:13:da:b0:99:ca:
                    24:01:b1:c3:e1:2f:35:7c:3c:d0:65:7a:aa:92:ea:
                    e4:ea:4f:43:be:da:17:bf:a6:82:4e:72:6a:8a:4a:
                    4d:1e:8b:a1:bd:c8:0b:28:7f:18:82:e8:c4:83:ec:
                    2d:3d:80:61:f2:55:c4:16:a6:a5:41:da:f6:11:25:
                    3c:e1:87:a9:7c:99:8e:cf:4e:9e:f5:f2:48:d8:27:
                    2f:09:87:1f:89:1c:93:47:68:8a:ba:fe:6d:9d:ae:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:40:84:8A:33:9C:9B:38:3A:D5:A5:83:65:B1:6D:2F:AC:F5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/800c6431-3fb5-37fb-bd44-84155cafeb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.216/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:6c:80:8b:31:69:ba:e9:2e:2d:08:a6:be:06:72:2f:1f:91:
         30:8f:85:f7:e5:c9:47:4d:db:33:73:c4:a8:58:dd:bd:b6:ba:
         2c:12:32:8f:88:4a:76:c2:49:b5:bb:fb:e5:8d:02:7a:57:38:
         b8:94:f5:cb:5e:34:5f:08:6b:8d:bf:d8:9b:63:81:8c:8d:5c:
         fa:7d:7f:e6:bd:ae:cc:cb:1f:c1:da:3b:65:db:ca:db:fc:d1:
         93:68:54:8a:53:83:cf:b9:88:d9:90:a5:b6:e4:1d:10:f1:ad:
         c9:aa:86:cd:24:37:7f:37:2b:45:97:d3:7c:79:6b:8f:2f:45:
         ac:bb:f2:0c:35:e0:eb:c9:21:ad:62:bc:ce:da:f6:e4:e5:e4:
         63:da:10:ec:6b:1d:48:2c:5f:90:e4:0a:9b:ea:63:79:54:37:
         ef:0f:72:4d:b1:89:e6:9a:eb:9d:ea:cb:63:9e:01:14:51:05:
         fb:83:ec:51:95:83:25:ca:07:44:21:c6:da:be:83:ce:82:e2:
         a3:bb:2f:d6:a4:81:bf:7f:19:79:d1:cd:36:dd:8c:f1:50:e5:
         68:7c:68:28:2b:a7:fd:05:f5:53:8f:41:58:a4:eb:17:3d:48:
         d5:45:d4:23:f8:b5:3f:a1:42:7e:1c:57:6f:ed:df:9b:e2:87:
         4b:b1:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:40:49 2024 by rpki-client on console-fra.rpki-client.org