Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa
File:                     86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa (raw, json)
Hash identifier:          bvZVofIBVR1jIEV+XpEUWo+4yE3QuIDMGDrkW3H3Rvw=
Subject key identifier:   F7:5D:30:D0:8C:E0:CE:40:42:55:76:A1:2B:BB:24:CD:C2:CE:16:7A
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285845C5A8E6C7B0B76238B0167CC0
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     36231
IP address blocks:        104.152.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e6:c7:b0:b7:62:38:b0:16:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=cf4b8794-e8db-4289-93f0-fbe01271d8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:f8:3f:cf:11:9a:dc:69:fc:6a:64:c3:d3:
                    de:ce:fb:5d:03:fb:c5:4f:91:3b:60:8b:50:ee:e3:
                    c1:64:86:34:1f:43:53:d2:d3:06:e6:d0:4c:ff:7e:
                    a3:c8:1f:f8:f1:74:f4:a0:a4:3f:33:b7:25:c1:ab:
                    e0:14:7d:90:0f:2b:f1:f7:b0:1c:6c:f9:f6:a7:63:
                    7f:77:a4:6b:b8:1d:22:1b:ba:99:55:7f:b1:ca:9a:
                    d6:94:bd:59:19:f2:41:94:92:49:6c:ba:f9:74:4a:
                    cd:d0:a8:32:43:f2:7e:e6:c1:ae:96:f5:bc:31:c1:
                    78:08:cd:34:c7:25:a7:d6:c5:87:e5:ff:cc:97:6a:
                    5a:f3:e3:8a:2f:4c:37:9f:fb:bb:52:7b:7c:bc:70:
                    a6:11:cd:15:7f:d4:4e:ff:a5:99:77:48:15:bc:32:
                    73:e5:e4:b7:06:41:55:25:1b:e3:36:3f:0f:db:d9:
                    bb:8d:fa:e4:1a:1c:a4:72:77:d1:66:2a:a4:15:5a:
                    38:b0:3f:c8:f4:c1:34:8b:0f:60:4b:ec:dd:47:b7:
                    d3:9f:e4:24:3a:13:10:e8:71:4b:c9:04:66:26:f5:
                    d4:89:cc:90:df:e8:46:03:53:e4:ba:a1:88:3d:13:
                    31:86:49:c9:fc:4b:f8:ad:1d:97:da:c5:5c:b9:88:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:30:D0:8C:E0:CE:40:42:55:76:A1:2B:BB:24:CD:C2:CE:16:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:17:2f:30:49:b0:ca:42:37:04:ae:43:47:b8:1f:e4:7d:
         01:01:87:cd:b9:0a:f9:f1:40:a1:81:79:af:f6:06:7e:e5:70:
         2c:9d:ef:55:18:38:4c:0d:53:e3:78:61:8a:43:0e:84:fc:21:
         87:18:1f:be:b3:e4:65:49:4b:f9:cc:34:c5:5e:c6:67:88:bd:
         ff:81:af:3e:ea:1e:25:0e:d1:fe:3a:88:c3:bd:1c:a5:1c:22:
         6f:8d:d2:c3:36:83:a3:8c:5e:6e:da:43:d5:1c:72:49:f3:36:
         b5:2f:dc:0e:bd:75:45:c9:ad:de:b3:8a:a8:06:f6:0b:1a:80:
         aa:ca:e6:54:d5:6c:b1:9d:c1:28:c9:3b:87:d6:bc:b2:b7:a3:
         dd:1a:0e:1b:99:6d:2f:07:7b:e5:df:ba:cd:4a:69:2e:c7:d3:
         b1:56:9f:0b:80:93:04:ac:35:0b:cf:c4:26:24:4b:52:16:02:
         7b:c4:0f:ed:92:0c:00:e8:4c:fc:f2:4d:ae:d5:68:a5:c4:ce:
         2b:c2:79:9c:8d:36:57:d7:4f:b3:73:91:f5:9b:c4:26:d9:f3:
         4d:ae:04:2d:f1:15:3c:80:3f:87:70:f4:a2:b8:78:5b:2e:4a:
         68:d1:7f:60:7a:56:85:ff:64:60:13:82:f1:02:1d:58:d8:62:
         4e:70:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:33:29 2024 by rpki-client on console-ams.rpki-client.org