Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
File:                     05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa (raw, json)
Hash identifier:          OAsswUQPvMXGPnt3a7lj5dR/CEmqdxBdFnKlzNknXUk=
Subject key identifier:   E6:CF:D4:EC:A9:F0:53:0D:6C:D5:7A:52:DF:C9:20:03:63:CE:8E:3F
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F432858457A488D4D880144BBD0FE6E80
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        104.192.140.0/24 maxlen: 24
                          104.192.137.0/24 maxlen: 24
                          104.192.141.0/24 maxlen: 24
                          104.192.143.0/24 maxlen: 24
                          104.192.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8d:4d:88:01:44:bb:d0:fe:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=39c474ad-f785-4639-a8cc-0b25a6dfe429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6a:6c:7a:a4:d7:b9:3c:14:64:20:e5:e6:2a:
                    6c:b2:1f:9f:df:06:c1:61:a3:12:86:60:c5:dc:54:
                    1e:8c:67:35:da:16:40:51:13:4e:65:0f:b6:4a:96:
                    fb:f1:76:81:1b:d9:fa:82:e6:e1:13:55:a7:7b:88:
                    59:79:7c:6d:56:8e:74:24:56:8b:fc:c8:6f:02:d0:
                    c7:a9:65:25:03:fb:de:c6:2d:db:5d:23:8f:b1:e1:
                    e7:eb:95:d1:5e:d4:8d:0c:a8:7e:32:bf:42:7f:a2:
                    e1:eb:08:23:25:9a:03:11:1a:fc:73:d0:c7:13:83:
                    ea:8b:c7:2d:7a:c3:7b:26:2b:cc:74:fa:4f:62:96:
                    5f:89:69:9c:69:53:7c:d8:f5:ad:0b:0a:19:d1:2d:
                    fa:d4:56:48:7a:67:40:22:d1:dd:af:f1:13:7a:37:
                    f7:77:d9:56:0a:5c:b2:1c:8b:e7:1c:74:b6:28:67:
                    ef:37:c4:65:b3:fa:ee:d9:4e:74:de:35:29:5d:61:
                    3f:a7:f3:3f:d3:15:bf:e7:6d:3e:0e:5e:d2:8d:44:
                    d7:f3:29:e5:b2:30:c0:43:fe:8d:b0:24:55:8f:d5:
                    bb:a5:99:ef:1a:ee:cd:55:72:51:c7:8e:e2:86:f7:
                    1a:51:88:5c:c4:51:50:e8:a7:29:cf:cd:04:1f:0f:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:D4:EC:A9:F0:53:0D:6C:D5:7A:52:DF:C9:20:03:63:CE:8E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.137.0/24
                  104.192.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3c:df:66:b2:21:55:63:c0:d9:71:ef:08:5f:50:1a:c2:e5:
         33:c4:75:1c:99:f8:1b:a2:49:16:75:4b:23:15:cf:cd:a1:41:
         17:21:8c:f4:8d:e9:eb:d1:bd:63:49:f3:e4:a2:5d:8c:c7:a5:
         c9:a2:8e:6d:f8:ec:5d:4e:46:38:2b:5b:7f:84:95:bc:f3:a1:
         c8:bd:e1:0f:f0:5f:29:3a:0f:b4:9a:b8:c9:0a:c2:88:61:73:
         11:31:ab:13:f7:07:5b:02:f0:7d:04:76:43:45:36:a6:e9:7f:
         ae:4e:76:e7:24:5c:f9:2b:76:a2:ab:2a:7b:dc:f0:e9:5a:a4:
         a8:7d:2b:c8:41:4e:d2:01:71:21:9a:7a:8a:ee:cb:39:61:35:
         b2:d1:43:ef:77:e6:4f:a1:e0:65:83:1a:0a:32:bd:24:f6:00:
         74:59:df:da:01:28:3e:b7:d9:b1:a8:6b:d3:07:6c:c1:c7:76:
         1c:fe:23:8a:a7:08:e4:c0:f1:88:36:50:c8:20:0b:8e:46:fe:
         3e:2f:83:bd:c7:9c:4f:98:07:a4:09:12:ff:1f:82:53:67:4a:
         b2:88:a9:3a:b2:ea:86:34:02:19:a0:c5:f0:ac:54:02:e7:78:
         6a:19:ab:79:16:69:ed:96:b2:6b:6e:af:2a:09:82:0b:c8:31:
         8f:b1:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:25:41 2024 by rpki-client on console-ams.rpki-client.org