Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/39c2b328-75af-356a-bd53-7ca099222118.roa
File:                     39c2b328-75af-356a-bd53-7ca099222118.roa (raw, json)
Hash identifier:          oAUrna00nOXdnPe+/mtOGWhY8lJU4M1lCKtzsQ/EteY=
Subject key identifier:   36:0F:23:87:06:E7:09:B9:C6:BF:A9:1D:1F:60:75:FB:33:BD:8C:C6
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F432858457A488D3C2EFCA894F548BA80
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/39c2b328-75af-356a-bd53-7ca099222118.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        104.192.140.0/24 maxlen: 24
                          104.192.141.0/24 maxlen: 24
                          104.192.137.0/24 maxlen: 24
                          104.192.142.0/24 maxlen: 24
                          104.192.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8d:3c:2e:fc:a8:94:f5:48:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=0c53a48c-4ce3-4265-bbb9-b18012b4a50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:ed:a7:32:14:89:31:a7:d8:9e:82:b6:2d:
                    5d:9a:ee:37:c9:87:40:25:0b:45:8d:3e:d5:94:fd:
                    70:09:c4:b1:43:5b:31:8c:49:30:00:3f:71:26:90:
                    44:c3:3c:9d:d7:ca:24:62:8d:98:6c:26:af:37:b4:
                    11:14:1a:a6:6e:d4:2f:f1:3f:63:96:97:bc:1c:6e:
                    d6:8a:19:18:bf:d7:39:fd:3e:23:dc:79:ba:9f:13:
                    5f:4f:ea:6c:a3:33:62:4a:bf:4d:d3:75:ec:cc:88:
                    cd:57:53:95:cf:b5:c0:29:57:b0:73:f5:2a:dd:6d:
                    a0:0d:fe:00:17:64:cb:ac:7f:2d:fc:84:0e:6d:a6:
                    f6:5c:83:e8:47:3a:15:77:bc:19:46:fd:84:30:68:
                    00:bf:70:8b:02:4d:c1:68:7d:28:5b:13:1e:4b:81:
                    b1:e8:d8:6b:5b:e6:dc:5a:59:01:02:52:6b:ba:c4:
                    41:47:0b:1d:a7:0f:04:d6:f3:fc:87:f2:1d:3b:f6:
                    8b:a3:00:50:3f:92:45:81:f2:f2:67:1a:04:47:90:
                    88:23:e3:2e:83:5c:43:d3:36:06:c7:43:c3:fb:46:
                    56:02:e5:64:54:72:25:3f:36:60:24:de:e0:e4:84:
                    df:45:c9:2b:91:cc:3a:32:06:b1:d8:e7:68:4c:02:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0F:23:87:06:E7:09:B9:C6:BF:A9:1D:1F:60:75:FB:33:BD:8C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/39c2b328-75af-356a-bd53-7ca099222118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.137.0/24
                  104.192.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:2d:fa:2a:74:2a:72:5d:75:34:08:7b:60:73:c9:dd:49:
         85:5a:ba:cc:52:a8:2a:ec:8e:49:e3:22:39:82:4c:4a:9c:c2:
         a3:64:11:34:d8:91:0a:cc:fd:d7:47:53:aa:39:1f:39:e4:d8:
         17:b9:27:50:d2:f2:99:53:e6:7f:d4:fb:82:35:e3:af:cc:15:
         6a:76:9a:40:95:2c:9d:45:0f:e7:50:ef:b1:80:12:83:15:7b:
         ca:cb:8f:f2:6d:3a:9d:dc:33:e8:3d:a8:59:68:bf:5d:00:e2:
         b9:3f:3c:92:e9:18:e1:a2:48:cd:ed:e1:8a:8c:78:5d:b0:52:
         9f:b5:13:74:fd:d3:f4:cb:a5:e4:42:5e:5a:ae:85:11:1f:82:
         a2:39:f8:a4:eb:4b:34:61:c1:86:d0:ad:c7:e3:1a:0f:0b:68:
         87:f4:1e:fb:2f:27:d6:44:b9:f3:e4:9a:49:2d:f0:18:85:41:
         41:a4:c2:68:b5:61:bf:fe:49:66:cb:ac:bf:8d:47:40:02:ed:
         dd:6d:67:2b:8f:6e:b9:42:66:2d:16:db:83:d3:44:25:b3:12:
         bc:3b:e8:0c:07:17:3d:ed:7b:42:cb:27:eb:d3:01:4e:b3:a6:
         88:a3:7c:58:86:7a:f2:1c:bf:7f:91:dc:71:b6:83:8f:da:f8:
         9e:08:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:27 2024 by rpki-client on console-ams.rpki-client.org