Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
File:                     84343704-c93f-31bb-ae2f-4e88f3e7612a.roa (raw, json)
Hash identifier:          a/yo0HYgvpP9g4tlLvWfk8QwPH64wFVJny2zhUJmS1Q=
Subject key identifier:   49:F5:32:6A:F3:DA:40:E7:FC:DC:8D:D6:AB:45:2D:D6:C9:78:CD:D6
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F432858458F387DA8506FAF0D2C9D2A80
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        104.192.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7d:a8:50:6f:af:0d:2c:9d:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=0b2622b7-373f-4571-a492-ed0e153e9200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:0a:a7:2c:2b:ba:2c:4c:13:98:eb:f2:99:
                    54:ba:43:e1:5a:23:0c:69:9c:07:54:f1:a8:38:01:
                    53:ee:c2:bb:50:7e:ee:b3:13:86:d0:e2:d3:22:3f:
                    b6:18:73:5f:9d:b3:9c:a1:85:7d:e9:5a:ca:8a:fe:
                    5c:ba:27:50:03:41:de:72:5a:f0:5a:b5:78:6f:0d:
                    99:22:8a:44:d2:aa:da:d3:ad:5f:9d:9c:fb:7a:2a:
                    a0:3d:0a:5d:05:3b:51:e8:78:a6:05:cb:7c:d6:98:
                    b1:60:4a:3b:12:16:ec:5f:e5:7f:70:be:fb:d8:c1:
                    64:6c:d0:23:8a:bc:09:12:56:35:6f:cf:f3:7e:6d:
                    e6:48:5f:78:09:be:94:82:bc:59:52:b5:34:71:e4:
                    cd:d7:28:be:7a:7e:48:99:3a:a5:3a:c1:34:d0:db:
                    4f:ae:91:f3:9c:bf:89:25:db:86:1e:55:2f:25:5f:
                    a3:d2:6b:00:77:1a:d7:47:ac:15:0b:d6:da:2b:93:
                    54:4b:c9:b9:dd:37:30:1c:fc:4f:0a:d4:ae:d2:28:
                    e0:81:7a:5d:60:32:4b:61:f9:3f:30:13:ca:7f:17:
                    aa:25:30:3d:3c:ab:9c:d9:6b:9e:cf:a4:d7:11:c6:
                    f9:3e:84:d2:39:e2:6e:03:fc:0d:98:df:3c:3e:6e:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F5:32:6A:F3:DA:40:E7:FC:DC:8D:D6:AB:45:2D:D6:C9:78:CD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:20:12:c0:2d:a1:99:9b:89:06:f9:b4:92:ff:0b:5a:bc:91:
         0a:60:22:6f:64:3d:f5:68:60:8c:d1:ac:50:73:19:e9:0c:9d:
         7f:71:b0:02:33:c6:79:44:b2:d7:ed:4c:a5:61:c5:3a:a8:6f:
         67:e8:5c:43:f5:e3:d0:7d:ba:ac:ff:39:59:76:c7:ef:1a:0a:
         ad:86:9d:b2:d1:c7:46:5f:c1:43:fe:0d:01:06:ac:cd:55:2c:
         c3:0b:72:18:df:9f:1a:9d:59:a6:5d:e6:e5:26:31:19:7c:9e:
         e6:e7:70:fb:d4:bf:d9:fd:d9:e5:94:a3:a2:f3:1a:7b:62:d0:
         41:33:9f:a6:9a:dc:0f:eb:fe:5c:cf:cb:4d:bb:48:d5:23:33:
         66:35:08:61:05:7c:a4:e0:7f:60:93:6c:f3:b6:73:6c:a2:53:
         e9:b8:bc:8d:ab:f8:e1:e0:94:ae:20:5d:49:55:d0:31:d0:51:
         41:a5:ae:b0:34:48:05:c1:93:0b:8a:36:7f:de:f2:49:1f:26:
         09:53:98:dd:cc:f2:bf:fd:43:19:3c:12:55:41:d8:aa:5b:d2:
         6f:16:2e:48:bf:40:ff:29:9d:59:28:ac:5e:57:c1:f1:58:bb:
         7c:d5:ad:c4:ba:4e:9b:30:38:e8:ee:d8:16:58:dd:23:37:30:
         b3:0f:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:30 2024 by rpki-client on console-fra.rpki-client.org