Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
File:                     84343704-c93f-31bb-ae2f-4e88f3e7612a.roa (raw, json)
Hash identifier:          8fjI7XadsaWtpi3Ad4a0FIppzbkmT7T/smB4yxgZ9Iw=
Subject key identifier:   B5:FD:D2:39:38:3E:7B:37:19:C3:23:3E:EA:28:E4:29:11:D5:E0:8D
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F432858474F4B6CC3EA22E0D388DDBDE0
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     16509
IP address blocks:        104.192.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:6c:c3:ea:22:e0:d3:88:dd:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=17e55f07-8add-4cda-890b-af09b50a54bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:e2:39:16:31:c6:87:c4:2b:6d:e5:aa:60:
                    d2:3a:88:88:5e:3e:59:df:c7:3e:ae:72:8d:2e:90:
                    3b:35:32:d5:9b:a3:3d:41:b9:75:cb:c6:49:ef:65:
                    1d:a0:b3:87:df:40:61:57:83:7a:94:5b:d3:67:e2:
                    7f:25:12:79:ba:79:09:d8:42:3e:d1:c3:a5:c1:0f:
                    47:54:c0:de:f3:1f:58:ef:44:1b:7d:21:e2:0b:82:
                    91:86:86:bc:00:47:17:b9:c5:93:29:2d:db:7b:1f:
                    cf:8e:dc:b3:50:c9:87:3e:7e:02:87:32:dc:67:8d:
                    23:1a:8d:a3:16:fc:83:cb:62:de:41:29:0b:42:18:
                    22:96:df:7a:11:86:ed:dd:82:3a:9c:e5:8a:c9:7f:
                    80:eb:17:fe:34:49:b2:a7:ef:31:76:f7:bf:78:fd:
                    ab:48:af:ad:30:0d:49:cd:a8:fd:89:19:30:cf:59:
                    6f:e0:a9:35:97:f7:06:18:c7:64:ca:f5:fe:d1:0e:
                    1d:3d:1d:cd:f8:86:64:84:5b:fd:3f:03:b9:d6:0d:
                    a7:e4:88:64:1a:25:cc:54:c4:46:7b:c8:b3:82:9b:
                    8e:f1:a6:17:61:b2:4b:ff:e1:3e:c2:20:7e:31:41:
                    f4:f2:c3:ef:a9:2f:e2:5d:8e:1f:27:80:f9:0d:34:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:D2:39:38:3E:7B:37:19:C3:23:3E:EA:28:E4:29:11:D5:E0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:1f:e5:1e:95:f6:90:37:d6:97:75:6d:1f:74:65:a8:74:
         01:ac:28:2e:f0:a1:51:61:15:c6:0f:ab:2c:85:cc:8d:a0:48:
         e1:aa:5a:26:e3:6d:5a:40:dc:b0:1d:42:35:72:70:3b:ec:5d:
         7c:ca:ff:23:7d:54:f4:09:6a:e3:07:47:99:67:bb:f5:8e:d5:
         4d:9c:c3:d5:a9:c1:65:43:ce:00:47:3e:c1:4f:8b:53:21:9b:
         93:ee:95:bc:c6:5b:b1:09:b3:2b:5b:a2:0c:93:10:23:67:11:
         b6:16:fc:b6:39:a1:fd:b6:47:bd:ff:3d:25:eb:df:b4:bb:b5:
         2f:7c:b7:e3:17:b5:cf:1d:73:92:43:35:4b:fc:c4:f7:69:ba:
         77:44:79:ff:45:6a:eb:00:12:50:16:12:fd:23:b4:d5:1d:cc:
         f8:28:e1:11:5e:d2:88:29:65:0b:be:39:92:a6:85:6b:1d:ee:
         ab:23:13:fe:5b:c7:8d:d7:89:1c:71:e7:c7:4d:59:3a:33:fa:
         d8:76:4e:a0:0d:cf:a9:da:11:1a:9d:5c:c4:99:39:a1:2a:42:
         dd:ca:08:a4:2e:95:53:ea:7d:93:19:dd:33:a3:f8:b0:a4:35:
         c7:fd:3d:75:90:2c:45:c7:71:27:72:3a:89:49:84:15:c3:6e:
         ca:4f:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:23 2024 by rpki-client on console-fra.rpki-client.org