Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa
File:                     7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa (raw, json)
Hash identifier:          OTN6HdhEH194DiT3TYwlUqsGr5q64AZCbGyY50LFUY8=
Subject key identifier:   A4:EB:93:44:7B:89:07:18:5D:71:7A:93:B1:49:45:2B:1A:9E:DA:22
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584582F3B68D730D95F0E59DDEC0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa
Signing time:             Thu 11 Apr 2024 15:32:13 +0000
ROA not before:           Thu 11 Apr 2024 15:32:13 +0000
ROA not after:            Wed 10 Jul 2024 15:32:13 +0000
asID:                     16696
IP address blocks:        167.94.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:f3:b6:8d:73:0d:95:f0:e5:9d:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr 11 15:32:13 2024 GMT
            Not After : Jul 10 15:32:13 2024 GMT
        Subject: CN=1a0f2634-9397-42d3-b700-98ee24bd8ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:4b:4a:76:b6:d6:37:92:69:59:0e:97:84:
                    9f:8c:92:d1:71:a5:13:98:35:df:0a:05:5a:ff:ff:
                    8b:b0:5b:3e:c0:4a:a3:49:6e:7f:ab:15:da:82:be:
                    c0:9f:89:93:36:a4:fa:c7:3c:bc:47:15:20:41:6f:
                    34:0a:8c:20:63:ef:d0:0d:34:fb:5f:d3:f5:38:d2:
                    75:06:fe:de:58:28:8d:3d:5d:57:c5:2a:1d:18:87:
                    46:00:76:46:95:1c:90:dd:a0:da:89:89:c9:ea:f0:
                    3d:ad:1f:27:bc:55:d1:96:64:25:48:61:b0:9d:4c:
                    9b:8a:f8:a7:24:2d:ec:dc:77:4b:f7:44:f2:bb:85:
                    46:55:69:87:5f:98:0a:5e:e4:4f:22:98:85:3e:56:
                    7b:fa:97:cb:a9:e5:15:99:8a:71:e4:b9:f1:2b:da:
                    93:9e:af:b7:43:a6:57:32:7b:2e:01:27:21:32:cf:
                    42:c0:85:0d:ab:b0:10:00:97:6b:46:e8:3c:dd:c0:
                    e8:f7:9d:59:37:a1:17:0f:8e:07:0b:42:e1:26:c5:
                    32:1d:ae:70:1d:42:0b:fa:fa:8a:3b:40:ff:23:f1:
                    5e:8b:f8:03:c3:fa:e8:0f:8f:0b:0d:c9:48:0b:2b:
                    78:63:8d:5d:f1:8d:97:f1:d2:8f:59:09:fa:67:9e:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EB:93:44:7B:89:07:18:5D:71:7A:93:B1:49:45:2B:1A:9E:DA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/7b36a150-8602-3e1f-87e9-e2ced5a476cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:86:fa:70:23:80:37:29:a1:a9:76:ae:8f:6e:3a:cb:7d:4a:
         3d:10:ff:c7:b1:0d:61:c8:20:55:3b:26:ed:c5:62:b1:69:b0:
         59:67:b2:76:31:02:de:b9:5c:32:43:35:62:12:36:b8:41:27:
         1b:55:ec:a9:83:0c:1c:ed:7b:38:75:e3:6e:60:58:4e:64:3d:
         bd:0d:94:37:c4:a9:eb:a1:0e:3a:83:e7:69:9d:29:fd:8e:d7:
         34:a9:95:ea:07:c4:bc:35:8a:db:27:c9:a9:22:0b:84:5a:c6:
         d6:5f:98:da:71:20:90:b4:cf:cb:af:a9:ac:e7:c6:4f:9a:46:
         94:7a:41:af:8e:ee:27:bb:9e:c7:1d:5e:a4:91:ed:ee:5b:4f:
         08:9b:6c:93:3f:fd:7d:9e:83:12:1b:fe:a2:cf:d0:2d:09:c4:
         67:f8:70:0d:e3:10:c0:53:31:f1:1d:7c:b3:73:78:9d:f4:19:
         27:27:8d:49:a4:7e:28:33:9e:3b:36:31:7c:3c:4a:ed:ba:bf:
         c3:b4:47:70:78:91:48:d9:b1:2e:d6:d4:37:ce:40:b6:d6:ac:
         23:6f:e7:e6:d0:55:e3:85:ba:76:62:b8:87:ef:bb:71:73:48:
         50:9b:e2:7a:20:06:4a:45:98:30:74:b4:6f:cc:ed:8d:17:96:
         05:b5:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:11:48 2024 by rpki-client on console-ams.rpki-client.org