Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/46d0c089-21f4-3f67-aa40-b1770540315e.roa
File:                     46d0c089-21f4-3f67-aa40-b1770540315e.roa (raw, json)
Hash identifier:          lPy3sKr9Ij/rqGD3WKvd2bxyDlzY/SF9xWhm6JDvVa0=
Subject key identifier:   ED:7F:EC:6E:85:52:1C:00:03:51:69:E6:13:99:05:7A:BC:3F:FE:F5
Certificate issuer:       /CN=4281be58-d566-431e-b0b8-c563e631a010
Certificate serial:       010D0C9F43285847D6CF48100A1409F012980A80
Authority key identifier: EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/46d0c089-21f4-3f67-aa40-b1770540315e.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     215304
IP address blocks:        104.192.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:48:10:0a:14:09:f0:12:98:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4281be58-d566-431e-b0b8-c563e631a010
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=efef8b23-d457-43f9-b7c8-8f9e9420fabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:5a:03:15:ce:ad:4d:84:d5:d0:1d:f9:b3:
                    a3:b2:a7:82:82:b9:0c:a4:89:f7:00:fa:89:b4:85:
                    9a:3c:57:61:9e:3a:4a:43:a0:1c:27:89:47:15:e9:
                    e6:0e:ff:fa:aa:65:99:5a:7c:ba:f7:d2:10:df:e6:
                    bf:2c:cc:7f:3d:a9:96:c0:76:43:13:1c:c5:94:1b:
                    45:14:c7:7b:ff:f6:87:c0:47:00:6f:2f:86:f7:b6:
                    91:02:b5:27:14:06:3d:97:2f:fe:2d:06:f0:97:c6:
                    fe:ae:6d:97:b9:e4:e6:56:71:54:6e:ea:fb:24:3b:
                    2a:cb:17:4a:6e:43:7b:46:d5:8b:13:fb:60:df:ac:
                    63:fb:4a:f5:c2:83:52:6d:87:75:af:7d:9b:cf:94:
                    86:23:af:3e:ba:98:05:6d:b6:5a:3f:ac:ef:c0:eb:
                    78:26:4e:7f:02:5c:0d:41:c8:9a:52:90:6a:e9:95:
                    43:7c:f8:b4:c3:29:30:51:39:9d:da:15:a7:c1:f1:
                    94:c0:b5:4c:00:97:e2:cb:fc:17:13:60:02:21:95:
                    e4:b3:2f:f8:0c:88:96:7a:89:73:47:fb:91:58:d4:
                    68:35:a9:89:53:cb:f7:b8:fc:89:c1:47:b0:bd:5d:
                    1c:d4:11:3c:ee:31:17:dc:f0:d8:0e:fd:cb:87:31:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7F:EC:6E:85:52:1C:00:03:51:69:E6:13:99:05:7A:BC:3F:FE:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/46d0c089-21f4-3f67-aa40-b1770540315e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.crl

            X509v3 Authority Key Identifier:
                keyid:EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:6a:bc:20:6f:62:ae:fb:d3:27:97:07:c1:a8:77:bd:bd:
         bd:67:04:ec:b6:f9:d1:28:ad:9a:34:b8:9e:85:fb:9d:bc:2d:
         90:7a:1b:12:03:d7:4a:7d:46:4a:cb:c1:72:d9:4a:8b:b3:22:
         23:fe:c1:ef:b6:c0:37:27:b4:7e:80:35:6e:0a:ad:d5:34:70:
         ca:dd:ec:85:b5:93:c0:39:a0:9e:ad:53:3e:8e:d6:34:69:ef:
         48:a5:56:e9:bf:15:e8:9b:17:ca:16:70:3e:ba:1b:3c:ff:46:
         21:57:09:d7:40:51:f4:07:af:3e:a8:85:b3:e9:f8:2f:5d:aa:
         0f:cb:19:8e:4a:9f:1c:42:a4:cd:e0:5c:4b:83:df:ea:52:1d:
         b8:42:74:33:3c:ab:87:6f:26:ed:43:d6:b7:50:e6:5c:5b:fd:
         a8:fc:79:83:9d:90:7b:cf:42:c0:25:ff:43:cc:58:b5:96:af:
         46:a4:4e:69:b8:25:1f:e1:02:1e:21:6e:b2:4d:94:ab:a5:af:
         e9:52:50:a6:65:7c:14:dd:aa:a4:16:7e:f9:57:ea:d5:9e:1b:
         9e:d5:44:e1:82:89:61:4d:86:4c:67:68:6e:7b:10:e5:c7:b0:
         57:98:ff:97:4c:43:e5:74:fb:8d:e2:8a:c4:77:82:17:04:b0:
         5e:53:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:33 2024 by rpki-client on console-ams.rpki-client.org