Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa
File:                     5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa (raw, json)
Hash identifier:          94ADVnZOVcp01xOyfIMaJjiMax1Fy2yhGGqR2z7dXyI=
Subject key identifier:   DE:A1:B8:E9:E1:F9:1A:5D:24:5E:77:A3:23:34:B6:D4:52:02:BD:FE
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F432858456A33140EECEC8115F16CFEA0
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa
Signing time:             Tue 02 Apr 2024 18:44:41 +0000
ROA not before:           Tue 02 Apr 2024 18:44:41 +0000
ROA not after:            Mon 01 Jul 2024 18:44:41 +0000
asID:                     14618
IP address blocks:        104.237.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:33:14:0e:ec:ec:81:15:f1:6c:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Apr  2 18:44:41 2024 GMT
            Not After : Jul  1 18:44:41 2024 GMT
        Subject: CN=7db4c31d-2aeb-416b-a91b-51efabf1bdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:c8:a5:05:67:44:6c:20:67:06:ee:f2:32:
                    e2:2f:7f:86:4e:7a:29:eb:10:34:33:03:84:d4:26:
                    3f:cf:82:e7:64:2d:87:5f:d4:ac:14:ab:c8:92:47:
                    f7:b8:ed:d3:f0:7b:cf:d1:fc:a6:e9:b3:65:01:59:
                    5a:d0:3a:51:8f:34:84:aa:4e:59:4b:dd:4f:c4:a3:
                    3a:95:43:27:61:29:da:67:94:33:8e:a4:63:95:1b:
                    b1:75:61:dc:bd:e7:cd:fa:a0:89:db:ee:42:58:21:
                    12:3a:16:84:87:1e:37:77:f1:24:d8:76:d8:e3:8c:
                    ab:17:bb:d8:22:30:61:1d:05:6f:11:e5:63:89:af:
                    b4:f5:61:50:bd:63:d8:37:5e:82:30:63:ed:be:97:
                    06:48:7b:d4:93:99:b3:62:23:52:0b:43:f8:5f:39:
                    52:ce:77:d2:d5:20:7c:a1:ba:75:37:45:fc:e4:b0:
                    9b:7f:4d:db:70:71:34:60:d4:64:0c:b7:74:2a:11:
                    b4:d4:57:46:54:74:33:a7:54:a2:3e:31:7b:1b:c7:
                    d6:36:17:93:93:fb:b3:a2:d5:0a:0c:dc:1a:32:f6:
                    c9:49:43:eb:60:7e:d8:cc:63:3c:18:fe:d2:89:11:
                    f3:df:4d:74:26:ac:ee:b9:a3:cf:a7:22:f2:01:32:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A1:B8:E9:E1:F9:1A:5D:24:5E:77:A3:23:34:B6:D4:52:02:BD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:ce:57:51:de:aa:1d:02:17:7f:5e:55:7a:0b:7e:90:80:
         92:0e:86:a9:30:fa:5d:e3:d8:23:1f:35:3c:92:db:07:7f:e3:
         91:d7:94:34:dd:f3:60:91:ac:b1:7a:28:5d:4f:24:20:55:20:
         69:48:2e:4c:0a:b8:be:17:d1:32:a4:cc:5d:24:e4:65:c6:ca:
         e3:02:11:71:4c:3e:e7:df:70:01:79:59:c3:0f:51:9b:ec:c9:
         31:44:8d:ae:a8:0d:74:a8:45:b9:1b:a2:13:cd:e5:ad:83:71:
         34:99:82:08:20:2d:34:ad:06:10:09:3a:75:72:d6:2a:df:ca:
         2e:3c:eb:52:2f:51:08:69:2d:8e:2c:d8:15:bf:43:e9:a5:97:
         a1:cc:70:3e:23:ad:45:13:44:90:1b:53:e2:79:90:b4:8c:d3:
         14:b0:57:14:9a:0e:53:36:e3:61:5b:6d:45:cf:c9:16:18:a2:
         af:1f:38:b1:17:2d:49:87:97:9e:11:33:76:a2:69:03:13:1e:
         ca:5a:73:d2:ee:59:71:5f:b1:00:02:e5:29:34:84:11:61:2e:
         32:ec:e2:b9:9f:4f:fe:68:c6:85:e6:27:5b:0e:49:33:5f:ec:
         e9:0c:60:4d:a5:6f:42:17:6c:cc:8b:72:eb:50:6e:4c:b1:45:
         e1:70:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:23 2024 by rpki-client on console-fra.rpki-client.org