Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa
File:                     83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa (raw, json)
Hash identifier:          n2XZy0FUp+kzFP2C/LM11AQiR/jSmicqXKOb3VeG9O4=
Subject key identifier:   05:EA:F9:D2:B3:63:DF:64:5B:A6:F2:81:6B:82:71:AA:6D:B8:44:0B
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F43285847299B2D07A79749A4E349A040
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     16509
IP address blocks:        104.237.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:2d:07:a7:97:49:a4:e3:49:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=c00fb7c5-deed-48a1-9465-8d8611a38cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:54:27:59:e1:d0:df:c8:e1:f6:19:62:d4:
                    2f:a3:a0:36:27:18:78:7f:bc:bf:3e:d1:2d:56:ed:
                    c2:08:4a:7b:f5:50:bf:17:c9:c1:ed:2e:02:7b:84:
                    ee:36:82:53:9d:42:9a:22:db:62:d7:0d:39:47:b4:
                    91:2b:dd:59:81:a9:ae:52:d4:30:35:f8:84:51:87:
                    d9:ad:76:9f:ef:7b:cb:09:a4:44:74:8d:3f:9b:6f:
                    73:9f:bf:15:fb:56:f1:98:d6:2f:6e:66:18:66:21:
                    b3:31:ec:d5:45:3e:a2:7c:cb:5b:5f:03:1f:21:63:
                    9f:89:a7:65:a5:61:36:83:27:fd:a2:3c:64:02:c6:
                    bc:78:a4:49:f9:24:71:c1:76:3a:3a:96:e6:57:44:
                    3b:6f:b7:86:c3:86:20:d5:49:e9:21:d7:d4:23:c5:
                    e3:d3:6c:3c:1a:49:a5:91:2e:4b:c2:c8:5b:c8:c1:
                    7c:f1:02:95:78:49:f7:ef:d6:7d:17:17:be:8a:8d:
                    f1:9d:48:e4:a5:d3:4d:2f:8b:07:ce:ad:31:0d:1b:
                    1f:dc:33:9c:af:31:4c:f7:76:a8:6a:58:1f:b5:d8:
                    4e:fd:1e:68:da:36:e8:5e:5c:85:83:b9:6f:30:76:
                    5c:4a:73:99:07:90:e6:7a:4a:83:f6:b0:f2:8b:be:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EA:F9:D2:B3:63:DF:64:5B:A6:F2:81:6B:82:71:AA:6D:B8:44:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:6d:b2:ea:b3:26:dc:76:73:d2:4c:07:e5:58:05:f5:8e:
         40:68:52:f8:10:95:c0:92:83:62:58:fd:99:1c:94:2d:8f:5a:
         64:79:7b:e3:6a:83:34:87:7e:58:51:e0:62:c1:ac:05:4d:ea:
         49:88:a0:23:82:bc:da:3d:57:3e:47:57:ff:a3:e2:3c:1c:b8:
         02:c9:4e:f0:95:de:3c:9f:36:04:46:7b:05:b7:fb:07:61:81:
         52:b3:0e:43:59:c0:55:8a:f1:58:67:ee:75:55:a6:4e:dc:c5:
         1d:e9:0b:36:2c:b3:00:25:37:46:ab:6c:9a:9c:75:aa:79:f2:
         2f:f5:06:3a:cb:0f:5e:5c:e8:d1:8d:47:85:67:fb:9f:12:52:
         00:f6:13:d5:33:86:1e:87:27:d4:82:78:ef:07:61:78:ba:9a:
         f4:10:29:22:51:02:fd:2b:f2:5b:ea:03:15:b7:28:06:50:0d:
         54:0d:b1:1e:2a:b5:82:b7:79:64:1e:ff:80:86:33:2c:d6:44:
         e0:91:20:7f:ec:67:9b:6d:fa:30:21:db:d4:cc:bf:fd:65:b3:
         80:e4:5e:83:47:f1:9a:a4:09:a7:9f:1a:e9:31:de:d9:81:41:
         ec:5a:ec:68:5c:17:f2:ee:bc:38:c2:fe:21:72:b5:68:53:6b:
         e8:7f:79:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org