Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa
File:                     9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa (raw, json)
Hash identifier:          3db9BuXZtmNRvNEZRntpxAfTZYx03/OCp1q7GbPigmU=
Subject key identifier:   99:18:63:81:F5:B2:26:22:58:8D:49:9B:3A:87:1A:19:6E:34:EB:47
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F432858456A322B6DDE2A3226BC503A00
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa
Signing time:             Tue 02 Apr 2024 18:42:51 +0000
ROA not before:           Tue 02 Apr 2024 18:42:51 +0000
ROA not after:            Mon 01 Jul 2024 18:42:51 +0000
asID:                     14603
IP address blocks:        104.237.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:32:2b:6d:de:2a:32:26:bc:50:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Apr  2 18:42:51 2024 GMT
            Not After : Jul  1 18:42:51 2024 GMT
        Subject: CN=a1218aab-bdb1-449e-aced-40ea873a260b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a5:08:cb:57:03:2f:20:f0:cc:18:c8:67:cf:
                    44:6c:8d:38:f2:2e:f7:39:bb:8f:f8:5b:af:ab:1d:
                    40:92:02:54:fe:06:c9:a9:6b:90:e5:ff:b0:07:80:
                    37:e5:e6:31:ee:61:c0:51:5d:98:65:e2:af:80:03:
                    0c:61:c6:d4:65:18:23:d1:93:6d:e5:e1:c5:e5:33:
                    06:7b:5d:9d:c9:0a:14:ae:e9:a1:08:2b:97:fc:43:
                    33:38:35:f5:6d:0a:42:6c:3c:50:c4:28:51:2f:01:
                    5f:b4:d1:e8:54:5c:53:4c:aa:8c:f0:12:a4:ce:7f:
                    fe:e6:82:7a:76:58:a9:e5:15:6a:63:3c:1e:54:a7:
                    16:5c:22:93:30:ad:2f:c9:f6:8c:11:c3:a9:0b:23:
                    2f:39:73:32:bb:f0:17:76:7b:55:f6:27:36:2a:3b:
                    99:fb:8a:1e:8a:2a:66:a6:19:1d:21:3c:2f:2d:a4:
                    e8:9e:79:c8:fa:cc:b9:67:7e:6a:b2:e2:a3:c0:c8:
                    cd:0b:38:ef:73:25:f4:51:1c:90:24:28:da:09:d2:
                    6e:eb:6d:b4:7f:05:eb:16:6e:9d:68:f2:bd:49:f9:
                    5f:38:40:8c:a0:36:57:7c:e5:06:24:39:91:dd:4f:
                    4f:f7:71:ed:fa:60:b8:ee:3d:e1:41:6c:0a:42:36:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:18:63:81:F5:B2:26:22:58:8D:49:9B:3A:87:1A:19:6E:34:EB:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d5:ae:98:ff:bd:00:62:15:f3:47:4c:32:94:41:ce:63:8e:
         da:17:3c:c5:fe:06:2a:94:44:c6:1f:91:8a:4e:5b:89:0c:da:
         08:6d:e7:e6:b7:80:a7:c2:38:5f:0a:37:ca:08:ff:a5:83:72:
         04:4b:18:6c:22:ba:af:74:7e:f9:de:eb:2a:63:f3:d4:57:be:
         13:0d:d7:eb:63:ce:8d:3c:4b:62:fd:3b:cc:34:54:5f:db:0c:
         94:0b:f3:91:61:58:a6:41:dd:74:8f:2d:fc:a5:36:86:20:ec:
         63:c3:63:67:ff:57:a9:a2:72:18:08:5a:db:38:ef:fb:ab:39:
         31:52:7c:d5:27:31:c6:56:d6:9a:00:94:98:b1:e3:0f:ce:65:
         87:21:e3:25:a4:a1:f2:f8:5b:8b:e7:b3:3f:b9:e1:6c:47:d1:
         9e:f5:0b:2e:03:c5:0c:c8:02:30:ef:d1:c5:6b:6d:e6:4b:df:
         4e:19:3d:23:23:8e:7a:f7:b0:16:13:c1:a1:78:c4:05:1d:53:
         2f:69:ab:3f:3a:44:15:79:97:86:df:53:fe:fb:81:ff:30:6a:
         46:b5:c8:57:24:7d:fe:d7:9a:40:d5:de:72:81:e4:e2:b2:b4:
         dd:85:5e:8e:8c:03:be:26:41:83:25:84:bd:f5:0f:b6:2b:75:
         99:60:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:11:49 2024 by rpki-client on console-ams.rpki-client.org