Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
File:                     f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json)
Hash identifier:          zQ7RiTHLCQ1xVng38nAM90/Vf2Sxfg983yX5SQN7xlA=
Subject key identifier:   F2:56:02:26:12:8E:C8:9B:95:71:12:BC:7E:59:A9:42:55:C2:2D:A8
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F432858456A3197C49CA2C8C761F9B260
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa
Signing time:             Tue 02 Apr 2024 18:41:41 +0000
ROA not before:           Tue 02 Apr 2024 18:41:41 +0000
ROA not after:            Mon 01 Jul 2024 18:41:41 +0000
asID:                     396018
IP address blocks:        104.237.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:31:97:c4:9c:a2:c8:c7:61:f9:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Apr  2 18:41:41 2024 GMT
            Not After : Jul  1 18:41:41 2024 GMT
        Subject: CN=acc224b6-6f8e-46da-86ff-a4bf88d0f520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:81:24:99:e9:18:c1:9f:67:a9:48:e4:15:
                    18:f1:d2:94:aa:9a:40:77:c2:fb:b3:ef:d6:6c:6d:
                    1d:74:9e:de:70:e4:58:0f:80:33:63:fb:7d:4e:ac:
                    9e:38:a7:5c:5b:b0:05:1b:2b:b8:fd:3d:77:5c:ef:
                    e0:fc:05:0c:59:ca:00:d3:43:c2:45:04:bb:26:4b:
                    98:69:05:93:88:89:06:28:e9:89:b3:31:b9:39:0e:
                    d5:38:f8:3b:a6:97:da:5f:14:42:61:74:d4:56:4c:
                    8d:40:7d:6d:f1:dc:54:32:fb:87:d5:08:92:60:b2:
                    0d:e2:40:1e:fc:27:cb:24:dc:77:74:f3:b0:40:4a:
                    75:85:a0:6f:6e:c6:5e:06:47:04:bb:c2:69:22:ca:
                    31:5b:ea:79:34:9c:61:f1:92:98:dc:ec:08:ff:ec:
                    62:81:69:2c:fa:0c:36:36:9a:44:d7:d8:42:fe:55:
                    aa:46:4a:20:f0:1f:e8:46:00:45:c3:51:2e:c2:9e:
                    28:91:56:80:57:bb:25:59:45:95:ef:a9:9d:6f:90:
                    47:cd:d5:7e:7c:27:fd:6c:d4:ac:59:46:89:f1:d2:
                    14:c4:a5:bd:30:4b:17:85:1a:48:3d:d2:57:76:76:
                    80:a7:08:f3:d4:30:11:7d:f6:49:b4:9a:4f:0e:6a:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:02:26:12:8E:C8:9B:95:71:12:BC:7E:59:A9:42:55:C2:2D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d3:4b:0e:cf:04:5c:f5:a4:86:0a:2a:3b:1b:91:a3:20:9a:
         0b:58:0b:24:63:98:7c:b3:90:5b:90:57:a2:b8:e4:a4:ac:74:
         5c:86:3b:f0:d5:a8:08:9b:53:d8:e5:6c:9d:4e:67:86:62:ac:
         2e:6e:5e:e8:48:1e:0c:99:19:7c:34:d7:ef:e5:63:a3:90:4b:
         7c:2a:36:63:51:8c:a2:b5:3b:9b:21:53:76:7d:24:d5:a0:ff:
         43:4c:31:de:37:ea:34:fa:38:44:77:90:2d:4e:6c:d8:41:5c:
         92:19:a6:e7:7b:1e:cd:44:a0:4c:66:44:44:93:0c:4b:cf:b0:
         fb:c0:e6:9f:ce:24:9c:19:53:a5:a6:2c:63:a5:ef:6f:8f:9e:
         bd:47:22:a3:0e:8e:4d:7a:5d:e6:e3:21:07:5f:8c:4d:5f:00:
         be:87:17:1f:c7:14:f9:b9:c6:31:75:c8:a4:56:62:eb:7a:d9:
         2a:08:65:a8:eb:f7:f6:3a:c1:e8:57:19:8c:36:86:77:ac:1f:
         10:ab:cd:13:8c:7a:1e:c6:8a:e4:d2:d4:15:e5:25:64:b7:22:
         f4:dc:5a:45:b1:00:2e:39:f9:77:ce:55:65:11:e4:c4:46:f1:
         6b:b5:9c:ae:32:83:f6:8c:1b:8e:ad:20:9f:ba:96:85:39:db:
         03:1f:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:11:49 2024 by rpki-client on console-ams.rpki-client.org