Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02527703-f706-3947-942b-37eb63c59540.roa
File:                     02527703-f706-3947-942b-37eb63c59540.roa (raw, json)
Hash identifier:          BVKtv8chAMYCmXqDRD2mxTadY12hs+ZtX17FK8v3ErQ=
Subject key identifier:   23:D7:12:21:23:79:7D:13:41:A0:53:0A:F7:1E:EE:76:E1:27:5E:2D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847BB6F67E59F0D7042AE70E520
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02527703-f706-3947-942b-37eb63c59540.roa
Signing time:             Fri 01 Nov 2024 06:40:35 +0000
ROA not before:           Fri 01 Nov 2024 06:40:35 +0000
ROA not after:            Thu 30 Jan 2025 07:40:35 +0000
asID:                     137517
IP address blocks:        104.250.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bb:6f:67:e5:9f:0d:70:42:ae:70:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov  1 06:40:35 2024 GMT
            Not After : Jan 30 07:40:35 2025 GMT
        Subject: CN=e2d5a0d4-4e0f-4acb-8279-cacb35d93f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:a8:34:f8:1a:1c:65:37:a1:bf:d1:47:bb:
                    46:93:9f:d1:e8:0c:19:c8:ab:42:53:66:f1:79:5f:
                    ac:65:36:74:2c:02:10:53:8e:80:f1:1a:6b:a6:e7:
                    f0:dd:a7:c7:d2:12:96:9c:45:f7:8a:d3:c1:f8:f5:
                    8c:8f:e0:05:06:9b:65:72:a8:37:bc:2a:61:e0:e4:
                    ed:0f:a2:71:dc:ef:60:cc:c0:1e:b5:7b:88:0c:b9:
                    ac:4d:22:d8:f0:0c:5f:ae:0d:19:71:4b:63:51:52:
                    19:44:6c:34:4a:d7:06:0a:bf:e7:1d:21:b9:b3:24:
                    47:1e:ec:35:f7:b7:fc:3a:ec:d5:55:96:7b:ac:24:
                    7e:26:50:ef:79:9c:3b:20:a8:d1:c7:0b:2d:69:45:
                    f2:74:3c:45:16:29:20:2d:f8:ec:8f:e0:05:f8:3a:
                    9a:03:f6:e0:e6:0b:58:14:39:e7:84:e7:e0:95:c3:
                    e8:2b:dd:e4:64:2c:bf:38:23:0e:09:ba:13:4d:02:
                    b6:8e:18:c5:2a:3a:ca:6b:85:24:f0:94:12:d9:60:
                    3f:1f:9e:4d:cb:83:58:b6:eb:3e:c7:2a:6b:c2:62:
                    5c:d4:54:64:45:b8:f4:50:0d:0e:ed:e7:4d:cd:d0:
                    59:64:96:1f:46:82:1b:6b:bb:d8:b5:3b:2b:95:2b:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D7:12:21:23:79:7D:13:41:A0:53:0A:F7:1E:EE:76:E1:27:5E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02527703-f706-3947-942b-37eb63c59540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:fa:b2:ae:17:10:a0:8d:9d:38:98:a6:b8:ff:14:99:b7:
         8a:cf:90:5d:ed:18:9c:30:c8:22:04:80:40:9c:4f:7f:23:94:
         0c:5d:a5:4b:51:c4:cb:af:2b:cc:6f:10:a6:38:93:e3:fe:c6:
         44:f2:64:f4:7b:55:a5:db:0d:8e:df:3d:28:1f:90:a6:46:6f:
         a9:f3:d5:13:55:1f:db:4a:79:8e:e9:18:f3:89:4f:b2:05:80:
         19:38:45:09:4a:8f:8c:ea:ca:ed:78:ea:e6:66:c3:d1:41:18:
         8c:4f:8a:e6:1e:d6:ad:a1:57:ef:86:a1:3b:d9:e6:eb:15:c9:
         18:4d:ad:47:69:be:86:42:e0:54:b2:be:17:6e:fb:7d:78:c2:
         0e:7f:b5:47:52:d2:4b:d5:6b:32:0b:ab:9d:48:cd:a6:16:55:
         2d:19:53:d8:ef:70:61:bf:cc:c5:8f:35:d8:74:ac:3a:4d:a7:
         77:c4:ea:2c:50:96:0a:cd:eb:34:46:71:54:0d:7b:a1:ed:7e:
         68:97:16:48:e1:b5:24:32:77:a0:45:44:64:2f:7d:f8:6f:93:
         13:ec:c0:76:f1:f4:8b:25:16:b4:40:cb:bb:5d:66:82:fe:da:
         42:15:3b:72:5c:84:ec:b4:3d:1b:ee:6a:45:f5:db:bd:a6:7e:
         34:01:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org