Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa
File:                     303511ae-00e0-3ae9-9384-2797153592ac.roa (raw, json)
Hash identifier:          RknHGiNEdLXg/PgcIfQplIMzOphYS/B27dQ0RB7ErI8=
Subject key identifier:   47:9A:24:C4:BC:A9:E0:08:99:E6:44:02:CD:0D:93:66:98:95:73:AE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285844D5AFD81B4B5BE630378E4B40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa
Signing time:             Fri 09 Feb 2024 14:00:30 +0000
ROA not before:           Fri 09 Feb 2024 14:00:30 +0000
ROA not after:            Thu 09 May 2024 13:00:30 +0000
asID:                     212238
IP address blocks:        104.243.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d5:af:d8:1b:4b:5b:e6:30:37:8e:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb  9 14:00:30 2024 GMT
            Not After : May  9 13:00:30 2024 GMT
        Subject: CN=832f430d-4c79-41a2-8a21-af8c12acf3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:85:27:48:ba:79:5d:46:05:bb:6b:e1:3e:
                    0d:11:2a:9a:8f:3e:71:7e:47:d4:61:7c:51:f1:bb:
                    76:52:2a:f1:43:a2:8f:f7:31:b6:69:8d:cd:8f:92:
                    6d:90:85:bf:09:a3:27:ae:2e:6b:96:52:df:6d:f5:
                    30:c4:7f:7d:d3:b7:cb:0f:71:ec:2d:76:be:13:42:
                    7d:ab:ff:94:99:40:51:76:50:e6:06:40:04:9e:b6:
                    26:df:21:0e:87:03:0a:1a:4e:70:7a:f4:b9:d8:dc:
                    23:e8:f8:4d:4d:36:52:a6:5c:f3:11:6b:48:cf:7d:
                    82:02:23:f7:c1:ad:55:05:73:16:99:44:49:16:96:
                    91:47:aa:b4:c5:97:be:1f:35:61:38:71:bd:18:56:
                    6f:97:60:73:62:a0:74:bf:e5:ae:d1:8e:be:99:fd:
                    2e:56:b0:f7:62:c2:91:b7:34:84:49:6b:1e:41:12:
                    e0:1b:bc:ee:c4:94:71:4d:81:a0:ce:39:2d:42:fb:
                    57:ab:b0:4c:e6:44:26:8f:a7:9d:51:64:7d:df:bd:
                    76:3b:c7:f0:20:01:6f:51:12:76:f8:72:0d:b5:fa:
                    ac:29:63:6b:57:c4:71:a2:09:43:21:c7:f1:04:d5:
                    91:b1:de:2b:ed:8b:b6:0a:c8:57:6d:61:27:a1:74:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9A:24:C4:BC:A9:E0:08:99:E6:44:02:CD:0D:93:66:98:95:73:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:af:21:64:6f:e6:0f:6f:22:53:01:9b:e5:de:ec:5d:04:0c:
         b6:9d:bc:28:05:a3:c6:e8:7c:e9:f5:6e:10:61:67:84:02:35:
         b0:b5:1d:ec:ff:5d:82:3b:9b:ac:e0:af:54:15:77:5c:c3:0f:
         75:2b:55:2c:f1:6c:b8:86:8e:34:a4:b8:c3:de:d2:36:72:24:
         e7:cd:f8:c4:20:5a:83:b7:cd:63:7b:f5:38:0d:c0:ee:4d:b0:
         72:ad:26:bb:b9:d0:88:c2:2d:11:df:e0:10:8b:c1:30:47:e2:
         6c:26:3a:75:f4:af:7e:7a:ea:f9:93:ea:a3:76:25:51:50:4a:
         f9:f7:0c:ce:75:e4:34:71:a8:b0:f0:96:3e:51:08:d5:2b:1c:
         04:8d:14:a6:cb:eb:8a:21:57:05:08:a1:1c:a2:16:df:74:8e:
         f9:70:40:b2:1d:0f:c2:5b:77:cb:1a:f7:15:bb:0d:8d:45:34:
         be:85:eb:65:a7:d9:3f:29:cb:e2:79:be:5a:fd:06:d5:4c:35:
         79:98:c3:6f:40:d6:e2:83:27:d0:7f:d7:c0:91:34:f8:01:fd:
         97:66:a7:2d:51:6a:23:df:ca:ac:97:22:6d:a0:02:bf:4d:3d:
         94:02:ed:78:35:2e:97:77:99:71:25:39:0f:44:4b:a7:82:11:
         f0:0a:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 22:32:27 2024 by rpki-client on console-ams.rpki-client.org