Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48a1966b-84cb-3eb4-bf2c-6c5c8b1dbe7a.roa
File:                     48a1966b-84cb-3eb4-bf2c-6c5c8b1dbe7a.roa (raw, json)
Hash identifier:          /iZStEPk41rv8h0rV2CSwu6C2bSMfG0P/Q4er5VuSkM=
Subject key identifier:   F6:F4:7E:3B:2D:12:0E:37:DB:CA:36:14:6B:6D:BC:8E:1C:A3:FB:BF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847BEFCE20D438B9B54C7863E60
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48a1966b-84cb-3eb4-bf2c-6c5c8b1dbe7a.roa
Signing time:             Sat 02 Nov 2024 13:13:04 +0000
ROA not before:           Sat 02 Nov 2024 13:13:04 +0000
ROA not after:            Fri 31 Jan 2025 14:13:04 +0000
asID:                     151106
IP address blocks:        104.250.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fc:e2:0d:43:8b:9b:54:c7:86:3e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov  2 13:13:04 2024 GMT
            Not After : Jan 31 14:13:04 2025 GMT
        Subject: CN=adba8581-3795-4de7-a7a8-efff6f71f6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:f8:66:12:aa:48:0a:05:85:26:7f:ce:38:
                    7c:9f:6b:36:98:10:2d:46:a9:d3:12:29:4c:4e:4d:
                    21:04:78:5c:ea:63:6c:37:6a:5f:05:3f:0d:e6:ec:
                    7d:a9:f1:17:15:0b:7d:70:ab:2c:72:85:3d:2c:be:
                    b5:06:b7:47:42:39:df:48:a8:0b:cf:33:47:07:c3:
                    bb:fb:a3:97:44:94:46:d4:5d:f0:ed:4b:2c:c8:54:
                    ec:50:fb:e0:a8:4d:66:ac:3e:f5:d0:20:be:33:29:
                    49:e1:f7:27:57:2a:55:90:d5:a2:d2:dd:a7:b4:e5:
                    1f:97:f5:39:c4:3e:c2:74:4c:b0:5a:d5:9f:a8:f3:
                    18:e7:4c:67:10:56:70:ce:8d:8c:a3:f3:35:3d:15:
                    66:b2:e3:79:ed:51:c4:8b:39:3f:a7:f3:bc:13:72:
                    a1:26:74:cd:16:f3:81:4f:ff:b9:e6:b9:49:a6:8e:
                    dd:bd:ea:1f:95:f3:e5:36:f9:bf:d6:44:e8:df:43:
                    80:56:94:d9:b2:eb:81:e6:1b:e3:6c:c6:72:7a:29:
                    2b:ef:b9:6f:ab:59:da:e3:6a:ad:26:8b:0b:0f:c0:
                    92:9e:34:9d:d2:13:04:bf:c3:4d:e2:17:ae:d6:ca:
                    43:91:0f:48:f5:f2:35:c2:9b:3e:95:79:20:73:20:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F4:7E:3B:2D:12:0E:37:DB:CA:36:14:6B:6D:BC:8E:1C:A3:FB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48a1966b-84cb-3eb4-bf2c-6c5c8b1dbe7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:1a:30:9e:e7:87:db:bc:f7:08:a8:07:50:7b:8c:71:9c:
         18:55:4a:cd:bb:cf:80:d8:ad:d3:a6:b0:1c:49:78:23:fa:f3:
         ea:24:47:f0:f2:64:e2:f9:78:11:7c:6a:c4:3e:38:d2:2a:f9:
         4b:14:8c:44:85:c9:2b:c1:a7:d4:66:ff:9f:d5:e3:7c:e3:24:
         00:47:00:96:0c:4d:9e:60:c0:c9:83:57:15:0b:fb:95:0d:60:
         3f:b5:28:40:c3:af:86:fd:9e:f5:10:a8:81:0b:62:42:68:05:
         11:90:81:18:e2:29:86:14:ad:52:12:90:9d:53:37:48:a4:09:
         38:22:f4:1a:0c:59:3c:ba:bb:dc:f7:e3:05:ad:f2:6d:62:37:
         d1:97:91:ff:ae:c6:bf:dc:a5:5c:6a:b9:19:2c:9c:22:f2:66:
         bc:df:10:19:a4:da:bf:41:d8:ce:ec:cc:49:bc:31:0a:00:74:
         13:20:12:cf:c4:6e:c4:ae:3c:5c:31:53:fd:b1:b2:ac:9a:1e:
         2a:bb:25:a3:b0:b2:46:6b:b9:8e:ea:35:8f:51:65:8a:51:9f:
         80:bc:ab:a0:99:cf:96:b4:66:3d:87:69:f0:36:25:12:fd:f3:
         7a:e8:0b:49:10:8a:9a:fb:96:51:63:ae:c0:2c:e0:ff:6d:ed:
         b1:66:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org