Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa
File:                     73ca0919-a04c-37ff-94f3-29d436366d7d.roa (raw, json)
Hash identifier:          ga1j2BCORSaDARSV9EmLvLniHMc+NxGp9sXE/yAfQRA=
Subject key identifier:   E1:9F:2F:53:16:76:29:E7:D7:D1:6E:CD:6E:E7:FE:C3:79:19:F5:0B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285844D5AFD7FF231A2BA16C136500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa
Signing time:             Fri 09 Feb 2024 14:00:30 +0000
ROA not before:           Fri 09 Feb 2024 14:00:30 +0000
ROA not after:            Thu 09 May 2024 13:00:30 +0000
asID:                     212238
IP address blocks:        104.243.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d5:af:d7:ff:23:1a:2b:a1:6c:13:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb  9 14:00:30 2024 GMT
            Not After : May  9 13:00:30 2024 GMT
        Subject: CN=cc0a98cc-358b-44b4-9eb9-4de2441ccd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:d3:09:c0:8d:87:8a:6a:59:42:70:6e:76:
                    c7:c2:2e:53:91:39:a8:d3:c7:d3:3c:bd:99:30:70:
                    cb:a5:9f:c3:a2:49:3a:91:bb:21:d3:c9:8d:78:8f:
                    2e:39:04:11:26:82:8f:3e:bb:95:85:1d:e0:eb:4e:
                    97:36:ea:43:d1:59:c7:26:c4:6b:3c:dd:f5:3e:4a:
                    71:dc:5b:ea:d4:09:d6:b0:59:ba:ef:6f:65:d5:fc:
                    10:01:2a:04:f5:25:f0:14:ca:0b:9a:b4:8d:20:26:
                    92:9d:13:26:21:bf:7d:c3:1e:64:e0:97:19:e9:08:
                    da:d6:63:30:ef:36:bf:57:a3:16:57:56:63:f6:a3:
                    f6:30:4c:62:d7:f9:07:20:9b:d9:b2:5e:b2:45:08:
                    53:da:5d:a2:8a:53:18:db:db:53:3b:6b:3a:db:53:
                    c8:02:5f:20:68:d9:9c:65:64:9b:52:5a:e2:04:e0:
                    e4:f5:01:ec:bf:b4:96:f4:f9:f3:be:6b:5c:00:4e:
                    51:58:f4:c2:c1:27:d2:1b:dc:f7:82:50:bc:65:ad:
                    63:fc:9c:8d:b0:33:56:0d:ec:f1:b1:f8:66:27:21:
                    40:7e:5b:b1:7b:e2:ff:7e:33:98:c0:01:64:a3:35:
                    6e:6d:c3:70:99:e1:8e:bc:be:ab:66:e6:e3:8b:d0:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9F:2F:53:16:76:29:E7:D7:D1:6E:CD:6E:E7:FE:C3:79:19:F5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:71:f2:e0:07:a4:9c:9d:f7:b1:55:35:16:2d:42:12:9d:
         d3:e2:16:eb:3a:43:af:93:06:d5:9c:71:23:c2:4f:b5:93:be:
         70:84:5e:66:92:88:8f:e9:1b:b1:f4:29:4d:71:12:3a:dc:92:
         44:1e:b8:72:5c:6b:db:43:fd:6f:cc:27:e0:0a:37:d8:ea:b5:
         4c:9c:24:6b:98:9b:3a:0a:3b:c0:85:7d:8b:ae:f9:2e:3d:1c:
         75:24:15:9c:7e:47:08:2d:7e:d7:3c:d8:ac:49:3e:db:a8:18:
         7b:a0:51:6c:df:11:34:cb:ec:cb:99:5b:c5:a3:2f:a9:fe:9a:
         88:17:4f:a6:ec:c8:eb:71:7d:3c:97:78:07:0c:6b:4c:4b:85:
         8b:2e:85:8e:9a:e3:7a:3e:a5:24:52:ce:cf:80:00:20:30:f9:
         f8:43:f6:ba:40:f1:d4:d4:0b:28:1d:fe:bf:e1:ab:18:43:a4:
         87:2b:d5:82:50:26:a4:40:82:4d:da:48:7c:b3:76:ee:2b:02:
         aa:c8:9b:2c:6e:5f:3f:2b:3a:d7:15:3c:19:27:86:29:76:d9:
         73:b3:50:a8:69:ba:74:4f:7a:5b:34:cf:42:d1:a5:b0:61:2c:
         f2:fa:53:29:d9:4e:78:a1:fb:a3:f0:42:bd:54:c3:e7:69:48:
         bf:ff:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:38:54 2024 by rpki-client on console-ams.rpki-client.org