Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
File:                     672a3d03-abc2-3f66-8052-26ed409619a3.roa (raw, json)
Hash identifier:          kYGlEwDh2UnUSnwtP+niWAHUHf8HLdiIGwdbel2NR1w=
Subject key identifier:   21:FB:72:CF:D4:64:AD:A3:26:5C:4F:3C:06:29:A5:2C:19:DD:50:09
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845A15E17C282C95111459F1540
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     13414
IP address blocks:        104.244.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:17:c2:82:c9:51:11:45:9f:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=d0d63f9d-2ad9-4422-b135-f6dd85abdbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:0a:53:98:9b:4e:86:57:98:46:b3:a4:ec:
                    2b:58:ce:14:74:d9:0e:b4:ae:0c:24:9f:2a:cc:f5:
                    de:26:37:7b:2e:5a:3c:c0:a0:f1:7c:ee:92:72:a2:
                    9e:1a:49:56:ff:14:7d:0b:20:c0:25:b5:e9:0f:62:
                    85:dd:89:8e:22:2b:d5:5a:07:91:ff:a3:8a:10:cb:
                    43:e4:b4:44:d9:ef:2a:94:35:62:d7:41:6a:78:c5:
                    90:5a:e6:dc:03:46:0c:c6:86:96:9f:4d:05:52:92:
                    aa:7f:79:4b:15:a4:38:94:41:19:c8:ed:fb:a3:9b:
                    8d:d8:db:53:80:39:d8:94:90:22:aa:34:63:c4:d9:
                    4e:f2:e7:18:fa:a1:55:d6:ce:16:33:06:df:45:fc:
                    d0:9a:00:0b:a2:90:e7:df:8a:28:b9:62:07:9e:d9:
                    ce:30:16:8a:bd:be:88:3e:65:a1:70:7e:c1:7e:08:
                    99:88:cf:19:d9:22:bb:3c:40:34:68:72:7f:ea:c3:
                    4f:b4:19:95:1a:1c:f3:37:e5:3e:7c:15:2f:b6:40:
                    19:19:c8:18:64:d6:d7:63:3f:58:30:52:13:c8:b9:
                    c9:b8:82:66:f4:3a:a4:6e:e7:8a:35:d2:ab:f3:84:
                    ef:7b:4d:f6:26:9e:c5:b2:68:2d:b3:3c:64:a3:1e:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:72:CF:D4:64:AD:A3:26:5C:4F:3C:06:29:A5:2C:19:DD:50:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:d3:d1:6e:ce:40:d6:d5:32:ae:67:e6:c9:7a:c3:c2:43:
         eb:49:2b:0d:9b:3e:72:a6:db:e6:71:54:33:6f:e2:34:71:46:
         4e:2c:3d:2e:05:59:04:ee:41:01:05:68:58:21:50:4b:0c:aa:
         06:bd:0a:66:b7:c2:a9:31:7c:02:83:e5:37:34:86:11:d1:43:
         01:6d:f1:b8:e8:14:47:8c:30:57:cf:22:86:e1:c5:0d:23:4c:
         43:cc:14:20:d9:c2:ae:35:7e:87:0f:8e:7e:8f:4c:53:7c:5e:
         1f:fe:63:a8:5c:c3:1e:9b:28:91:3b:2b:16:ac:35:70:a2:1c:
         6a:7c:bb:83:81:20:0e:ce:3c:23:ce:6a:58:a7:c8:27:81:d3:
         cd:d6:5b:35:0a:fc:f5:e7:11:09:5c:49:f5:88:43:51:6e:26:
         b3:b9:64:72:21:a8:e2:21:52:87:67:1f:93:45:78:e5:a8:28:
         61:09:f7:dc:7a:9e:7f:aa:ce:05:1e:52:99:1a:3c:06:15:8e:
         24:d7:6e:db:6b:d1:47:66:15:fb:31:2b:b5:45:d3:4e:21:6b:
         42:05:0a:46:4b:87:a8:2c:39:63:5e:a2:e4:c3:33:ed:e0:f1:
         f1:f6:2c:77:7e:9b:9c:6b:ff:f1:a5:c4:1b:51:91:4b:26:21:
         39:df:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:01:16 2024 by rpki-client on console-fra.rpki-client.org