Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
File:                     ee78d578-cb00-360f-80f3-173b2465e141.roa (raw, json)
Hash identifier:          dtb066S7QGctRF5hRqKLWQCFe6vgtfNdHAaN5tLvzMQ=
Subject key identifier:   3D:0A:B1:13:C3:E3:CA:45:0C:BA:BB:A7:78:48:CC:42:25:C9:98:4B
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F43285845304D38B8CB2D1A127E4F0700
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        104.249.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:38:b8:cb:2d:1a:12:7e:4f:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=4bfe1a7a-d96e-4a91-a74c-7532bcccc420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:07:6c:22:11:c7:21:15:2b:80:6a:82:2e:
                    d9:13:05:a2:13:8e:ce:f5:07:fe:cd:65:b4:1e:c4:
                    46:0c:a2:ca:d9:6b:7d:58:eb:99:8c:2a:18:01:ed:
                    9e:0f:8c:25:50:81:29:9a:da:f8:d2:8f:bb:6f:aa:
                    a0:01:19:c5:fe:bd:74:52:11:90:22:f2:f5:ba:d5:
                    5b:98:b4:63:40:59:4d:89:7b:ba:11:74:20:d6:db:
                    51:a8:f7:e0:48:13:a1:30:2b:14:34:48:b7:64:cc:
                    ce:85:26:39:7d:e1:77:74:1a:d2:0b:fa:3c:71:7a:
                    d9:35:4f:ab:f3:d8:7f:6b:4d:b2:d8:26:4a:d7:b3:
                    21:b7:0a:c0:84:3c:ec:9a:83:79:3b:2f:fa:11:88:
                    84:88:4f:b7:a4:22:28:6f:08:f7:7b:86:fc:10:1d:
                    a4:4f:d4:85:2c:82:39:49:cf:c1:0c:2f:23:8e:cb:
                    ad:8f:9f:47:3d:48:b3:12:c5:f0:93:e7:51:e7:34:
                    c9:c6:74:f9:32:07:5e:c5:06:3e:44:33:c7:77:5c:
                    49:58:dd:9f:92:2e:b4:85:4d:7e:4d:78:47:71:78:
                    88:d4:48:66:35:04:85:29:38:92:c2:3e:58:e1:4e:
                    36:96:84:1e:10:22:e3:e8:4d:03:fc:f0:7f:33:25:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0A:B1:13:C3:E3:CA:45:0C:BA:BB:A7:78:48:CC:42:25:C9:98:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:30:2d:e5:f7:fb:4b:d5:f7:49:6a:8f:02:10:85:a8:d5:
         cb:ee:a9:de:fb:5a:a4:22:a7:c9:cf:ff:71:56:01:19:f5:02:
         fa:8e:27:b0:1c:a1:31:ce:48:cd:eb:21:ae:e9:93:8e:db:0a:
         97:83:e2:2a:14:fb:9c:8d:45:22:ad:4e:d5:ff:cb:ec:db:a7:
         33:ef:3d:78:cf:b9:1f:b7:57:28:4d:43:de:4e:31:e5:b9:b4:
         74:8f:45:8f:44:41:c6:21:56:fc:c1:4a:58:76:18:1f:5a:ed:
         f8:13:79:c1:bc:63:b2:b2:0b:2f:04:3a:d2:20:ca:81:e4:6c:
         57:a6:0e:0c:51:05:4d:1f:00:30:c7:35:fd:a0:30:d0:47:c5:
         86:a4:2e:10:77:c5:01:15:51:2f:7b:d8:07:7d:53:71:0e:a6:
         bb:f1:3b:79:75:61:13:7a:12:55:25:12:c5:d3:bf:2c:f6:2c:
         98:43:c9:da:bd:fc:54:0d:d0:5c:d8:38:73:6f:48:36:32:f1:
         4f:be:35:ad:f2:c8:96:8e:50:e8:8f:39:f3:67:64:6a:e2:c1:
         e2:ef:2b:72:9e:60:27:a5:bb:98:43:e2:b7:12:90:65:d0:34:
         49:43:36:fb:16:80:f7:bd:5c:27:53:09:b4:80:3c:24:3b:2b:
         00:90:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:50:44 2024 by rpki-client on console-fra.rpki-client.org