Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa
File:                     d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa (raw, json)
Hash identifier:          iSds0RwgJSTmycqOXIIzljDtTV94xrFMLTg8nCAdCQ4=
Subject key identifier:   00:45:85:BE:CE:D1:53:59:93:E2:DD:DB:20:60:79:A9:92:8E:05:9D
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F43285847C1DF48150CEC9739EEFD9F40
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     26658
IP address blocks:        104.243.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:48:15:0c:ec:97:39:ee:fd:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=a92a07e5-96fe-40a2-ad2e-943c30a54887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:67:5d:b2:ff:89:40:33:62:7f:f5:45:f8:
                    29:76:d0:45:af:f0:c7:57:6f:e4:1b:08:fc:84:ac:
                    4d:0e:34:7c:db:44:b3:db:68:22:37:a8:5d:c7:74:
                    49:3a:38:03:c9:a7:16:e9:5e:00:a1:2b:7a:7c:fb:
                    a0:33:13:0b:07:df:23:7f:b1:87:e6:1f:cd:8d:fa:
                    2e:26:2e:5a:a1:9f:f2:09:e6:c1:6b:6e:0e:02:7b:
                    49:4a:f5:f2:36:00:dc:e0:d3:ba:af:8b:e4:9c:de:
                    65:f0:6a:ff:a2:4a:f5:a5:19:b4:74:d3:c1:e9:59:
                    7c:88:8b:c8:76:7e:97:48:13:05:3a:86:c6:c6:66:
                    48:7f:88:42:59:c9:60:98:b7:99:f5:03:a9:2e:d6:
                    4b:c1:b5:82:94:6d:44:11:72:cd:9e:bc:bd:7d:c3:
                    cb:ab:ea:3e:d7:d2:40:d4:a8:bc:3a:8b:a8:2c:e9:
                    cb:12:13:d0:c8:0e:91:a8:f9:a6:6b:08:11:99:d1:
                    4c:10:49:02:95:1a:14:d3:d3:4d:e6:5c:90:a1:0a:
                    94:3f:98:f1:48:ed:b5:d6:08:b3:2b:3d:a7:d4:27:
                    cb:bd:98:47:94:06:8d:3e:36:8d:31:5c:47:76:e6:
                    86:69:f7:20:fc:5e:e7:07:88:75:c2:73:b8:33:c3:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:45:85:BE:CE:D1:53:59:93:E2:DD:DB:20:60:79:A9:92:8E:05:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:61:e1:30:c6:55:1d:94:e1:8c:93:df:b8:13:ae:b0:79:94:
         5d:7e:71:c8:7a:1a:9e:c5:06:b9:c2:c6:ef:68:f0:2a:60:ac:
         e9:9d:ba:02:d5:e1:6a:06:4f:b9:29:53:bd:3d:d8:e5:82:8d:
         1c:71:ef:4e:45:92:01:af:45:10:92:c5:8e:8a:25:f6:af:85:
         d8:3f:cd:08:3f:3f:89:b4:9d:a5:ba:ca:95:88:96:19:54:77:
         3a:ec:62:88:ab:21:de:68:1a:1f:64:7d:a7:ab:79:d8:84:17:
         61:ec:c6:f0:20:56:09:55:a2:0e:21:85:e2:16:ef:67:b3:83:
         ca:7f:b9:e7:62:bd:cb:bc:1d:d0:cf:6a:e0:6e:fa:f8:35:55:
         1b:71:f6:40:dd:66:e8:cf:41:01:f4:88:4e:12:0e:55:dd:78:
         09:82:b5:03:86:1c:01:67:38:20:46:56:15:e4:2c:b3:d6:77:
         19:85:33:7d:ea:de:7d:bb:5f:f9:1e:6d:6f:e3:d4:f0:56:85:
         9a:38:f3:d2:0d:3b:47:e9:cb:6d:62:35:47:e8:e6:31:ca:23:
         c0:da:80:23:7f:ab:9b:6a:87:83:07:5c:8c:0a:d8:52:6c:3e:
         d7:8a:e9:9b:13:19:f0:a9:cf:2b:af:2c:91:f2:88:dd:3f:da:
         3e:a2:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:05 2024 by rpki-client on console-fra.rpki-client.org