Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa
File:                     a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa (raw, json)
Hash identifier:          X0QwstomykaIw3xXxPa8zM+GdOO+y9BnIcoS3197vUQ=
Subject key identifier:   A8:D8:34:8D:C3:DF:06:52:4F:67:EC:12:D2:5A:2C:0F:AB:D8:86:8D
Certificate issuer:       /CN=70197168-13e1-4a38-9046-75d751ec520a
Certificate serial:       010D0C9F43285847CD571496FD16E18F54DC6640
Authority key identifier: 3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa
Signing time:             Thu 07 Nov 2024 16:36:07 +0000
ROA not before:           Thu 07 Nov 2024 16:36:07 +0000
ROA not after:            Wed 05 Feb 2025 16:36:07 +0000
asID:                     14618
IP address blocks:        104.194.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:57:14:96:fd:16:e1:8f:54:dc:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70197168-13e1-4a38-9046-75d751ec520a
        Validity
            Not Before: Nov  7 16:36:07 2024 GMT
            Not After : Feb  5 16:36:07 2025 GMT
        Subject: CN=b3aa0edc-1223-49e2-8032-dc8fb01793b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:7c:38:36:ad:82:91:94:a6:21:a5:c6:4e:
                    84:07:47:b4:d5:26:04:40:9d:39:15:2f:1a:aa:3c:
                    8b:7e:1e:22:bb:26:b5:50:4b:c3:cd:f5:26:0e:94:
                    cc:d7:c2:41:21:33:28:41:a0:71:ff:37:50:ac:20:
                    27:08:39:1f:68:9d:e8:b4:de:b0:a4:0c:d5:b4:77:
                    73:0c:f5:2d:22:9f:37:a5:39:a4:94:1a:c7:c7:e8:
                    c7:0a:19:c9:44:66:49:7c:f0:6a:c5:a1:c7:17:54:
                    1d:de:61:b9:5c:26:0a:1c:08:3e:89:13:7f:f2:06:
                    c3:1a:e2:5e:6a:b4:d7:42:30:3d:fd:e1:cb:cc:bb:
                    bc:af:3d:75:d2:d7:37:e7:0f:e6:34:c6:5d:7d:8a:
                    82:42:b3:01:ef:9c:28:8e:52:d9:00:b2:82:e3:90:
                    60:4a:f6:58:cc:f5:ed:ec:e2:c8:2f:ac:22:94:60:
                    49:38:d9:6f:35:f3:52:7d:e3:12:ae:be:d9:c8:3b:
                    8f:3b:bf:04:52:32:db:d9:85:b5:a0:6c:62:0f:15:
                    a7:66:ee:3a:e1:8e:a0:da:1f:69:f7:78:45:d5:69:
                    41:dd:e7:37:8c:e5:35:c7:49:56:fd:1f:27:5c:e9:
                    08:68:e8:bb:31:3d:36:1f:64:ef:fe:1f:0a:9f:ab:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:34:8D:C3:DF:06:52:4F:67:EC:12:D2:5A:2C:0F:AB:D8:86:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/a2a5efaa-ccee-3570-bb85-fb40552d3e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a/70197168-13e1-4a38-9046-75d751ec520a.crl

            X509v3 Authority Key Identifier:
                keyid:3F:68:73:EF:E5:F7:D6:45:2B:C0:79:7F:FA:77:B4:DD:0D:F9:03:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/70197168-13e1-4a38-9046-75d751ec520a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7f:39:50:eb:a2:08:68:11:e2:bc:87:60:9b:1a:5a:ab:8f:
         0a:34:ab:a8:14:67:de:53:fa:d0:7d:24:a5:4e:43:4a:0f:ae:
         30:21:c7:a7:0d:c1:65:9c:5a:b0:5e:64:88:f1:5c:98:d4:9f:
         16:9b:b6:3d:c4:49:40:ee:32:53:d5:a8:30:76:f3:b0:24:90:
         2e:e1:50:d3:75:44:0a:a5:40:5d:35:f0:bd:51:88:9f:85:fd:
         49:5b:f2:0c:33:cd:d4:ea:e3:d6:8e:25:df:0d:be:e2:7f:f4:
         df:dd:c1:d9:44:6c:a9:c6:4a:34:ff:48:5a:54:3c:d3:f7:29:
         88:ef:71:00:28:11:f9:b7:a7:eb:af:1e:c6:12:21:42:c2:81:
         b1:83:40:db:b9:c3:ee:f8:10:ee:04:8f:6f:f6:b2:5a:ea:45:
         16:24:36:3b:b2:5d:da:25:ec:4b:42:0e:b8:e1:1a:20:86:54:
         c4:7c:10:d0:fc:a2:2a:23:8e:8e:a1:b8:be:fb:2e:d7:d7:67:
         0d:1b:a9:b6:c1:4d:9c:6f:f9:6c:bf:61:d4:d7:a1:91:e4:7c:
         57:e7:74:a8:38:76:d2:e6:ed:17:72:31:67:70:d0:ff:8a:5d:
         66:4f:f0:b3:3b:c6:8b:9b:14:39:c3:08:80:9e:b2:b8:b9:26:
         0f:31:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:09 2024 by rpki-client on console-ams.rpki-client.org