Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a6c349fc-b8c9-38dc-a25a-53fd435fdcd8.roa
File:                     a6c349fc-b8c9-38dc-a25a-53fd435fdcd8.roa (raw, json)
Hash identifier:          9TGk4hfv8hWncI5dEKCStzwaYjZSrTtGFnUiPsJqUUQ=
Subject key identifier:   DD:63:73:1A:31:A2:22:05:E0:81:0C:07:D6:5A:49:37:A8:DE:17:1B
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285847E1F2EC3C7E747C788A7B1980
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a6c349fc-b8c9-38dc-a25a-53fd435fdcd8.roa
Signing time:             Fri 15 Nov 2024 01:46:17 +0000
ROA not before:           Fri 15 Nov 2024 01:46:17 +0000
ROA not after:            Thu 13 Feb 2025 01:46:17 +0000
asID:                     931
IP address blocks:        104.249.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f2:ec:3c:7e:74:7c:78:8a:7b:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Nov 15 01:46:17 2024 GMT
            Not After : Feb 13 01:46:17 2025 GMT
        Subject: CN=298f487f-6baf-4183-8e13-db6d1566c8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:78:f7:70:57:e9:b1:56:c0:67:89:33:0a:c0:
                    88:74:40:6e:bf:e0:b3:bb:7c:b4:5c:37:25:bf:6f:
                    81:12:c4:c7:e5:bf:8c:cb:b1:35:de:10:43:49:da:
                    b7:43:29:87:fc:e9:90:34:f2:14:65:ec:a0:e0:2b:
                    0a:2f:61:ec:0a:20:d6:f7:fd:e2:74:df:bd:0a:20:
                    d9:4f:d8:80:a8:5d:f1:27:30:29:52:fe:5a:75:96:
                    b9:3d:dd:5c:fc:64:0f:d0:a3:e0:3c:64:d5:67:35:
                    d9:07:1b:8e:77:b5:29:cb:1e:f1:84:14:60:d2:89:
                    0e:7e:95:31:a6:62:09:07:2e:ad:59:86:e8:74:20:
                    f8:e7:c2:16:f2:0d:15:02:5f:fb:c0:02:f9:7a:87:
                    33:a5:be:dc:5e:42:48:5c:62:38:5a:7a:4e:bc:f8:
                    df:1d:b8:23:af:b9:ab:e7:92:57:fc:38:ea:37:72:
                    af:79:e8:22:f3:8a:c2:68:0f:1b:89:af:3f:5e:87:
                    1b:4c:04:9c:e8:56:48:80:ba:01:08:fd:a6:0d:02:
                    39:4b:40:04:b2:55:c7:e1:3c:26:bb:f1:bd:31:56:
                    65:40:73:fd:5a:8f:86:9f:e3:4e:66:84:66:e3:87:
                    03:27:56:94:16:bd:9b:13:a0:cd:93:c5:f9:75:1c:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:63:73:1A:31:A2:22:05:E0:81:0C:07:D6:5A:49:37:A8:DE:17:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a6c349fc-b8c9-38dc-a25a-53fd435fdcd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:a4:47:b1:62:3a:44:58:8e:e1:56:9b:18:3d:9f:ee:67:
         3e:7a:94:57:d5:24:7f:e0:23:39:ff:d2:2b:a4:f4:ea:38:5d:
         31:ed:bc:4e:d7:c3:19:3a:92:10:ba:8a:01:eb:c3:6e:34:2c:
         15:e3:27:97:bd:23:ac:0a:22:c6:ec:0c:39:a0:7c:88:30:94:
         2f:ab:68:cd:e5:e2:cb:3b:62:3f:14:bc:08:b1:c8:cc:3f:64:
         2c:20:16:84:25:26:b3:7d:af:88:e3:d7:69:ac:44:73:72:11:
         67:fc:81:6b:1e:1a:9e:97:7c:67:6c:0e:81:ad:ca:34:e6:ef:
         ad:5f:6b:ea:00:58:47:c4:b1:b4:f2:89:73:22:b9:ce:8d:21:
         64:ac:51:a3:0e:32:db:50:97:23:8a:99:e0:e4:d4:59:18:78:
         74:20:c9:32:cb:50:59:49:3c:f8:bb:91:33:b9:36:0b:46:3c:
         d4:b5:24:67:da:d6:a1:32:94:2e:86:a0:ec:76:83:f0:5e:d7:
         9f:66:4c:8c:33:02:a4:2b:6a:42:2d:a5:dc:8e:5b:6f:b3:94:
         e8:de:8c:e1:5d:f5:2b:ca:fe:75:82:d1:95:38:2a:fd:1b:ef:
         d7:b2:99:c3:bf:e3:3f:c6:53:76:81:93:c4:35:4f:53:01:ea:
         28:9a:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org