Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa
File:                     a76a38d7-efa4-3450-9774-2046e431cfb8.roa (raw, json)
Hash identifier:          X8cnLCJ50Jho9NuH04f9co9Otvya8AR6gvtp9px21y8=
Subject key identifier:   B4:36:69:2E:50:BF:4C:42:D7:00:C6:B6:B2:FA:5F:5B:09:DD:D8:32
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285847E1F2FA7AA5C76BB8843FDC00
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa
Signing time:             Fri 15 Nov 2024 01:46:24 +0000
ROA not before:           Fri 15 Nov 2024 01:46:24 +0000
ROA not after:            Thu 13 Feb 2025 01:46:24 +0000
asID:                     931
IP address blocks:        104.249.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f2:fa:7a:a5:c7:6b:b8:84:3f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Nov 15 01:46:24 2024 GMT
            Not After : Feb 13 01:46:24 2025 GMT
        Subject: CN=87610065-42f7-4eda-8157-0604e405c09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:b9:4e:eb:89:39:fb:4a:7a:c5:8a:4a:21:
                    c4:79:a4:8d:f2:9c:e4:31:99:19:95:e9:d9:8f:70:
                    8e:ed:36:a7:e6:c1:50:01:9f:c5:8a:fd:13:6b:b1:
                    0c:bf:09:23:3e:50:bc:1d:7c:3c:e0:0a:5f:c2:e5:
                    b9:89:a2:de:2b:b7:9e:22:53:81:ac:38:77:8c:14:
                    27:82:81:9d:d7:a0:1b:75:f3:9f:5f:05:7c:7b:a6:
                    07:20:b5:75:4a:87:86:cf:a4:b7:f6:0f:bb:f5:f1:
                    be:a2:26:5b:e9:6a:2f:96:0e:b4:18:6a:ad:d6:11:
                    77:90:6f:d0:28:58:7d:8f:34:16:ee:3e:b8:e0:52:
                    25:65:00:1b:82:50:d4:35:75:bc:b6:62:c3:40:fb:
                    ba:b2:de:02:77:36:e3:e6:50:66:e4:83:4c:62:96:
                    ff:98:9a:23:f0:5c:a7:28:a1:02:02:2b:01:4c:3f:
                    42:ae:1a:75:b3:1f:a8:fc:48:cf:dd:8c:e5:31:89:
                    3a:bd:07:ee:ac:fd:3d:95:7a:af:ac:32:d8:99:b9:
                    67:29:08:b0:35:96:96:b1:f8:09:22:71:c2:6d:b4:
                    83:85:34:1b:b7:be:3d:50:1d:df:35:d3:3e:39:66:
                    28:d2:d7:c5:60:b5:36:5f:32:57:f0:ec:80:46:5d:
                    75:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:69:2E:50:BF:4C:42:D7:00:C6:B6:B2:FA:5F:5B:09:DD:D8:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:35:e3:19:bb:a9:8a:8d:22:e2:74:8e:b5:14:3b:ef:05:b2:
         71:5b:7a:42:05:36:c4:15:4f:b3:3b:0c:f0:bb:9a:f7:ee:c7:
         84:28:f4:bb:92:0c:4f:79:75:ae:b1:14:b4:a4:a4:07:d7:23:
         d2:a8:fa:89:bb:17:30:da:97:1d:ac:7d:ef:3e:af:b5:a1:10:
         a2:ae:9b:20:26:0d:ce:89:3e:b7:27:1e:b8:6c:56:6c:25:1e:
         f1:09:76:14:05:bf:e5:26:4d:7c:67:1a:08:b9:33:64:53:99:
         97:35:2f:62:6d:f6:5c:3d:b3:69:d5:b2:01:f2:99:e5:10:8a:
         4c:17:99:7c:dc:d6:1f:1c:c5:02:77:3a:8a:08:a8:71:63:b5:
         25:92:d4:84:b1:84:74:80:d1:86:38:59:12:c8:72:51:26:32:
         3b:8f:8c:89:c9:ec:bb:30:57:08:09:57:f8:be:db:67:84:5f:
         97:50:27:e4:94:c1:f9:da:06:4b:e6:68:ce:9d:70:36:23:ca:
         d7:f5:0e:cb:15:45:0a:d6:5a:ff:d2:e0:ba:0e:03:7d:f2:57:
         62:82:82:73:91:ea:b3:56:44:5a:cc:f1:a1:01:c7:47:2e:1b:
         f2:13:80:a7:61:5c:be:92:1c:ed:1f:98:99:c3:1e:65:30:a3:
         08:a5:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org