Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
File:                     2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json)
Hash identifier:          VdmUe2NT+uI7p/elIZnfGtvGRMldBUwUDhetlnu9d8s=
Subject key identifier:   01:B1:2F:55:51:1C:91:BB:3A:07:FB:77:79:0D:08:43:10:1F:7E:3E
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F43285847967BC43ED46F80E2A3678016
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     4540
IP address blocks:        104.151.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c4:3e:d4:6f:80:e2:a3:67:80:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=104cea54-ae76-42e9-acbd-40f57db403da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:fa:4c:db:f6:19:a9:80:5d:cb:99:3a:aa:
                    cb:4e:d4:1d:7b:85:fc:66:f5:63:c0:9b:65:ac:c4:
                    9b:94:bb:1e:1b:38:8f:6b:09:ed:fe:5c:db:7b:5f:
                    ff:0e:8e:54:15:8a:67:16:75:fc:18:eb:6e:8a:0c:
                    3d:3d:04:a0:e5:49:9d:2e:36:48:2f:37:07:e4:be:
                    e8:6b:cd:f9:5f:2d:33:f8:09:8a:d1:b7:57:4b:b3:
                    e6:a6:5a:9c:1d:eb:1f:e9:38:61:02:5f:c9:ca:b2:
                    a8:56:d5:e5:93:3d:9b:66:f0:7a:83:bc:ff:a5:4f:
                    ee:15:25:59:95:7d:d2:9b:f0:c1:30:b0:96:d1:6a:
                    74:81:0e:74:e8:5e:1b:03:52:cb:89:b1:54:a8:ba:
                    68:0b:0a:6d:0c:7c:54:1f:e1:9a:3d:51:8d:d4:03:
                    f1:dc:a7:b7:5a:2d:dd:c4:6e:06:77:ab:ff:35:d9:
                    98:fb:25:0e:02:be:2e:86:ba:41:fa:23:c6:bb:d9:
                    f3:ff:37:ac:58:74:f7:51:45:87:b0:ec:de:11:35:
                    50:dd:3f:26:e6:f7:77:e4:8c:07:7f:12:8e:5b:d5:
                    da:e3:3c:c7:d8:91:2f:29:4d:46:d1:b5:8a:8e:68:
                    58:1d:43:6b:dc:b6:75:1f:e5:ef:1e:ef:ad:4d:a5:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B1:2F:55:51:1C:91:BB:3A:07:FB:77:79:0D:08:43:10:1F:7E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.151.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:bb:bf:ee:1d:27:e3:b5:46:a2:f9:81:d6:75:a4:43:87:7c:
         3b:07:15:b6:03:35:c4:f4:e8:fd:95:15:a8:b1:37:47:f5:14:
         cb:ea:03:1f:3b:c4:dd:da:0a:d4:e9:dd:84:e9:ee:1d:94:65:
         d5:f4:59:7c:68:fc:70:c6:37:12:aa:7f:ab:82:2c:3b:6c:c8:
         ab:4f:6b:9e:da:44:b9:f9:8d:5a:24:dd:27:2c:ec:e6:d5:6b:
         c7:7c:99:20:b7:ae:c0:f3:85:b1:fc:8b:06:ef:45:e6:e1:5c:
         5c:17:10:a6:bb:be:64:e3:66:d9:39:2b:d3:53:7d:67:44:24:
         20:af:95:78:e7:2e:f9:80:21:43:29:74:c5:99:6f:65:ce:72:
         dd:98:00:e8:6d:05:5d:44:06:5b:14:57:b4:71:8a:a8:50:03:
         1e:43:35:7e:c3:69:36:94:be:45:6d:8d:90:2d:59:6b:ce:ef:
         cb:63:67:50:88:58:3e:97:ff:d7:47:2b:49:16:24:41:ab:c0:
         10:09:62:59:d6:a1:20:36:8f:f9:9c:3d:13:3c:58:ab:72:0b:
         b0:f5:1c:3b:0f:09:d1:ce:4d:05:6f:88:51:7c:cf:9b:35:87:
         6d:fe:b2:fe:65:69:56:d6:6a:18:30:e5:33:89:86:26:fc:48:
         a7:be:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:42 2024 by rpki-client on console-fra.rpki-client.org