Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa
File:                     0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa (raw, json)
Hash identifier:          pB74EA9UFaBSs+Ld53wjV78N8nSkqOtGKlKjvZrqtLw=
Subject key identifier:   BA:1B:26:18:24:62:43:69:A6:F1:9F:42:48:3E:D6:97:C8:AB:01:E1
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858467DAB41ABD1BE04865FC6D190
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa
Signing time:             Wed 10 Jul 2024 10:54:07 +0000
ROA not before:           Wed 10 Jul 2024 10:54:07 +0000
ROA not after:            Tue 08 Oct 2024 10:54:07 +0000
asID:                     6461
IP address blocks:        104.156.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7d:ab:41:ab:d1:be:04:86:5f:c6:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Jul 10 10:54:07 2024 GMT
            Not After : Oct  8 10:54:07 2024 GMT
        Subject: CN=49986285-44a5-4218-bf37-2c507d37a721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:05:8e:99:d8:1d:21:d8:d3:f4:f9:a6:15:
                    c7:e3:89:9d:2d:fb:94:4e:e7:39:e9:36:b0:ef:d5:
                    3f:1a:d2:db:47:1b:fc:d6:52:92:c2:0e:d0:81:a8:
                    95:37:ca:1e:67:4f:fa:6a:47:5d:fb:fc:bd:52:27:
                    cb:fe:d1:23:02:46:71:ea:21:8f:2f:59:5e:f0:b5:
                    bf:3f:61:b6:30:a6:6d:c7:29:27:95:91:e7:68:69:
                    86:d5:74:56:47:aa:7f:6e:11:44:ca:1c:a7:5b:74:
                    4b:b9:a4:d9:de:f1:91:20:91:ff:f3:ba:3c:67:54:
                    5a:9f:3a:a1:a8:1c:e5:1b:da:41:3a:19:62:2b:9f:
                    6a:25:a9:9d:df:54:f5:3f:dc:0b:79:66:64:cd:b0:
                    1a:3e:55:c2:4a:79:8e:bf:9a:5d:01:6f:b1:01:08:
                    ea:86:84:cc:af:22:87:6c:0a:1d:42:0e:68:b3:3e:
                    b0:2f:25:4e:71:1c:dc:e4:ac:5d:b1:5f:0b:77:94:
                    36:95:01:ea:de:cc:f6:ac:cd:74:8a:a8:32:09:09:
                    3c:df:6b:ff:b2:be:49:51:30:93:ab:29:7c:7b:cd:
                    05:9b:ac:65:98:79:a6:c7:86:2d:4e:cc:7a:2d:76:
                    08:ae:ed:8b:d1:3c:80:1e:ac:22:30:f6:1a:4e:a0:
                    17:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:26:18:24:62:43:69:A6:F1:9F:42:48:3E:D6:97:C8:AB:01:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:58:d7:72:8c:ed:58:63:9a:1b:84:7d:2c:6e:80:0f:45:
         81:d9:81:8d:d3:19:15:47:29:b3:9f:93:b1:b3:fc:b1:01:1d:
         12:a2:6d:65:06:67:2f:a5:2f:04:29:d3:2c:85:1d:09:e9:57:
         98:a5:9a:67:e4:a3:f5:cd:cd:f9:e1:c8:a6:8f:d5:42:95:12:
         93:f9:c7:5f:57:a9:33:a3:fc:a8:28:a6:b8:bd:59:73:b5:47:
         ef:c6:d0:71:ab:aa:2a:96:95:f2:df:97:99:cd:e1:01:6a:b8:
         77:42:65:0b:14:d1:c8:08:27:8d:0a:c1:8b:4b:f6:d5:ff:35:
         ca:61:1b:87:68:2b:c4:70:dc:bd:ea:c7:4e:71:68:89:5a:ff:
         a8:94:90:78:59:ff:93:17:fa:3e:c8:59:f1:61:1b:10:d9:ea:
         66:e5:b2:3c:c6:fe:3c:9b:8c:47:54:b3:5b:31:0a:5c:89:2a:
         51:c9:d5:c3:24:7f:63:6b:28:aa:21:eb:87:e7:50:0a:19:c7:
         95:2a:8d:47:9b:59:58:4b:83:0b:26:ae:6a:1c:5d:f3:83:ff:
         a8:f2:ee:3a:59:e6:ed:5d:dd:f4:70:36:f1:ba:0a:ec:ea:c8:
         47:3e:4c:12:7a:09:a7:64:3a:ee:28:5a:ef:23:80:d5:9d:2d:
         c6:0b:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:21:32 2024 by rpki-client on console-ams.rpki-client.org