Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa
File:                     0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa (raw, json)
Hash identifier:          rfbqJscf0C5/v0Oe5GNrIBEzyibekEqD+hjepQdzfPc=
Subject key identifier:   9B:CB:92:EB:7E:56:E4:85:5C:6E:BE:C7:F8:88:A6:5F:86:19:95:A6
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858475D40E21991738A6890238F40
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa
Signing time:             Sat 28 Sep 2024 13:00:41 +0000
ROA not before:           Sat 28 Sep 2024 13:00:41 +0000
ROA not after:            Fri 27 Dec 2024 14:00:41 +0000
asID:                     6461
IP address blocks:        104.156.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:40:e2:19:91:73:8a:68:90:23:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Sep 28 13:00:41 2024 GMT
            Not After : Dec 27 14:00:41 2024 GMT
        Subject: CN=8221076e-d60c-40f4-8b6d-ef911eb06998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:9d:eb:60:1a:f4:a0:88:07:62:e3:82:19:
                    e8:fb:e4:45:21:1a:53:a8:fb:23:9d:53:d0:a8:a8:
                    fd:37:e3:26:c7:fe:32:61:59:06:9a:98:36:8c:d3:
                    ee:ce:a7:4f:4d:0d:22:19:b2:8a:e1:2c:e8:d0:62:
                    39:bf:7f:b9:0e:7b:f0:41:2a:f7:0c:94:2c:22:40:
                    2b:c8:dc:07:a3:a7:5f:b6:82:e6:70:30:9a:47:2a:
                    5c:4f:47:e4:2a:b6:46:48:48:9b:91:9f:11:85:27:
                    28:c1:4f:60:18:5c:e4:b4:1a:d0:d0:90:58:cf:fd:
                    88:93:90:9c:71:15:a3:6e:2e:c2:93:f7:9f:8f:85:
                    1f:7a:05:bd:05:a8:72:e7:98:ec:0d:a1:03:8f:9a:
                    00:6c:47:a8:fb:57:96:4b:07:32:54:0c:f0:9b:7c:
                    06:85:46:72:63:ad:36:5d:7e:79:ca:80:13:1f:b1:
                    bf:3e:0a:9f:f9:ac:b9:1c:09:b0:57:e9:79:e5:a0:
                    0e:a3:35:ae:df:35:cc:ba:69:9a:4e:6d:f1:c5:1d:
                    86:a3:81:4e:81:c0:bb:73:15:85:2f:f4:76:b1:b0:
                    d9:e6:06:49:4e:67:cc:e7:c3:16:82:57:59:5c:c2:
                    1a:68:89:c4:d9:bc:52:66:21:48:51:e2:fc:56:16:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CB:92:EB:7E:56:E4:85:5C:6E:BE:C7:F8:88:A6:5F:86:19:95:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:39:47:ca:9a:bc:94:3f:74:2b:dd:8a:6f:9e:31:00:7d:82:
         7a:8c:f9:9f:79:07:64:9a:74:fb:a7:ed:55:f8:4a:09:e1:e5:
         6b:73:5f:aa:61:59:5c:2f:c1:e7:61:d0:fc:ab:4a:0e:c3:76:
         96:dd:95:04:d0:e9:a4:b3:e7:91:0a:5f:df:55:f1:28:ab:50:
         06:58:23:20:ee:91:ec:43:0f:fd:97:94:fa:19:ac:bc:a2:e6:
         7c:82:8b:e9:32:cc:90:a6:f1:da:c6:fd:82:78:f4:8d:ff:63:
         f8:fc:46:0f:52:ff:fe:86:5f:22:0c:27:82:59:01:9c:80:71:
         1c:d9:fc:ea:e0:33:40:e8:08:f5:33:bb:12:4d:78:d3:6e:db:
         27:a7:0d:0f:f7:b0:66:f2:47:97:1a:a8:31:3c:88:d1:3a:3a:
         a1:8e:5b:d0:6b:3e:57:9e:47:4d:cb:02:e1:5e:c6:bd:e8:b5:
         3d:48:f1:2e:13:85:a0:3b:01:a5:db:b8:ad:45:5c:fd:ef:11:
         10:6a:ba:8a:28:d7:9c:59:02:a7:1b:f6:cd:90:9f:2d:d7:c6:
         86:2f:6c:51:55:4e:82:2c:4c:1a:b4:a4:4c:bd:41:73:66:18:
         98:ce:ef:cc:fa:3d:bb:cf:10:37:c4:f3:0a:e0:96:bd:60:60:
         f1:0a:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:08 2024 by rpki-client on console-fra.rpki-client.org