Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa
File:                     86157283-dfb4-320d-a963-3877e2d61db2.roa (raw, json)
Hash identifier:          NdsLmTTFthbGlXzCS+DU5KXP+IbMKiEuhTDjEamA1TQ=
Subject key identifier:   F1:D0:9D:6C:CB:26:9D:2B:44:EC:BE:38:28:26:C0:D0:57:39:97:F2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584586C186E9E269702B75A5B7C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa
Signing time:             Sat 13 Apr 2024 00:14:20 +0000
ROA not before:           Sat 13 Apr 2024 00:14:20 +0000
ROA not after:            Fri 12 Jul 2024 00:14:20 +0000
asID:                     5650
IP address blocks:        104.253.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:c1:86:e9:e2:69:70:2b:75:a5:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 00:14:20 2024 GMT
            Not After : Jul 12 00:14:20 2024 GMT
        Subject: CN=2e8f854a-73d0-475a-9444-a1006ca8f19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:59:3a:26:de:53:a6:3d:c1:30:cc:da:19:
                    34:00:9a:5c:54:bd:69:a5:f0:59:4e:7d:d7:7c:31:
                    01:2a:62:03:6c:6a:c7:34:1b:71:42:f2:fc:5b:27:
                    26:3a:9e:0f:20:6a:21:f6:ef:8b:b0:81:d8:7b:ee:
                    a3:a4:83:3d:56:38:7f:a9:1c:89:b4:5c:12:23:ce:
                    5f:ce:e3:77:e7:1b:00:03:7f:8d:33:63:e0:37:be:
                    39:af:99:3c:61:c7:2e:49:5f:5c:ee:c9:0b:17:23:
                    67:86:e4:31:fb:49:e5:bb:aa:84:d9:f3:d2:39:1d:
                    0d:1c:77:49:5d:e6:7e:d4:a7:93:92:66:ad:29:2c:
                    f5:75:8f:bc:53:33:df:f8:ba:60:2e:0a:e5:89:eb:
                    9a:c4:ca:11:b0:4a:bb:59:70:48:11:00:e5:62:91:
                    96:a3:08:48:46:ee:1d:a3:e8:38:d5:43:6a:23:33:
                    97:e9:2b:e2:b9:02:52:7a:63:4f:eb:fe:10:66:aa:
                    d8:9a:dc:c6:a5:7c:a3:f2:b4:e4:5e:61:e7:5b:97:
                    e0:8c:f2:2b:78:9b:04:f0:8e:35:be:4f:92:28:39:
                    68:21:f7:f4:99:ed:0c:77:b9:ba:07:d7:e9:85:8a:
                    bb:2d:f4:f9:54:c6:50:57:b6:4a:48:2d:8c:eb:ee:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:9D:6C:CB:26:9D:2B:44:EC:BE:38:28:26:C0:D0:57:39:97:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/86157283-dfb4-320d-a963-3877e2d61db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:49:fb:ea:c3:e8:1d:8d:dc:2a:45:6d:76:34:55:86:f2:e7:
         e5:bc:9d:d2:03:00:ba:99:79:b8:ed:97:9a:fc:fd:3c:1b:47:
         d5:13:4b:19:bd:71:8d:4d:69:50:ea:37:e8:ba:02:c3:f5:62:
         4e:db:46:f7:06:66:de:fb:6f:41:b7:c8:64:1f:e6:2b:b4:28:
         d9:cf:77:44:e7:04:b0:92:68:e0:b4:0b:b7:34:06:9e:f3:97:
         0a:67:7d:20:ec:28:29:27:75:d0:01:79:80:3b:92:c6:9b:bf:
         1b:37:3a:ed:30:2b:b9:a1:65:30:2c:c2:db:0c:54:cd:87:f5:
         11:f5:af:7d:8f:ed:20:b6:87:91:57:41:ef:f2:8f:31:d8:38:
         de:86:4e:75:35:5d:7c:b4:a9:e5:4f:f3:2c:c3:de:a0:b8:40:
         ff:0d:7e:23:ab:f6:a1:d6:6a:ca:8c:fb:8b:7c:9a:3c:7a:cc:
         b6:c1:35:c3:0e:69:a2:33:2e:c8:84:aa:61:87:74:fc:f2:d5:
         0d:07:f4:ce:6a:64:e2:9e:f5:a4:66:6d:44:db:6f:d8:f4:a2:
         a7:0e:60:08:cf:d4:ff:af:50:ed:0e:70:44:53:ad:56:24:8b:
         e1:24:19:5f:c0:a1:95:a7:1d:1e:5c:a7:48:3b:01:ec:75:ce:
         91:34:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:58:17 2024 by rpki-client on console-fra.rpki-client.org