Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa
File:                     b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa (raw, json)
Hash identifier:          Ayg1i5ydujtmZI65j4Xo/g5NvQzNdTks5L/rsnKeaF4=
Subject key identifier:   50:9C:58:CB:6B:BC:01:38:E5:57:A7:BD:A7:58:6F:25:C9:C7:AB:88
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F432858480EA511F50585F0299DE181E0
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     5511
IP address blocks:        104.193.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:11:f5:05:85:f0:29:9d:e1:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=a4d77b7d-53de-4f34-af49-7486c3aa2267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:49:38:0a:2f:06:8d:8f:d7:ae:9c:75:34:
                    f2:b7:6e:02:38:af:d4:4d:58:0d:53:00:13:d1:b2:
                    c0:0f:2e:2c:87:21:f5:be:9e:cf:2d:1f:8c:88:cb:
                    14:cb:4c:87:07:6e:52:2e:42:c8:8e:27:71:00:89:
                    2a:9b:b3:8a:8e:12:a2:c5:0b:cc:db:c0:59:37:ed:
                    11:a0:43:0c:72:5a:b9:30:ca:9d:fd:be:cb:5e:d4:
                    13:cf:f0:93:ef:64:69:0f:8a:8e:59:72:3e:78:9c:
                    ad:4c:8f:08:a4:2a:ca:93:24:a8:48:07:8a:4d:50:
                    87:30:94:5d:fd:ed:e4:2c:70:0a:dc:1e:5b:41:61:
                    dc:bc:2f:57:7a:56:2d:a8:d3:2c:e0:68:52:e6:0b:
                    89:6d:54:c6:10:44:67:95:9b:59:9c:6b:74:04:c3:
                    9c:d2:bf:f1:64:87:75:5f:13:22:26:20:46:ec:cb:
                    9e:f0:f8:04:da:18:3c:9a:c6:79:7a:a2:e8:5d:53:
                    4b:46:c1:4c:4c:d4:f0:d1:ef:4f:72:a2:2a:ca:e3:
                    6d:cc:ad:ba:bd:31:37:d6:91:ab:d0:37:3b:e7:3c:
                    fc:1a:f2:1e:4d:6c:54:0f:a2:cf:23:f8:0d:61:09:
                    46:df:14:e8:90:70:e9:9d:70:7f:f6:55:a8:ce:e8:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:58:CB:6B:BC:01:38:E5:57:A7:BD:A7:58:6F:25:C9:C7:AB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/b8982e8d-f209-339d-9bd9-b8373c8ddf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:14:44:23:1f:de:a1:e7:da:08:7b:05:42:57:17:e1:10:56:
         58:fa:5d:48:27:e9:75:39:05:ba:5a:d3:ea:49:34:48:9c:00:
         27:98:5e:33:89:a3:4b:81:b3:73:b5:93:f5:5d:d2:13:c6:0b:
         74:ec:d2:28:f8:44:ae:a7:49:72:c8:31:50:5a:a0:37:78:f5:
         bd:6a:cb:c1:95:2d:09:a3:e8:28:52:11:e4:95:7e:37:21:1d:
         63:4c:53:83:b5:7a:f9:d8:6d:07:5a:0c:ee:fe:fb:8f:66:ea:
         08:17:a5:11:f5:e3:a8:d7:ab:22:7b:a1:cf:b6:5c:71:e6:29:
         b6:3d:84:cb:62:ce:a3:9f:c9:66:19:b3:30:ce:d2:31:10:11:
         84:57:8e:bb:21:da:49:5f:35:db:e4:7d:7d:21:ba:05:a5:1a:
         5d:c0:09:c1:53:8d:bd:b3:d7:e6:9e:fb:e0:e0:e2:99:f2:17:
         26:68:7a:ac:d0:2a:0a:77:44:80:f9:d0:07:f9:13:0e:4b:1e:
         73:f9:3d:51:08:11:55:83:03:c8:71:83:3e:0c:7d:71:3c:d2:
         6b:f3:84:cd:04:81:71:25:02:84:23:1a:40:24:b3:98:9e:3c:
         d8:6e:85:9e:5b:b0:6f:14:80:33:ec:b9:c1:2c:d8:ae:71:bc:
         79:e4:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:45 2025 by rpki-client