Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
File:                     c6097b58-c422-3f25-ad58-0368623ed0bc.roa (raw, json)
Hash identifier:          YjDUgEUtRlsGogAcbIP54uDqg6OWmvxzQsUQdXEXPt0=
Subject key identifier:   AE:D5:C1:D1:F7:7D:80:CE:61:DA:15:48:18:C1:34:F8:90:2E:E6:18
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F432858472F307D72AF3FC822B87F3E40
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     5511
IP address blocks:        104.193.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7d:72:af:3f:c8:22:b8:7f:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=832f4a9d-3ddb-4a0d-ad35-325c77492ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:3c:a3:8b:4b:4e:72:a2:92:10:be:e2:35:
                    9d:c8:cb:9a:98:93:29:e1:03:51:12:28:d8:a4:57:
                    1b:96:54:0d:6c:37:63:2f:7d:80:df:12:ca:91:01:
                    2b:39:67:57:cc:36:a2:27:d3:f7:e5:ab:11:36:09:
                    72:74:c0:6e:26:d5:4f:b7:4a:d8:5f:b7:f4:61:85:
                    0d:74:70:ad:40:57:01:25:ed:39:08:0a:a1:03:84:
                    d2:2a:ab:00:04:b8:47:57:8f:d7:f6:7b:1e:d1:1c:
                    e0:0f:d1:f3:42:74:83:f7:5b:41:80:14:64:5a:b0:
                    64:64:d8:51:31:5f:70:7f:d9:cd:46:42:ff:10:43:
                    93:3f:7d:c1:84:f8:0f:a6:36:4c:c7:c3:a0:48:7f:
                    06:96:c6:5f:b7:fa:13:fd:c8:f2:30:8c:ca:c4:b3:
                    0e:37:10:b9:36:9f:27:4f:1d:63:86:df:bd:be:4b:
                    86:7b:96:32:1a:26:00:90:07:14:04:59:2a:1b:d6:
                    63:ed:51:6e:d9:5f:1c:02:f0:cf:b6:3c:11:64:0d:
                    24:5c:d0:93:59:17:39:13:fc:d2:8b:05:04:3c:55:
                    a4:8e:5b:30:a2:99:89:9a:a4:d1:12:ef:9d:ef:17:
                    41:b8:7c:40:27:ad:55:17:37:34:69:d6:a3:f8:b7:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:C1:D1:F7:7D:80:CE:61:DA:15:48:18:C1:34:F8:90:2E:E6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:04:3f:fa:97:42:4e:25:df:4a:ff:04:12:6e:73:96:ed:b3:
         d3:17:3c:a3:2a:30:68:c0:f7:3a:08:b5:75:b8:5b:16:0a:06:
         24:cd:a1:7d:63:e6:94:40:c6:20:f4:e8:92:39:54:b6:39:96:
         68:3a:11:5b:bf:19:69:f1:20:6b:4f:65:0b:30:97:1d:12:66:
         6d:3f:5b:45:1b:8a:67:55:65:ff:c6:ea:47:06:e6:79:48:61:
         70:25:cc:de:8c:a1:01:bd:3d:ed:5e:18:6a:a0:4b:a6:87:60:
         8a:25:f5:2c:ff:23:c4:57:8b:b2:d6:3a:57:55:88:b9:83:c2:
         03:09:91:4e:55:67:55:0e:bd:bd:dc:ee:85:90:9f:99:ae:29:
         7d:8c:12:75:8d:31:94:4b:72:7d:c6:70:13:ab:3e:3c:50:b9:
         06:d2:8b:ea:61:b0:36:a6:03:5e:5e:72:90:a4:99:fb:0a:b0:
         92:88:89:c4:5d:d1:a2:ae:82:05:67:1c:b4:0b:72:58:f8:00:
         e8:58:56:ee:82:87:87:ab:11:e8:d1:1a:94:15:52:90:ae:06:
         a3:08:58:c0:90:36:5a:d7:74:36:b6:12:65:bc:9a:f4:69:07:
         d2:06:6e:0f:15:4a:c8:c9:75:4e:59:91:00:1b:ed:df:08:e0:
         e1:d7:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org