Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8826a50e-07f1-350f-b2c5-f2670e55311e.roa
File:                     8826a50e-07f1-350f-b2c5-f2670e55311e.roa (raw, json)
Hash identifier:          KcFnKy5eTsxryOCh+/IxzLelwmubRDZCC1B7juDEq18=
Subject key identifier:   12:BD:85:E7:86:A5:9F:92:5C:10:34:D6:09:32:4F:86:AC:FC:C7:69
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285845AB2354C7FAE591824C00DA40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8826a50e-07f1-350f-b2c5-f2670e55311e.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     7018
IP address blocks:        104.244.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:54:c7:fa:e5:91:82:4c:00:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=fa1d3669-636e-4bb6-9e5d-21cb383979cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:92:f1:84:9f:ad:c6:ad:ae:af:53:45:c5:
                    4d:2b:a9:a5:04:ef:cb:e9:97:a2:e3:89:b0:0c:a6:
                    53:b5:7a:a9:de:ea:4f:07:f2:b4:03:84:bd:2b:12:
                    4b:56:5b:cd:ed:32:12:40:65:47:01:79:cc:b1:7f:
                    23:e4:8d:4e:05:12:39:c8:97:70:06:26:d5:0c:89:
                    38:fe:93:04:2a:5f:de:fb:85:b7:ff:c7:d4:c9:5c:
                    b7:35:39:97:f8:d9:9f:59:24:25:5c:6f:66:df:c2:
                    6a:72:7f:b1:e5:ea:f5:f7:96:0d:ab:71:60:42:4b:
                    97:71:fb:c5:9a:b6:45:ae:35:f7:f0:3f:29:e5:80:
                    22:95:1f:6a:27:0d:af:02:b9:5e:8e:35:cf:10:60:
                    b0:ae:98:8f:5d:b5:3f:c1:b3:6a:86:7d:83:12:89:
                    4f:ff:95:e4:5c:89:79:b5:6d:a2:40:6a:b2:94:a9:
                    ce:33:8f:9f:b0:ae:30:b1:36:1d:01:97:83:a8:97:
                    17:ef:d0:2c:95:8b:c3:30:4a:71:47:07:30:f9:2c:
                    de:67:56:18:fe:9f:fd:d9:fa:e0:03:51:dc:a7:e9:
                    32:59:32:e2:7c:ce:91:d4:ad:70:83:26:9f:22:2b:
                    2f:09:8d:6f:2c:d9:e8:78:58:51:9c:d5:3d:4a:4d:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BD:85:E7:86:A5:9F:92:5C:10:34:D6:09:32:4F:86:AC:FC:C7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8826a50e-07f1-350f-b2c5-f2670e55311e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f9:15:9e:e1:72:30:65:d6:ae:99:05:e5:95:ce:38:88:b9:
         50:9c:05:df:51:8a:ea:67:55:e7:4f:af:a5:26:c1:6a:36:f2:
         bb:19:71:4f:4f:a9:a0:b3:c4:74:44:ac:ea:60:80:08:75:d2:
         c9:ce:58:83:8b:99:d9:65:85:26:8e:ce:d6:a6:fd:eb:d1:15:
         f7:04:73:ff:13:f2:7c:82:99:f1:32:d0:6a:3f:59:0d:fe:d0:
         e4:bd:6b:51:0a:69:e3:9a:fa:6e:1f:2c:5f:ff:ee:cc:a7:e6:
         9f:ba:14:0a:8b:f7:ba:44:df:49:ed:b8:2e:a7:b4:16:34:cd:
         33:da:b2:08:8b:f4:62:03:f4:36:89:88:2b:72:4f:2d:b7:35:
         03:53:b3:b7:b7:23:a6:c6:c3:66:91:64:73:5b:e0:86:ed:9b:
         b6:34:8d:38:58:9b:1a:0b:a9:1e:b2:4a:5d:bf:db:3f:e5:1c:
         47:b9:50:9a:57:9b:dc:4f:55:b5:ed:6f:f2:f4:e9:ac:d9:74:
         f0:66:dd:63:5c:c8:f9:b2:fd:8a:1f:b7:b4:35:3e:f7:09:92:
         18:bd:2d:82:2b:f5:52:51:ed:47:e0:6c:42:69:5d:4a:c3:2f:
         ab:43:3a:45:51:c5:f0:35:cd:0c:48:b7:58:e6:96:16:27:c0:
         b9:69:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org