Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bc2dcaf2-a83f-3c7a-a287-239bc3c8e463.roa
File:                     bc2dcaf2-a83f-3c7a-a287-239bc3c8e463.roa (raw, json)
Hash identifier:          odI1Bc+507yyOcRq4QAkIQ2GJAqyObFyIiiMoBanifI=
Subject key identifier:   A2:E4:1B:DB:F7:CB:34:9E:48:18:B4:20:DA:BF:C7:15:54:13:C3:31
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094FDB6D228ED8B74169500
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bc2dcaf2-a83f-3c7a-a287-239bc3c8e463.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:fd:b6:d2:28:ed:8b:74:16:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=dfdfa6df-93e9-44b4-8e9c-e44402f1ce70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:2b:71:df:b8:6b:1b:bb:6d:ce:1f:97:df:
                    c2:67:fb:4a:ee:5b:84:78:5f:e6:6a:5c:7a:28:19:
                    38:64:44:9a:03:56:ac:7c:1f:66:a8:ee:77:8e:ed:
                    62:41:8a:a7:04:35:c6:8c:f1:fd:01:f5:b7:2d:2b:
                    65:d7:9c:2d:71:4b:a9:c8:5f:0a:aa:38:56:9d:82:
                    70:4e:b7:27:de:21:71:98:ec:04:03:6c:41:8e:67:
                    f3:5f:44:d0:fb:5c:ac:00:1d:92:c5:aa:0b:64:af:
                    cb:f0:a1:7b:a9:50:2b:54:92:9b:41:f4:3d:ae:4a:
                    c6:49:18:c7:84:03:06:c0:43:d6:9b:3a:38:bf:90:
                    1a:dd:04:52:ad:d4:e8:5c:a2:8c:ff:06:71:f1:a7:
                    73:af:e7:54:b6:95:5b:86:f2:b7:b5:4a:db:43:d3:
                    83:3e:f3:9e:33:5b:29:2d:c0:fc:78:39:bc:c9:7f:
                    3a:b7:14:af:2d:8c:c7:2b:0f:8a:aa:01:fe:c3:0f:
                    5e:80:db:7f:34:fc:03:03:eb:86:2d:d6:c1:3e:b8:
                    96:77:0e:2e:ba:31:7b:bc:0c:cf:c3:5c:93:02:76:
                    b3:5c:b2:10:2d:a2:57:fe:6f:db:a8:c8:db:26:64:
                    71:87:21:d7:f4:60:cc:58:49:a9:e6:bd:45:59:6b:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E4:1B:DB:F7:CB:34:9E:48:18:B4:20:DA:BF:C7:15:54:13:C3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bc2dcaf2-a83f-3c7a-a287-239bc3c8e463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:94:36:2c:6c:5f:7a:46:9a:19:77:93:e7:07:9e:de:55:65:
         91:a2:73:76:26:94:e8:6f:ce:9b:17:fb:6c:91:08:6d:af:de:
         ca:9b:45:2c:97:91:57:e2:12:7a:69:ce:48:ee:bb:d5:f5:af:
         1f:13:cb:87:32:15:16:27:04:c4:8d:82:c4:71:4f:aa:d3:dc:
         4f:2e:c2:8f:29:c0:01:14:53:5d:b8:bd:25:f9:25:51:bc:da:
         a0:53:44:ca:48:88:fb:b2:18:14:7b:64:1c:25:63:55:77:14:
         9a:6d:d7:ef:37:05:95:f3:47:8e:f8:7f:67:65:ba:62:70:17:
         57:1a:a2:d5:b9:d5:f5:67:22:df:93:43:dd:30:fb:c8:ad:7f:
         47:65:db:76:de:ac:82:12:aa:2d:7c:f5:ca:30:be:78:e9:4a:
         71:41:d3:1d:24:19:87:94:cf:92:ca:c7:bc:d8:01:68:42:e8:
         52:01:ff:2e:f6:07:f6:b1:67:03:ee:44:8a:73:32:27:ae:f3:
         70:96:13:c3:91:16:02:f4:35:61:c9:f7:e0:11:61:9f:6f:0c:
         eb:44:cf:0f:d3:62:a2:05:5e:7d:c4:dc:4d:58:69:89:c0:be:
         a6:72:b3:e7:b2:eb:8d:4a:a9:6b:6e:43:f1:2d:91:d2:9e:8a:
         30:43:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:16 2024 by rpki-client on console-ams.rpki-client.org