Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e641851f-5739-34f3-a6d6-4217a6085c8a.roa
File:                     e641851f-5739-34f3-a6d6-4217a6085c8a.roa (raw, json)
Hash identifier:          cE6sJClfn5LaSSt92K6mqumazmmzM14Mf+q0WjyhEtI=
Subject key identifier:   1D:C6:FA:7B:22:36:A1:50:6E:EA:FD:C1:9B:0A:57:91:55:67:5A:87
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584540B726DB6EBF09F83F3D3900
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e641851f-5739-34f3-a6d6-4217a6085c8a.roa
Signing time:             Mon 18 Mar 2024 22:06:50 +0000
ROA not before:           Mon 18 Mar 2024 22:06:50 +0000
ROA not after:            Sun 16 Jun 2024 22:06:50 +0000
asID:                     36040
IP address blocks:        104.237.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:26:db:6e:bf:09:f8:3f:3d:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 18 22:06:50 2024 GMT
            Not After : Jun 16 22:06:50 2024 GMT
        Subject: CN=2874080e-da03-4504-865c-2e4973cf1bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:21:ed:2a:b9:f8:3b:a8:e1:32:a5:5d:19:
                    6c:b7:9e:54:6f:75:95:a6:ed:4e:79:97:09:60:e8:
                    c3:d8:1f:2e:ee:ca:99:8f:30:9e:39:55:cd:a4:f9:
                    88:b9:79:8e:07:e0:a4:2e:40:de:dc:bf:7f:be:84:
                    79:20:74:30:2a:6c:6c:b8:b4:e3:a7:5e:ff:a1:a7:
                    09:8d:e8:19:99:7d:01:69:e7:2f:bb:63:c4:a6:f7:
                    35:d2:a2:b4:01:79:26:07:9c:91:5f:c4:31:5c:79:
                    e3:4b:8a:5f:b5:89:19:b6:b9:3b:3a:cf:de:34:a4:
                    d9:bf:3f:21:2b:d8:cd:c1:71:05:d3:a2:87:13:b9:
                    30:7c:5f:60:67:af:a4:a7:d7:bb:5c:9e:36:5e:a7:
                    76:24:e9:9c:40:ac:43:42:c5:8e:d9:85:4c:2b:2f:
                    99:50:88:2b:4f:ca:65:3d:be:fa:a7:20:72:f4:12:
                    a8:c2:8c:f9:30:53:e9:d6:f6:e7:66:5b:66:87:5a:
                    db:be:23:1e:ed:3c:c6:af:a5:ad:16:15:1d:dd:e5:
                    d7:5f:b5:e0:3c:8b:97:a3:9f:9e:3d:5d:ba:45:6a:
                    17:98:9a:70:3a:01:87:ad:47:0a:59:d8:f3:25:82:
                    cc:0a:d8:1c:52:35:2e:88:cc:6a:fa:30:4c:73:16:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C6:FA:7B:22:36:A1:50:6E:EA:FD:C1:9B:0A:57:91:55:67:5A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e641851f-5739-34f3-a6d6-4217a6085c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:04:f4:a6:26:b5:a6:4f:76:b1:87:da:77:20:52:1f:ea:bb:
         20:aa:c0:f5:9d:25:12:95:c9:19:d2:ac:b5:0d:48:66:c4:bd:
         1e:b5:a4:70:f1:2e:19:93:f7:28:bb:e4:eb:cf:40:a3:26:19:
         77:74:7e:b8:41:b4:f5:99:66:96:81:bb:8d:b7:82:73:29:3f:
         3c:d9:17:7b:a0:ad:a7:b1:95:e8:46:e0:a1:de:c8:58:3b:4a:
         fd:9b:b0:69:86:31:b7:53:d6:ad:a6:3f:67:32:13:99:42:29:
         7e:29:4c:85:fc:bd:f5:5f:00:90:6a:44:5c:12:d5:3c:bf:de:
         96:18:11:0a:e9:1d:56:72:3e:f5:62:d9:40:b3:a0:91:09:93:
         29:7f:af:f2:64:ca:fa:31:03:16:2a:09:55:1d:0a:c5:c1:ad:
         8b:65:48:af:dd:da:b3:8a:8f:28:c2:84:cc:62:4e:7b:53:98:
         58:a7:ad:26:15:e7:bd:81:6b:2c:1f:74:fc:d5:a0:31:e6:db:
         e7:4c:27:b8:7b:e0:25:82:c0:32:4f:1f:c2:eb:25:ca:c9:cf:
         cd:0f:9e:c1:55:c3:16:d1:21:23:1b:f0:55:7a:22:75:25:8c:
         e9:c3:a4:16:cd:a8:5b:6c:18:99:38:fa:ab:7b:85:e5:c6:b1:
         11:28:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 15:55:03 2024 by rpki-client on console-fra.rpki-client.org