Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/1434ec52-7a37-3fb5-8469-6fd7073aa523.roa
File:                     1434ec52-7a37-3fb5-8469-6fd7073aa523.roa (raw, json)
Hash identifier:          ANsHI9v9v4Zy1CbSlkLTC3p9o/U+6DIcBhMAW5wVSBE=
Subject key identifier:   2A:7E:30:99:25:61:FF:DC:FB:06:E9:8D:39:F3:1E:08:AA:DA:21:9F
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584628C4B2057F8217F81F5A3150
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/1434ec52-7a37-3fb5-8469-6fd7073aa523.roa
Signing time:             Mon 10 Jun 2024 01:00:24 +0000
ROA not before:           Mon 10 Jun 2024 01:00:24 +0000
ROA not after:            Sun 08 Sep 2024 01:00:24 +0000
asID:                     54874
IP address blocks:        104.167.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:28:c4:b2:05:7f:82:17:f8:1f:5a:31:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jun 10 01:00:24 2024 GMT
            Not After : Sep  8 01:00:24 2024 GMT
        Subject: CN=1fdba051-07d2-4732-b211-cf882a95d52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:51:eb:89:76:45:97:b0:cd:18:84:a9:9c:
                    42:de:f8:db:f8:51:c8:c8:6f:5f:15:7d:f3:46:d4:
                    ee:d7:54:84:27:01:bf:8f:24:d1:27:02:e5:d9:2a:
                    11:f0:20:eb:69:b4:95:21:7f:d0:c1:06:a1:a8:2c:
                    38:74:79:e3:1d:85:34:05:31:0d:47:46:6a:0c:a2:
                    72:d2:d5:0f:c4:37:e2:89:19:d8:18:5f:55:72:d9:
                    f4:06:83:fc:65:e0:71:d5:5d:9c:28:b3:f7:35:28:
                    b3:25:43:67:be:ca:c6:5d:c0:24:01:6f:82:e9:8d:
                    32:94:68:56:c8:ed:21:e8:47:a4:12:3e:31:84:71:
                    a1:11:78:49:12:5f:19:cc:1f:6a:e1:ea:ea:e5:d4:
                    7e:7b:2d:28:a0:41:32:0b:89:f2:5c:46:a4:68:a8:
                    b8:41:ae:a3:78:33:a3:e9:66:2c:2d:1c:05:39:09:
                    72:fc:fd:f8:1c:23:c4:06:df:d7:37:70:fe:a0:ad:
                    44:cf:7e:3f:de:38:9a:9e:df:2e:e1:3c:94:2a:5b:
                    95:4c:33:14:52:25:bb:01:09:a6:41:ed:a5:2b:aa:
                    fb:70:62:36:31:be:f5:50:39:8c:26:5f:9e:1e:c8:
                    90:cd:f4:1f:ea:35:c3:5b:16:03:46:0c:c2:78:b3:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:30:99:25:61:FF:DC:FB:06:E9:8D:39:F3:1E:08:AA:DA:21:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/1434ec52-7a37-3fb5-8469-6fd7073aa523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:f9:81:80:00:a8:35:4c:a7:1f:69:1f:cb:10:e5:82:e9:cc:
         0a:ca:04:51:9c:e2:d3:3a:fa:e9:51:5f:8f:35:95:e7:c7:48:
         cc:bb:5c:af:fb:ae:69:fe:42:44:48:d9:4b:76:f8:b2:0f:78:
         2b:a8:2f:48:5e:dd:e5:48:09:ef:aa:4e:a6:e6:ad:ad:d6:2a:
         fd:fb:80:e5:44:02:52:18:10:c1:1b:4b:97:05:b0:f9:37:89:
         fb:d0:a0:70:0a:81:a8:d4:96:39:55:c7:21:84:a5:bc:84:37:
         37:5f:3e:54:1b:1d:3d:16:33:58:b6:6b:80:f4:49:02:84:c3:
         66:23:aa:6d:f3:83:08:03:79:5f:45:1f:eb:6f:19:6c:90:41:
         f6:0d:1a:cb:d3:d0:d2:3d:e7:94:6d:da:8b:11:bd:43:13:19:
         de:57:b9:60:fa:8f:4e:f7:ff:38:92:2a:7f:8f:f4:f1:b4:bf:
         04:33:91:ef:da:d8:98:05:af:ec:58:eb:03:58:be:99:fe:62:
         71:63:60:35:ef:79:89:d9:13:58:71:a7:12:f0:ba:7c:23:b8:
         6f:09:8e:42:a6:6e:06:5b:c2:23:30:9d:ce:cc:19:b9:76:43:
         7c:9b:5c:07:a3:46:0b:ed:a5:17:2f:6a:72:55:90:85:42:a6:
         93:54:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 07:42:17 2024 by rpki-client on console-fra.rpki-client.org