Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/1218470e-bbb8-348c-9de2-b8c8ba32db1b.roa
File:                     1218470e-bbb8-348c-9de2-b8c8ba32db1b.roa (raw, json)
Hash identifier:          xjrpqsBZST9adLUDre7qcMndj3OoOO15Xw9vT2q13LI=
Subject key identifier:   FC:07:12:05:57:25:9D:B2:82:B6:7B:BB:49:AA:B0:62:8E:CE:C4:1E
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F432858471D0B12D9F3DB84C2C047F8A0
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/1218470e-bbb8-348c-9de2-b8c8ba32db1b.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     393950
IP address blocks:        104.251.174.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:12:d9:f3:db:84:c2:c0:47:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=c9daae43-b5d7-4c8a-be83-2cdff5db4a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:7b:ae:11:d2:c1:a3:e3:73:36:82:25:51:
                    be:b6:ea:61:56:ab:32:8a:bc:92:88:4a:d0:ea:e4:
                    79:1f:39:42:ae:9c:e0:8f:42:c3:9b:00:a0:91:38:
                    17:b7:91:79:01:e2:4b:6e:45:02:c7:80:4a:14:df:
                    b5:2b:03:85:80:9b:93:e9:86:e3:be:05:14:90:ef:
                    83:80:80:f6:6d:e1:d4:73:06:04:15:17:d2:f6:0d:
                    5d:c6:01:33:4d:dc:66:0a:9c:5c:a8:7f:cb:f1:cf:
                    71:e2:3a:54:26:81:39:d0:03:9f:d8:1b:70:5a:38:
                    53:0c:1b:bf:f9:20:c0:d3:e7:1b:5a:f1:ff:8e:a7:
                    e2:6b:8a:b3:56:36:d8:54:09:1a:0b:0b:ab:dd:32:
                    60:13:47:d4:2e:e6:03:93:5c:d7:e7:75:2f:cd:53:
                    93:bd:54:3d:76:7d:51:5c:62:71:a6:22:1d:67:59:
                    9d:f2:37:db:0d:04:4e:cd:31:ec:10:3b:76:ba:e7:
                    54:a0:1d:f2:fa:2b:24:5f:da:42:f8:f0:b3:87:c1:
                    d4:ae:ad:95:5e:64:67:d3:b5:b0:47:37:bb:58:18:
                    2d:b4:c4:c3:fb:8f:4d:ff:aa:2b:0c:a0:ed:2a:37:
                    c9:8c:9a:e9:08:53:a6:e0:87:8f:4b:2c:61:9a:68:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:07:12:05:57:25:9D:B2:82:B6:7B:BB:49:AA:B0:62:8E:CE:C4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/1218470e-bbb8-348c-9de2-b8c8ba32db1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:1f:8f:05:27:51:35:5c:44:b9:61:84:2e:04:30:93:3c:
         e7:90:a8:e0:3e:c7:96:44:c1:90:63:87:f1:0b:29:c6:e0:b3:
         c5:df:de:d4:7b:b6:08:e4:25:cb:56:20:40:68:ec:39:30:cf:
         8f:75:fe:d0:61:08:69:1e:d0:43:50:b6:f6:60:b3:8f:1f:ba:
         e1:e5:9f:88:0b:09:bf:7b:28:98:64:fa:20:46:00:68:fa:87:
         75:c4:f4:08:6e:b3:d8:03:ec:e0:c7:a0:a2:1b:94:64:08:9f:
         27:72:2e:dd:6b:6f:97:9b:44:6e:1a:95:86:a1:86:f5:e4:2d:
         1c:e8:32:ac:1f:bb:b5:0c:31:5a:fc:af:4b:ed:16:22:90:88:
         6d:81:88:68:54:62:85:22:27:62:80:9f:27:ca:43:70:22:a2:
         e0:72:6f:33:52:3c:0c:0a:3c:c5:39:3a:61:48:8c:2c:b1:9b:
         a7:a3:c5:a2:c7:c2:4e:fd:69:6a:3a:f5:9e:52:38:0c:e7:14:
         35:9e:d3:28:c4:34:70:70:88:f2:7e:91:88:fd:74:55:90:59:
         d3:2d:12:46:df:83:92:71:f1:ea:2e:55:8f:44:65:55:44:9d:
         0c:dc:55:c6:15:2e:d3:f1:35:2f:cf:31:dd:02:6c:06:62:64:
         38:e2:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:35 2024 by rpki-client on console-ams.rpki-client.org