Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d6be6bf-84fc-302a-bab2-10c167e1abc2.roa
File:                     0d6be6bf-84fc-302a-bab2-10c167e1abc2.roa (raw, json)
Hash identifier:          iHLcTSsZ2y782Vp3JICEMd0cPBp/yrGYiaUDVQDkDCI=
Subject key identifier:   40:6D:C8:E5:E1:61:BB:11:04:87:85:03:CA:54:0B:DD:58:EC:33:EA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBB5BFB07AE9EE783539C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d6be6bf-84fc-302a-bab2-10c167e1abc2.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.197.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b5:bf:b0:7a:e9:ee:78:35:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=8fbd45fe-fe40-4bba-8f49-062e4f2a719c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:41:20:70:29:02:99:75:78:7c:5f:6b:62:
                    1f:fa:c1:cb:78:27:59:1c:87:58:41:02:37:1d:28:
                    83:9f:3d:3d:26:b0:85:c3:25:9c:83:60:17:f9:1f:
                    0a:8c:d9:9a:44:53:e0:33:36:f3:c3:08:11:54:6a:
                    1a:c6:95:9d:d4:c3:4d:31:62:82:9d:69:2d:a1:11:
                    4c:2a:fb:38:4e:cb:2f:f7:c2:a3:91:cf:2a:c0:21:
                    af:cb:7e:18:ba:d9:b7:24:3b:fd:76:7f:eb:b0:2a:
                    64:47:2e:2c:f0:ee:50:cc:59:e1:b2:02:e2:b4:04:
                    50:f2:e1:7b:1b:6d:a3:2b:ee:20:3b:83:b4:da:20:
                    ec:ed:31:1f:5c:d6:8b:75:28:d3:e7:65:b3:6a:60:
                    9a:81:41:d0:e1:60:5f:e6:64:65:6c:82:d3:27:c8:
                    fe:82:2c:2a:dd:ee:13:07:8f:67:41:8e:11:51:de:
                    90:37:b3:8d:ce:1f:77:86:68:da:29:ad:36:de:88:
                    1c:d3:b5:50:b3:1a:3b:95:f8:59:d8:3e:77:09:4b:
                    d9:0c:f8:8f:a8:1a:ae:4b:18:2e:0c:f6:6a:41:cf:
                    41:53:21:e7:fc:2d:38:17:9c:45:eb:e2:c1:47:d6:
                    17:67:ed:08:17:85:24:1f:c3:5d:d8:ae:50:80:2d:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6D:C8:E5:E1:61:BB:11:04:87:85:03:CA:54:0B:DD:58:EC:33:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d6be6bf-84fc-302a-bab2-10c167e1abc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:fd:27:fc:c3:51:ce:46:71:8a:28:24:9b:d6:8d:bc:07:
         ae:2d:af:75:e0:29:23:b8:ee:d8:98:0b:48:e0:08:b6:7c:83:
         fe:23:e4:68:8c:27:f9:4a:02:0f:06:d4:64:1b:1c:d4:bc:93:
         60:92:d3:e9:bb:79:d7:0a:3b:38:f2:d5:25:04:63:b0:c7:c3:
         bd:25:47:d3:d0:1b:68:fc:f8:ea:e2:1c:75:57:6e:a9:09:f1:
         ee:4a:9e:47:36:75:66:df:eb:9d:05:a6:71:bc:f4:c8:7b:df:
         12:5a:0a:e2:1a:06:5e:e4:ac:99:16:fa:0e:31:f1:b8:72:94:
         c0:fa:42:ae:e5:88:d5:f3:4c:67:fa:5c:af:d6:b0:d5:02:16:
         db:4d:8a:6a:06:b3:d6:70:66:22:b5:79:6c:03:0b:11:fd:e2:
         e7:05:8f:b3:04:62:3c:ae:dc:7d:b6:00:80:42:a5:95:a6:f8:
         d7:18:3c:27:ad:7c:7b:44:51:c0:ad:c1:8e:28:99:54:05:7f:
         93:c1:e9:89:3a:dd:71:30:bc:67:87:06:a9:92:18:43:37:ed:
         0c:ea:4c:45:4e:40:cd:d4:b6:f0:4b:03:7b:9e:ad:8f:30:32:
         55:d8:2e:e9:67:88:3f:0b:9d:cc:fd:c7:4b:62:a8:36:2c:dc:
         19:47:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:44 2025 by rpki-client