Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa
File:                     8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa (raw, json)
Hash identifier:          tghCAyl9YuLhNC1M3udP+0yy7TLpsHFsn+tkJkxkEXw=
Subject key identifier:   91:25:EE:62:0E:7D:29:81:EA:42:70:47:D4:A2:27:A4:AE:B7:D8:B6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBCA970A48C6B77F486C10
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.196.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:ca:97:0a:48:c6:b7:7f:48:6c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=c658f8b7-bcb3-4e15-b4b4-1eb588b3a2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:61:cf:90:ba:35:a4:88:40:d7:70:3a:ee:
                    a3:41:69:ae:e8:6a:f5:19:f4:e9:99:45:8d:d2:c9:
                    3d:a9:c0:68:c1:86:f5:4e:57:91:3b:2c:52:d4:70:
                    77:e6:f0:32:ad:3e:69:41:36:8d:0c:ba:0a:4e:76:
                    45:3e:d3:47:75:8f:3f:5a:e2:a0:90:40:cc:39:a5:
                    e5:2a:00:19:3a:84:4b:00:89:72:a1:fb:31:8c:60:
                    30:bc:28:92:07:e6:c0:77:55:10:66:82:3c:31:97:
                    15:0a:10:67:5f:27:7d:42:1a:19:b9:a0:7c:2a:0c:
                    d4:75:02:79:fa:1f:44:d4:5a:95:6f:72:e9:6f:54:
                    12:ea:eb:97:7d:27:0d:c8:0b:cd:32:f1:4d:1e:e7:
                    cb:6e:90:87:60:04:fd:3c:15:22:c3:9b:45:ee:81:
                    fc:68:87:a8:7a:4f:a6:f9:82:1a:a2:4e:aa:9f:5e:
                    32:ca:8e:22:1f:f7:13:31:20:8a:e7:b7:58:32:1a:
                    60:dc:f9:92:f0:1b:88:a1:95:f2:a5:8b:42:bb:c3:
                    09:11:a9:3f:67:dc:65:00:44:2c:2e:a9:d7:89:fd:
                    f0:19:71:ef:77:10:4c:d3:7b:64:26:4b:4f:e4:97:
                    bd:06:2a:96:6e:7b:78:75:e3:0f:f1:77:d8:d4:fa:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:25:EE:62:0E:7D:29:81:EA:42:70:47:D4:A2:27:A4:AE:B7:D8:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8338b3cf-c58c-37a1-a2b4-244f96c3e59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:89:44:4a:ee:94:7b:45:5a:47:71:ed:96:44:84:58:7a:
         ec:1f:77:72:a0:53:be:cf:66:9e:f2:16:72:21:2f:00:4f:cd:
         a2:71:00:02:35:a3:71:f4:40:b4:89:3b:9a:11:f4:04:e4:2c:
         9d:f2:f0:89:7e:3a:bc:71:e5:40:03:e8:84:36:19:81:c5:9a:
         a7:ec:e5:94:49:33:fd:2a:0b:6b:97:ed:f2:df:cd:7e:28:74:
         8a:e1:36:1e:82:17:5b:62:85:d1:c0:68:aa:1f:c7:33:de:90:
         86:94:bc:9a:9a:fa:e1:0b:0e:de:7a:cf:57:b7:7b:92:f8:bf:
         db:69:5b:0a:1c:5a:c8:6d:ca:4a:e0:69:ba:6c:68:1b:e0:6e:
         eb:33:ce:fd:59:fe:28:ec:14:42:a6:91:28:ee:01:50:67:d9:
         4a:1a:76:95:7d:f8:61:ed:ec:79:bf:80:04:76:a3:75:a8:60:
         40:c9:c6:0c:27:81:01:b8:a6:64:aa:14:cf:65:ff:cb:5d:0d:
         d0:3e:e8:24:74:83:ea:42:55:38:eb:19:9a:e8:2e:49:d6:86:
         68:38:d8:27:cf:05:cf:72:75:1c:86:47:8d:ba:4a:e9:92:83:
         27:f9:ce:60:6f:d4:f0:e5:75:4b:43:53:a6:83:51:cd:8b:13:
         6c:bb:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:44 2025 by rpki-client