Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8705230c-cedc-3ac3-ac31-e7921f864325.roa
File:                     8705230c-cedc-3ac3-ac31-e7921f864325.roa (raw, json)
Hash identifier:          51IVbGJEeKll9lf0tkS+HXkS3JkgDVy4qTbUiHePY2c=
Subject key identifier:   3E:93:63:A6:06:D6:D8:0B:4A:19:2A:AE:79:D7:69:A2:E5:EB:AA:71
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540BBBDF2AE6A248706C0EDC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8705230c-cedc-3ac3-ac31-e7921f864325.roa
Signing time:             Mon 18 Mar 2024 22:16:05 +0000
ROA not before:           Mon 18 Mar 2024 22:16:05 +0000
ROA not after:            Sun 16 Jun 2024 22:16:05 +0000
asID:                     15169
IP address blocks:        104.198.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:bd:f2:ae:6a:24:87:06:c0:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:16:05 2024 GMT
            Not After : Jun 16 22:16:05 2024 GMT
        Subject: CN=ec929ed4-31c7-4bc7-8b58-950a6818f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:20:c9:34:e2:a8:39:0b:c7:e9:28:41:82:
                    ac:39:b7:3b:a5:bd:df:b9:c1:46:cb:be:ac:09:eb:
                    58:c7:82:e9:69:d0:cf:d9:29:4b:ff:4a:ec:30:68:
                    02:b8:0d:0c:c5:20:21:98:82:ab:00:58:24:fd:65:
                    b6:1a:91:d3:ed:40:65:16:1f:5c:d9:77:7e:a3:8d:
                    5a:53:b1:4b:93:e5:b4:41:31:bd:36:cd:4c:15:b4:
                    99:37:f2:d7:0b:1e:22:64:d7:a9:5c:ff:81:6a:86:
                    37:39:a3:4f:b8:45:2b:f6:ce:0b:df:7a:ab:f5:b6:
                    98:f4:d2:16:0c:67:a9:4a:86:2d:4c:7b:40:e9:ab:
                    c3:ab:f9:29:30:13:d7:3d:88:fb:38:36:dc:e9:c5:
                    d6:0a:34:fe:17:73:9c:e7:ab:b8:b5:a9:42:d2:92:
                    69:bb:1d:82:59:79:c6:6e:f6:9e:bd:80:c2:b8:5e:
                    92:fd:b8:6e:3c:d1:18:91:af:43:a6:55:cb:74:de:
                    5d:2c:6d:6d:c6:11:56:2c:be:9d:e5:08:bd:e4:fe:
                    45:a6:e0:91:97:25:79:85:68:3c:88:41:38:ea:c1:
                    1e:c0:ec:30:cc:84:50:88:c0:89:e8:6b:1d:bf:58:
                    9c:d6:2d:b7:d0:9a:e4:1f:9b:87:3c:05:b2:08:06:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:93:63:A6:06:D6:D8:0B:4A:19:2A:AE:79:D7:69:A2:E5:EB:AA:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8705230c-cedc-3ac3-ac31-e7921f864325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:0a:7d:3e:dc:e3:b3:4c:3e:01:03:35:af:3a:1b:86:d0:
         c1:07:1a:10:40:0b:00:f2:54:90:c9:d5:d1:b5:36:79:71:5f:
         f2:68:6a:a5:d3:08:17:a3:f0:2a:5d:0d:81:55:d1:2c:94:44:
         1c:81:49:e7:7d:aa:d0:8b:bb:cd:c0:ab:32:ad:36:ea:80:b4:
         48:3a:f0:09:b1:fd:e0:f0:66:e5:58:59:8c:e5:95:21:e0:d5:
         cd:02:80:06:d5:d9:f0:43:d1:cd:f6:ac:35:6a:e7:96:9e:1a:
         ee:8c:ed:84:db:72:eb:16:3d:63:0e:bb:74:b2:b7:2b:a5:57:
         1c:16:74:ad:5c:58:28:33:7b:52:0e:b8:34:7c:d9:36:cb:62:
         f5:c5:da:39:1f:5a:ad:3b:cf:7d:dc:76:ef:03:35:da:92:bd:
         4c:56:49:10:53:b8:ee:0c:3c:97:d3:e7:c3:cb:d9:b8:f0:74:
         44:74:93:36:73:cf:f3:0e:8e:fa:26:75:a4:ad:7e:ae:cf:c4:
         87:8e:cb:0a:a1:ef:46:94:76:26:44:b2:23:36:44:69:19:30:
         c9:f0:5a:65:ab:07:90:68:dc:e9:2d:09:6a:b1:23:43:3f:6b:
         24:e5:e4:2b:25:5b:39:93:d6:06:66:b8:f2:e3:d5:ff:d7:81:
         c0:de:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:29:43 2024 by rpki-client on console-ams.rpki-client.org