Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa
File:                     b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa (raw, json)
Hash identifier:          y+in1cEKZgPlAP2uCiP8T5lfBXoUnRBlKEKZUopqxCk=
Subject key identifier:   69:C1:D9:3A:92:F3:9E:45:14:C4:D1:78:29:44:4B:3E:F4:E6:FC:B3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E70944527B64BD263EF7200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        104.199.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:94:45:27:b6:4b:d2:63:ef:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=2bf1b4e9-294b-4daa-bc34-293ce2535d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:50:15:93:15:52:38:fe:49:1f:db:14:d7:f4:
                    45:2e:f8:e9:90:d1:27:48:d0:7f:48:a3:21:1f:01:
                    c1:d7:b9:f4:92:1d:55:e1:5c:db:7f:a0:7b:6b:61:
                    f9:50:e2:43:50:83:2d:08:78:e3:a9:9d:67:e1:4a:
                    56:c3:51:6d:f9:6a:e3:03:fe:17:49:2d:62:8d:70:
                    16:89:00:81:02:cb:76:7e:07:4c:d2:aa:2e:85:f1:
                    80:43:9d:f1:bb:c0:4a:7c:39:5b:92:2b:76:68:2a:
                    cc:4e:9b:99:15:fc:6d:55:2a:92:bf:af:29:35:df:
                    bc:4a:cd:e8:d5:00:98:37:7d:3e:e5:9d:6c:fe:de:
                    35:42:b6:62:58:ba:ad:e6:a0:68:4b:90:ea:5a:07:
                    dd:44:ca:2f:66:bc:49:38:af:74:84:87:a6:03:d8:
                    f0:66:93:c5:5a:fa:18:ad:ef:38:a2:94:58:14:61:
                    90:8d:ed:51:87:c0:68:52:24:24:8e:de:f1:af:45:
                    7d:17:b3:19:2b:33:b4:a5:92:92:54:dc:67:71:04:
                    23:92:61:e2:d4:99:d9:6e:e8:e1:ac:ec:ed:9a:86:
                    03:14:27:99:fc:ad:47:99:b5:92:a8:b4:12:6e:15:
                    0e:af:bd:7b:50:82:6e:13:a9:b3:40:d7:1d:e9:96:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C1:D9:3A:92:F3:9E:45:14:C4:D1:78:29:44:4B:3E:F4:E6:FC:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3b5fa2d-eb4f-3f74-acea-dab1babeceea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.199.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3a:0b:3d:2d:23:29:48:37:d2:15:6e:59:79:37:e6:34:c1:
         06:fe:e3:2a:15:83:8e:1a:64:fd:4a:d6:8e:eb:42:4e:82:52:
         58:7c:eb:5f:4f:e4:02:3b:24:d6:40:2d:7f:b2:0d:8f:9f:61:
         87:46:8e:65:45:86:17:4f:a6:45:d5:ed:13:3c:86:cf:23:93:
         8a:c6:be:23:c1:dc:31:ea:c3:9f:9e:ac:67:1a:80:37:f4:26:
         93:5b:09:73:38:3b:b4:ec:86:40:a5:dc:39:a1:91:dd:e8:5b:
         6a:20:2c:52:8f:46:c4:45:65:76:66:ef:63:0d:4d:99:26:61:
         ad:26:4d:52:3a:59:de:5f:0b:9f:76:39:c7:e3:60:73:e3:23:
         d3:2f:67:3b:1e:09:1e:51:25:58:37:1b:62:f2:ac:4e:9d:a1:
         ba:ac:3e:03:a4:73:b8:c2:44:18:b4:b2:43:e2:2c:5c:02:32:
         3c:7e:ab:65:ad:11:9b:f7:1c:8e:cf:28:11:6b:36:be:c9:02:
         fb:28:76:72:e2:cc:dd:9d:b1:b1:95:ce:02:d5:77:3b:f7:d2:
         ee:fb:9a:42:e7:e5:64:f5:85:b2:51:22:39:c2:ad:26:47:43:
         4c:cd:4e:37:35:59:60:98:57:40:9f:ba:07:4c:6b:6b:1a:9e:
         9c:bc:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:35 2024 by rpki-client on console-ams.rpki-client.org