Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8c61210-0fbf-351f-a919-916417d9802b.roa
File:                     c8c61210-0fbf-351f-a919-916417d9802b.roa (raw, json)
Hash identifier:          4gx8GBXeJ9d9Qpt8XkivdexIUrxhB9B5NAhRkYDEcOU=
Subject key identifier:   40:4D:5F:78:7E:C3:C9:89:0B:31:C8:2A:81:75:9D:B5:5B:27:EB:98
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540B6C7012DAFB916F9C22CD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8c61210-0fbf-351f-a919-916417d9802b.roa
Signing time:             Mon 18 Mar 2024 22:06:05 +0000
ROA not before:           Mon 18 Mar 2024 22:06:05 +0000
ROA not after:            Sun 16 Jun 2024 22:06:05 +0000
asID:                     15169
IP address blocks:        104.198.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:c7:01:2d:af:b9:16:f9:c2:2c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:06:05 2024 GMT
            Not After : Jun 16 22:06:05 2024 GMT
        Subject: CN=50bfd3a3-0b7c-4d7b-9067-a3b434d6b29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:f7:d3:9f:bb:74:54:07:84:40:ad:bc:42:
                    c2:7d:48:d3:59:ae:a1:1d:01:be:69:dc:9e:53:d9:
                    b3:26:8d:a3:be:74:a2:86:e1:2f:7a:87:5c:b1:68:
                    c5:d1:c9:ff:1c:c8:7c:3d:c3:cd:d0:5e:ee:af:97:
                    7b:56:05:07:d8:63:64:5c:b8:b0:92:f6:c5:82:7f:
                    3a:f3:16:16:8c:52:d3:74:fc:33:7e:57:3f:1e:13:
                    50:aa:4e:4d:65:f9:7f:43:fc:fb:f5:9c:78:fa:39:
                    31:e9:41:72:62:37:e2:32:fd:5b:95:c2:22:7c:7a:
                    b4:49:c7:28:68:d3:b2:e1:8e:60:03:c7:fa:ba:ed:
                    56:ce:4f:c3:6c:b0:eb:99:8e:7b:cc:b2:6d:fd:6b:
                    d9:e3:c6:70:86:a6:e6:7a:70:2a:c4:80:b7:33:34:
                    c5:d3:f5:b7:e5:b9:b3:bc:80:3c:07:5b:43:84:4e:
                    06:1c:c7:a5:55:6b:bd:bc:9f:a9:60:d5:34:33:a8:
                    e6:48:5a:42:13:3d:e2:ea:ce:d8:5e:3c:50:fc:b1:
                    03:c8:0c:1f:c6:38:33:a9:65:b8:41:23:ed:74:8e:
                    16:da:f3:50:2c:0e:f6:9d:d7:8c:f5:8e:83:a2:1b:
                    dc:70:f2:30:27:3a:cf:75:e5:62:70:91:8f:34:72:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:5F:78:7E:C3:C9:89:0B:31:C8:2A:81:75:9D:B5:5B:27:EB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8c61210-0fbf-351f-a919-916417d9802b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8a:88:68:32:69:aa:d3:b6:b0:e6:4b:1b:4c:6f:eb:2a:0c:
         c3:8b:82:69:09:c4:9d:e2:b6:19:1a:52:66:60:ae:50:5f:b7:
         6c:7e:a5:8f:a2:0f:90:ba:34:69:d0:e6:35:78:e0:44:43:4e:
         4d:8a:46:43:05:9c:1e:0a:d2:17:9d:52:c7:8b:ef:ed:b5:b4:
         56:4d:18:fe:12:5e:32:ba:62:26:4b:b4:8c:06:e0:0c:74:92:
         70:5c:3d:3b:55:d2:64:d5:64:98:4a:fe:95:ee:3f:93:b9:60:
         20:87:b3:79:11:93:2e:b3:83:27:59:33:eb:9c:5c:d0:94:b0:
         b6:92:e5:77:21:dd:f4:34:11:d3:43:bd:23:f2:37:88:fd:3a:
         d5:24:76:85:92:00:38:72:20:5d:92:3f:e6:5f:02:58:9f:46:
         66:e1:e4:f3:e4:54:f4:96:c6:04:78:36:05:5e:7c:3e:85:0e:
         26:07:d8:1f:1e:e4:0e:fa:85:c5:34:58:98:fd:d5:af:e4:60:
         f3:de:b2:9c:50:34:36:38:49:62:b0:85:4a:f9:28:6f:b5:40:
         3d:e6:db:a6:2f:34:f0:20:0a:d2:d0:5f:29:f2:61:f8:2e:b1:
         9e:44:7f:ed:00:99:9b:51:e0:8c:53:1f:1c:75:f2:fb:65:75:
         81:b6:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:10 2024 by rpki-client on console-ams.rpki-client.org