Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
File:                     ace08759-ae56-37f9-b6d2-429a1b0989b7.roa (raw, json)
Hash identifier:          Rmu87LLmbVihYH/2PCgBOKhrdmKjpLkP7JYDLI8YivQ=
Subject key identifier:   39:78:85:B3:B3:64:64:CC:C0:18:F6:1F:3D:1D:5C:6B:B3:EA:85:60
Certificate issuer:       /CN=cb29a492-e225-4723-973a-07560c140eea
Certificate serial:       010D0C9F432858458C6DDA14E573A2982C1F2E80
Authority key identifier: A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     398538
IP address blocks:        170.39.89.0/24 maxlen: 24
                          104.247.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:da:14:e5:73:a2:98:2c:1f:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a492-e225-4723-973a-07560c140eea
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=62bae0eb-963e-46a2-b396-71c7e2a62e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:dd:9e:61:dd:11:b7:3b:7c:47:59:57:c3:
                    60:6d:fb:33:78:43:be:f2:ce:92:29:05:b0:e6:50:
                    b7:b0:cf:de:0f:10:38:69:dc:b8:ec:19:77:5e:b5:
                    0b:2c:95:02:fc:0d:db:8f:72:dc:76:1e:96:5d:28:
                    07:c4:76:a0:9d:04:8b:e5:14:13:68:76:98:c0:c5:
                    a1:9c:d2:6a:18:a9:42:b6:46:ef:ca:e5:cc:fb:dd:
                    d9:42:69:cc:68:4b:90:0a:64:00:51:f8:12:84:6d:
                    6f:8c:63:6a:38:e6:25:a2:94:4a:43:68:06:b8:fd:
                    ab:08:f8:64:05:cb:01:97:c0:25:b9:b6:a2:ee:dc:
                    e7:78:1c:2f:ef:bf:9b:42:ed:12:2e:8b:2f:55:e6:
                    db:48:ad:f7:ab:15:b6:87:10:1d:d0:a8:54:32:d6:
                    d4:ad:6e:d6:b8:5d:27:77:1a:21:d3:d9:0b:44:82:
                    0a:47:79:45:05:df:0b:9a:48:4a:e2:dd:67:38:2e:
                    8e:fa:82:69:3c:a9:14:30:ee:e2:d2:5c:ce:05:ef:
                    42:6f:b7:6a:c7:9b:41:99:23:af:3d:02:6e:4b:41:
                    72:8e:25:f7:6c:05:df:d8:d4:a2:9e:e4:85:de:0c:
                    f1:c8:70:50:d0:ea:92:bf:7f:03:1d:26:aa:33:0b:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:78:85:B3:B3:64:64:CC:C0:18:F6:1F:3D:1D:5C:6B:B3:EA:85:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.127.0/24
                  170.39.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:3c:82:0f:d9:fa:93:be:58:e3:23:51:df:b1:44:dd:24:
         dc:48:96:96:b1:83:70:ba:d3:37:7e:23:64:62:e7:63:17:66:
         ce:ff:67:45:17:a6:ba:83:ca:7e:7c:3e:64:ac:88:7a:1e:fe:
         9b:a9:ab:80:5d:d9:84:cd:f7:14:aa:c6:5a:f7:72:88:67:34:
         e7:fd:fe:c9:0e:41:0a:a8:16:8c:f6:39:6c:da:1a:07:2b:d6:
         37:e7:ab:34:14:6f:9a:03:90:87:db:1b:b1:b6:b1:1a:1b:4f:
         42:53:53:ab:6b:85:fd:6d:26:f2:24:7b:df:a5:d7:27:10:2f:
         d8:66:d0:76:c2:ec:4c:4e:af:77:1d:74:de:40:73:64:09:e0:
         07:4a:66:85:96:f7:07:39:5e:4f:e7:23:95:4f:1f:97:19:5c:
         bd:42:6a:e1:59:04:00:db:25:ce:9f:02:2e:26:4e:2c:f5:d2:
         c9:5a:0a:fa:ab:0a:36:53:58:82:89:75:da:21:96:65:78:10:
         f2:6e:66:23:c9:cf:34:e8:17:62:78:b4:14:c0:0c:2a:ca:76:
         c4:27:16:31:73:9a:5d:c9:43:31:a1:d3:a0:a9:68:81:b5:62:
         a9:c0:cc:d0:c4:cc:29:06:5f:07:02:c0:b0:61:7e:93:60:00:
         02:60:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 07:33:34 2024 by rpki-client on console-fra.rpki-client.org