Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3bca5d1c-b966-31d6-a8e0-cb08108b00e7.roa
File:                     3bca5d1c-b966-31d6-a8e0-cb08108b00e7.roa (raw, json)
Hash identifier:          im9wU12ikAi8Ae3bAW5YvXh/5+YczMkK1P9zU3K9DHU=
Subject key identifier:   52:D0:E3:C7:11:8C:16:42:03:A3:D8:51:41:2E:89:15:04:63:00:E5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858384FE67B91DEC47AFBEE3DAF00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3bca5d1c-b966-31d6-a8e0-cb08108b00e7.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        104.137.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:e6:7b:91:de:c4:7a:fb:ee:3d:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=c837510a-ea8c-43c7-b064-375be1e730ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:2a:d5:42:fd:89:a6:82:eb:44:1b:c1:6b:
                    86:38:c1:68:e6:db:b0:3f:ae:14:d0:88:8f:81:60:
                    41:de:85:bb:3b:3f:dd:d4:84:75:9d:02:e9:dd:32:
                    f4:32:3b:07:eb:2b:a3:0b:f0:11:54:cf:14:0a:7c:
                    46:09:10:03:e2:7b:f2:ab:e6:55:ed:ed:b8:68:44:
                    11:12:12:6a:85:79:31:33:f8:9a:22:bc:db:5f:33:
                    e1:fc:7f:bc:2e:dc:c8:93:67:33:5f:c2:7d:ec:7a:
                    16:91:92:51:68:c6:98:93:aa:06:4c:10:95:a3:ec:
                    8b:2b:5f:56:d9:a6:bd:8d:36:fc:1f:49:d1:69:29:
                    75:bc:86:20:3b:b1:4e:93:dc:a9:2d:88:04:3f:97:
                    e4:3b:f2:e4:19:3b:04:50:e7:dc:35:e6:b6:9d:40:
                    b0:4a:fb:40:4d:36:27:4f:00:1e:57:91:0c:e9:10:
                    f7:3c:49:0b:67:87:55:d1:07:8d:ec:cb:ac:34:da:
                    b7:11:a2:02:d9:b3:e4:3b:75:70:b8:4f:25:68:77:
                    b6:d7:b6:59:e1:79:15:8f:e5:bf:77:cb:3b:dc:84:
                    4b:63:df:b7:32:bf:c6:d6:34:c6:a4:29:16:d2:8f:
                    cf:fa:bc:a6:de:f1:03:a7:d5:86:b9:95:7d:70:ba:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:E3:C7:11:8C:16:42:03:A3:D8:51:41:2E:89:15:04:63:00:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3bca5d1c-b966-31d6-a8e0-cb08108b00e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:61:52:fd:23:81:40:0a:2f:e2:8f:aa:97:90:de:e8:2f:
         13:3f:13:05:84:ec:fa:45:bb:b0:f1:ae:10:97:b9:6c:67:a7:
         9c:ae:6d:93:6d:33:16:b1:7c:46:22:6d:f6:e6:f3:21:f6:c8:
         db:2d:6b:3b:43:96:44:fe:02:9a:62:b0:27:28:da:85:7d:65:
         63:11:c8:08:14:91:c6:ee:ed:79:2b:64:11:3e:62:a5:4d:08:
         3b:f3:09:40:6f:f4:71:6c:65:23:0f:d0:16:c4:7f:9c:ec:c1:
         bb:5c:12:bd:f1:9f:8a:b9:f4:f8:f1:05:41:8e:1c:1b:9e:cf:
         d3:e8:38:86:a0:fd:00:c1:31:b0:6f:fc:de:a0:a5:09:81:5e:
         80:96:5a:b6:d5:e6:f1:74:96:69:92:3e:7e:00:c7:99:05:b4:
         57:9e:30:46:aa:52:09:7a:39:79:89:d5:5e:27:67:de:ae:a4:
         9c:f5:61:38:93:d2:39:53:d9:4f:04:d5:9f:d4:13:1a:27:d4:
         a1:d2:20:00:01:5a:92:06:33:cc:9c:78:7a:ad:58:52:1a:5f:
         ac:33:ce:ca:ec:ea:d6:c9:4b:bf:c7:96:0b:9f:c3:a9:24:f5:
         af:cc:7b:17:46:fe:f4:fc:2d:3c:e8:93:9d:df:ee:67:78:af:
         7a:a1:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:04 2024 by rpki-client on console-fra.rpki-client.org