Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80225dc5-4a6a-3606-961f-26583796ac61.roa
File:                     80225dc5-4a6a-3606-961f-26583796ac61.roa (raw, json)
Hash identifier:          CBCE/Ujuhj/yxjy18tbGDMqWD2MK60899iDGzjs88ck=
Subject key identifier:   41:EE:9A:76:3B:B3:81:6F:93:1B:C4:57:2C:2D:61:D8:0F:C0:3D:6C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3015C2D1A26D99F8FE700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80225dc5-4a6a-3606-961f-26583796ac61.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        104.137.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:01:5c:2d:1a:26:d9:9f:8f:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=24da1c24-a51c-4c68-a6dc-0124327d34b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:a7:72:e7:53:72:e0:1a:03:9b:66:7e:5d:
                    ab:07:f0:99:b2:e7:56:14:34:ce:84:f7:d5:66:20:
                    ca:14:dd:ef:52:ae:d9:29:99:7d:a0:7d:3e:6f:72:
                    7c:fb:f0:86:fd:c6:21:f6:eb:b5:04:da:d1:8a:49:
                    06:28:cd:95:3f:73:fe:e9:eb:d4:84:88:f1:45:f2:
                    4e:bb:88:46:38:d6:80:4d:5d:dd:c4:25:b5:6e:5e:
                    1d:a0:cb:d6:36:1e:6e:f1:f5:f8:ab:c2:24:4e:d2:
                    97:a7:3e:64:3a:7d:2e:cb:56:7f:f3:9b:7d:d5:54:
                    01:a3:ae:c7:79:cc:aa:68:d0:00:52:ad:b8:4d:70:
                    28:b3:33:31:c0:ae:02:cf:32:9c:2f:92:fe:dc:08:
                    77:e5:2e:e6:8b:a7:ba:48:cc:a4:6a:bd:b1:37:c5:
                    3d:47:a2:1f:17:6a:1c:bc:f9:52:7d:82:6d:c1:ce:
                    59:9b:c2:91:64:82:dc:f8:a2:66:0c:de:08:e8:b4:
                    7e:d2:29:a5:ad:6f:81:fa:2e:25:e3:7d:f5:ec:df:
                    ed:6b:43:17:c7:9e:2b:72:b7:c0:83:a3:22:30:ef:
                    d3:f7:20:4e:2e:0f:d6:f9:10:fc:74:f9:1c:fd:56:
                    9e:aa:5d:d0:2b:5e:dc:23:94:a3:05:7d:d5:03:40:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:9A:76:3B:B3:81:6F:93:1B:C4:57:2C:2D:61:D8:0F:C0:3D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80225dc5-4a6a-3606-961f-26583796ac61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:72:76:09:8c:4b:3f:0f:6a:12:e5:8d:73:c4:8f:90:63:
         f9:9a:80:70:5f:e4:69:12:6e:6c:4c:63:91:b2:bf:dd:fe:be:
         c3:c2:b9:63:df:3d:41:dd:e0:42:d5:06:47:ec:d9:18:97:a7:
         0b:39:ef:b3:a4:3a:10:3c:d9:ea:1f:dd:c0:a2:3f:45:90:b4:
         08:ba:86:89:b0:b0:c3:d0:25:52:13:73:a0:de:53:f3:d0:7d:
         8d:4d:7f:b4:dd:55:b5:03:ff:7c:28:c5:7e:de:16:5e:a7:50:
         15:a9:4a:af:fe:47:c1:f8:52:cc:1f:64:ab:20:b2:24:c2:26:
         62:f3:3d:24:cf:7d:82:db:a0:6a:bb:7f:25:d2:35:ed:2c:b1:
         ed:79:0a:65:b2:8d:0d:de:c6:b0:53:2a:e1:71:ae:96:37:cb:
         4e:8b:6a:9c:ae:4f:30:df:3d:d4:c3:97:15:a1:0a:ec:58:44:
         08:61:9f:79:a3:9f:40:f5:13:77:e4:fd:f8:0a:86:fd:66:36:
         26:b7:7b:39:62:cc:dd:07:ec:8e:18:ec:82:34:38:e6:1c:6e:
         d7:ae:1f:70:36:7e:eb:e5:94:80:06:b3:b6:e9:c7:82:2b:59:
         99:80:70:ce:2e:be:b6:07:8b:c1:36:25:31:5b:7e:6a:32:66:
         69:3f:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:12 2024 by rpki-client on console-fra.rpki-client.org