Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
File:                     e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa (raw, json)
Hash identifier:          WhFgfzVes8I3FL02y638rgD/WwZ0zFiCIk5/WeQAJUc=
Subject key identifier:   DA:90:55:9A:B0:F6:58:B7:67:E1:0B:18:8B:B2:84:42:B7:3E:A2:A4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F910C2935793EC466580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        104.137.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f9:10:c2:93:57:93:ec:46:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=1fc510f4-f64a-4e56-9b8b-aacbc728d22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:ae:cf:27:48:83:30:f9:06:c3:27:a4:85:
                    90:89:9f:b2:dc:eb:80:8a:0a:6e:75:30:d3:af:5e:
                    6c:fd:17:81:0f:dc:c0:f2:39:68:a8:68:ab:28:1e:
                    aa:9f:d4:30:d9:c1:00:97:eb:58:07:e9:a0:4d:c2:
                    77:45:d3:a3:82:10:bf:43:13:04:f6:6d:c6:cc:e8:
                    f6:00:d7:6f:1c:f6:1b:87:fc:b6:4e:45:ef:f8:48:
                    65:d5:d7:7d:15:f4:43:35:8d:08:de:e7:6d:1e:2b:
                    41:fb:47:66:f8:da:d6:6d:2b:71:91:36:90:05:37:
                    a5:73:8b:61:1d:bc:5a:76:4b:37:54:91:c0:ad:c9:
                    95:14:e4:e9:4d:fb:e4:0e:93:eb:87:74:f0:a8:c3:
                    23:e9:d1:27:a3:80:47:2d:46:bc:aa:95:86:e0:b2:
                    16:bb:71:e6:5e:f3:9c:57:4a:98:63:58:7c:a2:6e:
                    95:d6:eb:ae:1b:22:25:19:5a:99:96:df:9c:2b:30:
                    ad:34:04:6a:21:39:79:7e:c1:3a:0b:81:f2:d3:ee:
                    c6:44:d0:a1:d2:45:bf:0b:58:69:74:72:cb:2a:d2:
                    bc:bd:43:83:03:f7:43:a7:c2:9c:a6:b0:74:42:19:
                    d2:b2:8b:ec:21:63:3b:43:3a:ac:a3:aa:de:27:f8:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:90:55:9A:B0:F6:58:B7:67:E1:0B:18:8B:B2:84:42:B7:3E:A2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:25:60:f3:db:e2:33:b9:15:a2:6b:98:ad:24:06:a7:48:54:
         c0:83:6c:f3:22:f2:93:7c:46:1c:d7:bc:24:1c:16:b4:96:e2:
         77:0c:bc:9d:7f:40:4f:6d:22:db:bf:51:83:77:9e:7c:37:24:
         5b:d4:62:4e:69:9e:0d:03:4f:b1:db:82:45:6e:1a:7b:db:0d:
         b0:30:12:3c:37:d1:1c:66:5c:7f:b7:ea:c8:29:65:e8:3f:79:
         51:ef:7d:a2:de:6b:07:02:8d:48:4a:2c:d0:c5:78:bc:76:7f:
         2c:43:de:fd:4c:2a:26:c3:70:eb:69:52:a2:7e:bf:2d:49:cb:
         a7:9f:50:e4:cc:70:79:05:c1:bc:d4:fb:eb:65:66:05:90:33:
         b0:88:c9:73:b6:2a:1f:eb:94:87:8f:69:27:cc:c1:54:ec:10:
         1d:ec:fc:21:9c:f2:94:44:b0:dd:bc:c7:39:c0:41:d4:d9:b2:
         0c:79:86:3f:60:57:52:c7:10:ba:93:f7:4f:51:cb:88:de:58:
         36:d1:77:f5:4b:59:9f:08:00:13:2c:f7:b8:b5:5a:97:dc:32:
         50:f1:67:ef:a1:bd:db:d4:41:21:6d:b4:40:7c:d5:14:ba:9e:
         2d:69:22:e9:bf:3b:44:11:a4:42:73:ea:4f:0d:eb:8c:e3:ad:
         95:ce:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org