Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa
File:                     40cb8bf8-b7f4-317f-8740-a10807e3806b.roa (raw, json)
Hash identifier:          o5AgCPcRgux3sbvzC8inc2o/XbEK3xkgvCfY8n197JY=
Subject key identifier:   A3:61:92:2E:EF:FC:58:A4:8C:EF:5C:8D:39:8F:8F:21:17:66:42:49
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858450D8586AEAC973D8D2F693D80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        169.150.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:86:ae:ac:97:3d:8d:2f:69:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=093233ab-dc46-4730-9782-408520ee303d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:c9:07:4a:7a:e1:8d:e3:3a:96:5f:b1:e6:
                    93:8d:14:62:08:a3:1f:db:ad:d3:14:25:44:3b:7b:
                    45:ad:e6:25:09:24:f0:c5:4c:88:be:63:e1:90:7d:
                    d5:87:0b:83:28:5d:ca:ae:19:e2:5f:53:f7:2b:37:
                    ab:43:4c:6a:32:7c:ba:da:be:3b:23:ce:6f:2f:28:
                    68:28:12:c1:7d:1b:2f:8b:d9:66:2e:b2:73:79:cb:
                    56:02:c2:c1:6d:ec:d6:ea:f8:d6:e2:12:08:dd:ae:
                    61:2c:c2:f8:ca:f7:ca:ce:43:9c:c6:ed:c5:51:24:
                    c8:c4:a0:4f:6f:3d:2c:fb:4e:48:da:a7:3d:3d:7b:
                    5e:fc:a1:b9:ba:00:91:7a:7d:f5:da:2c:c9:0f:bc:
                    ab:be:0a:48:c6:c8:e9:d6:70:5d:12:dc:0f:a4:9f:
                    9c:33:43:f2:ed:6d:05:54:52:d5:18:b4:aa:c3:3e:
                    50:24:fd:5f:31:c0:c7:ed:d4:e0:6b:61:72:4e:3d:
                    b7:e7:89:46:47:e0:e0:1c:48:22:d2:64:82:06:df:
                    7f:e8:4b:ca:fc:fc:1e:ca:30:36:0c:13:50:89:1e:
                    2d:fd:7b:de:bd:3e:4f:99:23:de:3a:45:82:cd:14:
                    75:e9:5c:60:b2:e6:89:41:e4:ea:13:6e:f3:ee:4b:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:61:92:2E:EF:FC:58:A4:8C:EF:5C:8D:39:8F:8F:21:17:66:42:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/40cb8bf8-b7f4-317f-8740-a10807e3806b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:c6:49:5c:70:5e:aa:76:84:ec:3b:0b:0a:c5:ed:41:18:
         6d:3e:a9:fb:d8:cf:c8:4a:e6:b9:ef:fd:80:35:3e:ef:eb:90:
         41:03:cf:48:e5:77:37:18:84:61:0e:39:86:b3:88:7d:ad:da:
         ad:9f:6a:79:9a:fb:28:e9:a1:d7:44:4b:90:88:ef:fe:eb:03:
         a1:55:fd:30:eb:f2:9b:37:1f:c5:d0:77:ad:06:89:89:02:76:
         38:c6:67:19:93:db:17:97:be:e9:de:d3:cf:1d:0e:c7:8c:6b:
         10:97:67:9a:fe:e2:fe:32:66:81:ca:45:ea:de:8e:15:f0:1f:
         d3:ca:28:4f:27:4d:c0:10:97:78:08:49:c1:a6:70:13:ff:9d:
         90:bc:5a:86:09:b9:f4:41:cc:e3:d2:a6:e3:b1:a5:45:50:de:
         21:ff:a1:cb:52:83:c6:d4:8c:18:38:37:a4:56:48:c7:df:9c:
         b7:f8:01:6b:0f:a4:27:36:7f:55:04:3a:52:66:d0:bc:b9:30:
         54:23:85:2f:26:3d:42:f3:08:35:5d:f6:86:d4:9e:6d:e7:6b:
         45:75:f2:a9:a0:ea:bb:57:04:64:b9:22:ea:69:f9:7e:cd:fa:
         60:c2:31:0c:c7:34:70:27:79:9d:79:98:69:08:cf:80:b0:bf:
         d3:c8:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:38 2024 by rpki-client on console-fra.rpki-client.org