Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa
File:                     285ac7ac-6745-33d7-9dce-52cc8033ef65.roa (raw, json)
Hash identifier:          3FjMqjBINGtjCpMzW18KO80FEaqc+dvtW4+oa5LmtHo=
Subject key identifier:   45:2D:70:38:73:DF:4F:DC:1E:F4:AE:4E:C6:6F:AE:D0:8B:C8:B8:AF
Certificate issuer:       /CN=15364252-9e65-4f74-ba62-8a3b8ccc7e5f
Certificate serial:       010D0C9F432858457D13205B75103C658281BE00
Authority key identifier: 7A:1A:42:77:DE:20:1B:27:E2:1E:42:FE:C8:06:B1:0E:0E:FB:A9:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     63275
IP address blocks:        169.197.72.0/23 maxlen: 24
                          104.237.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:20:5b:75:10:3c:65:82:81:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15364252-9e65-4f74-ba62-8a3b8ccc7e5f
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=07e1e2e8-ede0-4a79-8579-0fdd1bb7d84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:25:dd:1d:55:34:48:c1:3b:d1:dd:cd:4c:
                    e9:71:5c:f5:7e:ad:41:5e:f5:1a:45:94:8f:d2:38:
                    c0:cd:be:ff:ca:79:74:dd:c2:cf:aa:08:c1:3e:04:
                    e1:d9:56:c2:68:99:6e:5d:08:47:9f:58:da:4a:26:
                    0a:8b:e6:d1:1a:1c:9f:a5:d7:c9:87:54:f3:ec:86:
                    0c:4e:6b:78:9b:cb:01:b6:09:a0:e6:87:50:e6:d9:
                    e2:9d:b4:55:22:59:77:fc:3f:83:e3:0c:17:ae:fa:
                    9b:76:be:e0:d0:c8:f6:59:42:48:87:20:b6:66:73:
                    a4:2f:6c:b4:a4:70:3c:1e:cd:89:e8:83:fb:9c:db:
                    91:63:f6:9e:72:b8:26:39:f9:05:48:81:fc:07:0c:
                    8d:0f:60:b0:da:50:9d:2c:e7:d7:46:08:ef:5c:ac:
                    dc:b7:ac:05:4e:3d:63:bc:ca:6a:3a:11:b9:85:63:
                    9e:05:a5:a4:5f:e9:d1:5f:e4:fd:b7:74:96:d0:b2:
                    77:af:9c:10:1d:09:e4:80:df:04:cc:e3:d2:ef:0e:
                    94:39:1d:71:b4:71:3e:40:61:4a:3c:9b:1a:97:d9:
                    0b:df:43:b9:68:bf:65:40:e6:c8:ce:f8:58:16:7d:
                    38:ae:db:67:d4:4e:41:1f:e2:38:6a:56:5b:7d:56:
                    8e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2D:70:38:73:DF:4F:DC:1E:F4:AE:4E:C6:6F:AE:D0:8B:C8:B8:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.crl

            X509v3 Authority Key Identifier:
                keyid:7A:1A:42:77:DE:20:1B:27:E2:1E:42:FE:C8:06:B1:0E:0E:FB:A9:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.96.0/20
                  169.197.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:c1:2d:50:7b:06:00:d4:5a:fd:69:78:d9:f1:ca:0c:e3:
         92:dd:17:f3:c8:f6:54:34:79:14:6e:5f:4e:b6:30:82:83:0c:
         fc:0b:5c:29:3a:ea:35:11:0e:35:a6:a7:75:01:8e:d4:ec:9c:
         8e:65:70:94:b8:b8:75:62:76:c5:38:0f:41:27:fe:77:40:03:
         24:09:f4:fc:25:95:ba:c4:bc:d6:86:63:ea:03:33:f3:ff:bb:
         c4:20:63:c2:e3:8a:73:7a:66:20:59:98:e9:e0:ab:98:33:50:
         5f:63:37:82:12:4f:e4:5b:22:f0:19:a2:23:be:fe:81:04:8f:
         89:0f:a0:20:89:a9:e4:8b:3a:89:c6:bf:f2:0a:72:73:5c:9d:
         f6:39:e3:5b:e1:9e:6d:40:58:b7:26:4a:d4:38:a5:fe:d0:a9:
         33:5a:6f:51:a2:ec:09:6f:57:f9:22:f0:84:15:92:15:0b:9e:
         e9:57:93:6c:b1:3d:d5:bc:60:f4:7e:70:21:9f:c4:e7:ac:e8:
         3c:7a:43:51:74:ca:33:57:f6:e6:ea:49:7d:1c:87:3d:09:75:
         4f:5c:d0:de:a9:95:84:5d:d7:0b:ca:e6:9c:0e:6f:02:f8:09:
         fc:52:99:f0:30:36:1a:9a:81:80:63:2c:33:78:f6:75:48:99:
         13:47:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:39:56 2024 by rpki-client on console-ams.rpki-client.org