Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cff2cf80-a820-37e5-b14a-982256958ee0.roa
File:                     cff2cf80-a820-37e5-b14a-982256958ee0.roa (raw, json)
Hash identifier:          qmnGV5TG5HwGLFcdtzK/g7WQwE5gBKkV7n8MF/WLjoo=
Subject key identifier:   78:B6:63:54:B5:D0:E9:8B:71:A6:DE:F6:0D:7B:C9:9B:B5:4D:EB:E3
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285845A428CE197A6B3415795E1980
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cff2cf80-a820-37e5-b14a-982256958ee0.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     7018
IP address blocks:        103.4.250.0/24 maxlen: 24
                          103.4.249.0/24 maxlen: 24
                          103.4.248.0/24 maxlen: 24
                          45.117.54.0/24 maxlen: 24
                          103.207.46.0/24 maxlen: 24
                          103.196.8.0/24 maxlen: 24
                          103.81.231.0/24 maxlen: 24
                          103.49.155.0/24 maxlen: 24
                          103.4.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:ce:19:7a:6b:34:15:79:5e:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=16cfe9dc-1268-46de-b613-9df5e7ff289a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:0e:f7:5c:12:cc:58:77:4b:e6:03:33:a3:
                    dd:12:ce:62:85:77:03:6a:df:21:73:c9:c4:9b:7f:
                    d8:22:f3:cb:67:45:04:e2:47:3f:6f:e1:f6:47:1d:
                    1f:53:22:fe:fe:f7:0f:7e:ba:72:0b:7a:b8:ce:42:
                    b2:4c:2f:3f:3c:b5:f4:a0:33:74:82:dd:e4:f5:19:
                    7b:c2:fa:62:d6:ed:8f:a9:45:85:64:20:a2:19:e5:
                    10:3b:c5:a0:e4:f2:05:85:b7:7a:ce:6d:f9:e6:fc:
                    b6:1b:08:d5:48:95:a5:b6:46:c7:be:43:af:fc:18:
                    2f:c1:45:f9:1b:74:1e:95:b7:fb:ad:9c:ff:95:3f:
                    ab:06:0e:31:1c:8e:d8:d4:72:79:18:16:ad:e5:14:
                    ba:62:d6:0f:11:c5:35:52:ea:d5:4e:43:79:a9:92:
                    36:c3:10:8e:41:ea:7b:94:fe:9f:b6:c9:9d:ff:83:
                    f8:7b:fd:a1:d6:54:3a:78:9c:2e:c1:91:ca:b7:7b:
                    0d:09:e2:f6:38:ab:4c:be:4c:db:8e:2d:d4:80:a1:
                    54:f0:09:5e:d1:f9:c4:d9:da:6b:0e:ae:07:68:2d:
                    31:c8:b9:a4:e2:b0:62:82:e4:a0:4b:c3:83:6c:4a:
                    bf:d1:41:70:29:ff:b9:0f:52:c4:78:80:e9:84:07:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B6:63:54:B5:D0:E9:8B:71:A6:DE:F6:0D:7B:C9:9B:B5:4D:EB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cff2cf80-a820-37e5-b14a-982256958ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.54.0/24
                  103.4.248.0/22
                  103.49.155.0/24
                  103.81.231.0/24
                  103.196.8.0/24
                  103.207.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f3:8f:13:06:d6:46:9e:c3:22:d1:1a:82:68:1d:bf:20:35:
         cc:0d:20:ad:72:28:0f:6e:a0:1b:81:4d:72:56:dc:ea:ec:a1:
         9f:cd:cc:ae:90:fa:95:ae:f0:f4:67:54:7e:27:a9:fb:b4:36:
         ad:c2:6c:f4:47:2f:f0:c9:18:a5:c8:19:41:f4:22:0c:41:a7:
         2c:e0:ff:65:c7:02:62:79:4f:9d:39:f2:df:a6:bd:c7:54:bb:
         00:e6:e5:be:90:e1:36:55:84:ba:8c:b9:e1:80:2c:dc:9e:bf:
         f6:09:64:7b:e3:37:85:44:96:02:72:80:46:30:ba:52:02:a6:
         43:bb:17:b6:32:eb:70:62:93:de:0f:c1:61:db:6e:f6:35:49:
         71:cb:bb:1a:90:76:3d:a6:ea:73:d7:70:4f:d5:48:42:d7:be:
         53:ee:ce:d2:12:64:a9:da:35:f0:a5:8f:67:36:bb:79:77:04:
         78:be:2e:4d:fa:4b:a0:79:bb:29:6b:31:f4:8d:4a:02:b2:21:
         8d:3e:94:af:ef:b3:77:1d:32:06:29:0b:56:9a:53:e5:c5:eb:
         3a:ad:2f:66:27:99:05:58:42:f6:e0:3b:47:5f:ff:9e:e2:35:
         1c:1b:4c:2e:82:8a:ab:4f:12:a4:86:1a:d8:ca:4c:f3:78:e5:
         dc:30:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:10:03 2024 by rpki-client on console-ams.rpki-client.org