Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
File:                     af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa (raw, json)
Hash identifier:          tQ59mWb4GBzui8Fjhj0wezjhWEv7RRWf0E6ZmWhmGVw=
Subject key identifier:   CF:6B:C7:74:58:19:FD:E5:7B:75:C8:F2:35:48:90:1C:88:3A:72:92
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285844F46558B39451133FB193D0C0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     395092
IP address blocks:        104.36.228.0/22 maxlen: 24
                          2607:a680:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:58:b3:94:51:13:3f:b1:93:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=302a1367-20bd-485e-84fe-a98814140bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:fa:c0:25:a1:c1:4c:1c:56:a9:4c:d8:1c:
                    e6:eb:a9:9c:7d:3f:55:63:18:e2:c3:87:6c:ea:3e:
                    dc:b0:d0:65:80:7a:9c:6c:2d:39:bb:38:5a:ee:89:
                    1a:fa:74:6a:34:60:3c:66:04:53:8a:e8:6d:99:03:
                    af:f2:28:47:c5:b7:5c:51:ab:b0:eb:de:e9:f2:fc:
                    bb:e7:3b:78:4c:4b:d0:26:a8:24:8e:84:7b:0b:de:
                    45:57:6c:f9:24:2c:65:2c:48:e9:8c:b1:f8:4a:63:
                    58:da:45:50:ff:90:0d:b9:9b:ef:d6:63:ee:6d:1b:
                    d8:2e:5e:2f:0c:75:3c:79:32:fa:6b:c9:77:db:2e:
                    fd:1b:c6:4f:97:85:d9:f3:d9:17:e0:da:c1:99:3f:
                    fe:9f:2e:92:02:49:98:26:62:0d:20:cc:78:5d:39:
                    6f:50:91:d8:ed:e3:24:94:22:ca:c8:e7:a1:37:92:
                    6c:d8:f3:ec:54:88:1d:b9:36:a9:f9:ca:f9:17:55:
                    6f:61:61:b9:54:37:9a:16:3d:8b:a8:08:04:d3:47:
                    81:e9:35:10:40:44:7f:d5:bc:bc:76:bc:f1:5b:78:
                    c9:2b:2a:73:e7:08:90:9e:dc:c8:98:db:dc:74:67:
                    fb:2b:16:c2:b0:7a:2c:dd:46:fc:5a:ba:96:37:fd:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:C7:74:58:19:FD:E5:7B:75:C8:F2:35:48:90:1C:88:3A:72:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.228.0/22
                IPv6:
                  2607:a680:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:58:7e:60:1b:d4:fc:8d:ba:a4:74:eb:b5:ff:a5:48:d6:dc:
         77:83:69:8b:9c:d3:ee:a2:5a:55:8b:6c:b9:08:dc:b1:1f:a6:
         ba:2f:b6:68:45:02:fa:a3:de:7c:20:d0:ae:c9:6f:f8:c6:9b:
         7c:b0:d3:96:6c:e2:3b:91:44:de:91:fd:86:cf:22:c1:5b:bf:
         60:6e:10:aa:33:b4:93:21:ea:86:b0:35:f5:d8:fe:a4:ef:c4:
         94:dc:f8:a8:49:ec:7c:17:f4:fd:87:28:f5:9f:94:18:d2:bf:
         9e:27:00:34:09:9b:1e:50:d2:9b:0b:50:c6:15:6e:d7:2e:30:
         75:34:8e:00:ad:6f:7b:06:71:89:4e:ef:d8:c9:31:7b:21:86:
         4e:3c:c5:f1:dc:b2:e4:52:57:cf:50:f1:c1:fa:87:09:77:02:
         26:84:f6:c5:6e:46:ed:9b:3b:3c:bb:1b:75:96:4b:25:85:a0:
         09:3e:3a:9e:da:eb:7c:8d:5b:9d:a6:9e:33:f8:4b:a1:0d:1e:
         ff:e6:7a:4e:2f:ff:8a:62:01:7a:fc:ea:2d:31:e6:ad:a3:33:
         ef:70:51:b3:ec:c4:45:63:4b:0c:25:74:cd:40:36:45:1c:88:
         da:df:79:47:eb:20:96:14:10:35:d7:62:58:b3:74:3e:97:6a:
         02:be:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 02:10:04 2024 by rpki-client on console-ams.rpki-client.org