Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa
File:                     3c3380ea-82d4-3054-9c73-9089c1d05edf.roa (raw, json)
Hash identifier:          72ZmdQIGpwTYMAmnjDswr5YIbrBfQnMWKJ3Y+gbIrrc=
Subject key identifier:   06:65:EC:13:48:BB:F0:0D:E6:70:51:3E:E6:A8:BA:AF:95:D1:B4:26
Certificate issuer:       /CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60
Certificate serial:       010D0C9F432858457FDDDF270889119E0A273E80
Authority key identifier: 30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     19116
IP address blocks:        104.245.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:df:27:08:89:11:9e:0a:27:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=882fec7c-af37-4874-9dd0-adcc7a80992f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:f8:3a:13:da:cc:48:fa:75:9c:38:16:27:
                    65:01:72:65:a5:3f:37:4b:ee:d9:03:89:ea:27:91:
                    cb:0a:c8:85:be:20:28:e2:3c:a9:a6:00:56:fb:89:
                    ea:2d:73:df:75:8d:ad:72:1f:2d:32:05:6e:80:ff:
                    26:cd:3e:fd:99:a9:dc:e0:3b:5f:8e:d8:a7:3d:b7:
                    18:56:ed:f9:7b:02:36:9d:d0:41:69:41:f7:db:73:
                    63:e3:6e:b7:0b:29:e2:6f:bf:64:da:fb:7a:e1:ae:
                    78:47:e5:7d:7c:34:87:12:d0:44:62:e5:39:49:29:
                    23:17:99:50:94:ff:5d:ae:6d:cf:c5:57:c7:0c:45:
                    c5:99:b8:f8:e7:de:a6:d8:7e:d3:3d:58:00:4e:fd:
                    05:28:60:7e:16:bb:a0:6f:4d:05:6f:e6:05:2a:5c:
                    60:84:68:9b:ca:19:bc:98:0b:7c:6e:00:a0:ff:f3:
                    4c:db:57:0c:b0:94:7a:05:57:38:88:6d:d9:d7:e0:
                    9c:08:3c:b5:40:b7:bc:eb:8b:a5:20:c1:1b:c1:f6:
                    0d:ed:69:d5:4b:92:64:c6:74:e8:20:60:a7:73:33:
                    50:23:8a:77:ac:b7:44:ef:fb:19:77:5a:48:87:ac:
                    dc:3a:e0:b6:62:0a:bc:e5:45:41:5a:68:6d:23:94:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:EC:13:48:BB:F0:0D:E6:70:51:3E:E6:A8:BA:AF:95:D1:B4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl

            X509v3 Authority Key Identifier:
                keyid:30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:47:69:de:d5:0b:4e:3b:f9:ac:94:2d:80:76:4a:8d:bc:2a:
         5b:b1:45:03:b1:c6:69:2b:fa:79:a6:e7:fb:be:eb:16:4a:16:
         3c:60:22:49:50:52:05:b2:fc:53:bd:22:86:c1:07:81:12:ed:
         18:8e:24:5b:b1:f0:77:90:05:0d:34:98:f0:55:ae:27:13:2a:
         56:88:89:4a:5f:be:53:ed:7a:45:5d:27:47:44:ee:36:48:34:
         23:fb:f7:8f:bb:c0:d4:6c:de:2a:ef:30:59:e3:e2:28:1a:b6:
         6a:a3:69:37:e8:8b:16:43:80:40:37:3a:01:1e:e8:f0:dc:df:
         ac:a6:a3:1d:2e:c3:64:af:32:86:c6:3d:40:24:77:78:8f:90:
         27:c7:24:82:40:26:44:89:0e:41:9f:ab:0b:98:37:08:55:4b:
         5d:e3:19:57:04:b3:d9:86:28:8b:34:27:21:9a:48:45:6f:64:
         7e:42:23:57:cc:2f:85:bb:6c:48:65:c3:61:ff:fd:53:31:0c:
         66:f3:39:b9:ca:da:6b:9f:a5:9b:31:1b:90:84:84:7b:bc:cb:
         f7:3d:7d:ad:11:16:73:2d:d2:69:98:e7:5a:e2:38:4b:aa:cf:
         73:e5:3f:0a:89:43:01:67:e0:3e:83:c2:e1:b2:10:34:3c:16:
         1a:af:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 23:40:19 2024 by rpki-client on console-ams.rpki-client.org