Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/46d08b52-dc7e-3ec8-abae-7d0377d638d3.roa
File:                     46d08b52-dc7e-3ec8-abae-7d0377d638d3.roa (raw, json)
Hash identifier:          tYL427qHfSCVwKnkBqhOmfzAZC49wN37o15NIYVL0Jo=
Subject key identifier:   69:DE:D4:B3:88:F1:2C:33:CC:8A:D0:B9:A1:63:2B:20:C3:77:77:F9
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F432858459F860493F8E1363F64A4E0E0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/46d08b52-dc7e-3ec8-abae-7d0377d638d3.roa
Signing time:             Sun 21 Apr 2024 21:09:38 +0000
ROA not before:           Sun 21 Apr 2024 21:09:38 +0000
ROA not after:            Sat 20 Jul 2024 21:09:38 +0000
asID:                     18779
IP address blocks:        104.223.4.0/24 maxlen: 24
                          104.223.49.0/24 maxlen: 24
                          192.161.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9f:86:04:93:f8:e1:36:3f:64:a4:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Apr 21 21:09:38 2024 GMT
            Not After : Jul 20 21:09:38 2024 GMT
        Subject: CN=0bd953b8-345b-471e-9811-1fc1adc5f1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:46:e5:c5:bb:17:db:a0:e4:b8:fa:a8:df:
                    61:ab:06:b6:10:28:00:26:c8:b5:58:3f:0b:03:ea:
                    60:8d:3a:87:29:27:02:05:72:41:2f:e0:01:18:53:
                    87:c4:1b:4c:61:eb:69:9b:98:6c:69:5d:b3:e0:ff:
                    0d:40:d3:4e:02:c9:dd:11:9f:7d:80:44:ce:7d:ac:
                    98:ce:62:9b:88:a3:eb:e7:93:10:46:20:7d:ff:7f:
                    fd:b0:59:3f:45:4d:0c:1b:7a:58:44:d5:d9:99:3d:
                    e5:35:ae:23:00:b3:89:f2:4f:a0:9a:58:52:72:ad:
                    91:6f:d1:30:5d:c4:6f:db:dc:db:39:16:7e:32:e4:
                    19:9e:b1:a5:8c:a8:5f:84:e4:eb:6b:21:fa:64:28:
                    fd:d2:a1:e7:69:6b:ea:b5:47:29:f1:03:f7:62:43:
                    06:32:c2:77:1e:9e:cf:e1:80:fc:44:d2:0a:3c:ef:
                    17:5d:00:3e:7f:9e:bb:52:2a:61:68:11:34:51:ee:
                    26:f5:19:b3:a7:25:45:a3:01:b8:bd:df:aa:9f:81:
                    96:f5:6a:14:43:5a:51:08:cf:17:e3:e1:25:89:38:
                    40:1b:1b:f2:f4:14:46:f7:be:a0:d3:34:e1:1c:d7:
                    81:0d:f3:8c:79:cd:01:ca:a1:18:09:8d:d9:fa:aa:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DE:D4:B3:88:F1:2C:33:CC:8A:D0:B9:A1:63:2B:20:C3:77:77:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/46d08b52-dc7e-3ec8-abae-7d0377d638d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.223.4.0/24
                  104.223.49.0/24
                  192.161.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:e7:d5:ed:2f:43:93:f3:bd:97:c2:c5:97:d2:ba:b0:82:
         27:24:a9:9c:eb:ae:49:08:ae:57:36:68:c3:70:4c:7a:28:f2:
         aa:42:43:1f:e2:cc:95:03:84:20:0a:5d:53:ef:c8:20:6c:c6:
         05:3c:19:71:57:02:15:de:ae:46:2a:07:0f:d4:7b:ec:80:81:
         44:68:eb:c1:1b:a8:41:08:44:7c:2c:c6:1a:8c:00:b2:bc:be:
         81:3a:6b:16:34:1a:6d:a6:3e:13:86:0d:59:8c:0c:56:6d:f1:
         75:e0:19:93:c8:77:a8:e6:9f:63:32:2b:d0:33:2a:74:f3:6f:
         0e:82:dc:80:12:8f:de:4c:53:e3:02:39:fb:52:a8:ad:6c:0a:
         b3:66:86:83:b9:21:b5:83:e2:96:85:f7:da:8c:b9:64:78:ba:
         c1:36:0e:64:7c:b0:23:c4:67:94:d5:fa:46:4d:96:3e:26:80:
         b6:99:e0:71:8c:57:01:79:4e:91:4b:10:92:58:96:7a:37:dd:
         2f:de:e6:b9:e1:50:2d:12:43:9b:2a:d4:59:1b:52:1c:c6:6b:
         5b:dc:3a:80:8c:a1:fb:af:10:cc:93:17:2a:c5:19:2e:f5:6d:
         23:1b:f0:8a:2f:48:84:53:0b:63:85:c2:7f:9b:cc:ee:57:2e:
         c3:10:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:24 2024 by rpki-client on console-fra.rpki-client.org