Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa
File:                     b4c87209-cc1c-34e0-924a-da969c75af3f.roa (raw, json)
Hash identifier:          k0U6qUWjRxLCDxHBrXL5JTimxgdBwmAdaXLoccgxd8k=
Subject key identifier:   BD:C2:93:62:43:06:70:77:FB:54:86:12:35:DD:7E:C4:0E:19:81:8C
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F43285844A904DCC81D015F18F8968080
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa
Signing time:             Wed 24 Jan 2024 14:00:30 +0000
ROA not before:           Wed 24 Jan 2024 14:00:30 +0000
ROA not after:            Tue 23 Apr 2024 13:00:30 +0000
asID:                     399883
IP address blocks:        104.247.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a9:04:dc:c8:1d:01:5f:18:f8:96:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Jan 24 14:00:30 2024 GMT
            Not After : Apr 23 13:00:30 2024 GMT
        Subject: CN=2fbec287-a9af-471a-8671-12bd520914d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:c2:e1:b1:37:9d:12:d7:8c:1e:fb:05:d7:
                    c6:37:f8:9b:83:9a:34:d6:d5:9d:6f:35:ab:59:0d:
                    e3:10:3f:79:1f:62:79:5f:d6:50:df:64:97:8f:97:
                    c6:9f:cc:1e:ee:f8:40:bb:e3:b4:3d:b4:e1:52:00:
                    d8:5d:de:d1:b7:72:e8:64:2b:47:db:ff:7d:7c:00:
                    ec:df:f8:0b:3f:14:d5:1f:af:23:59:92:ca:7a:c1:
                    47:e4:1a:2e:28:bd:d9:03:68:05:50:29:49:0a:dc:
                    a0:f1:5d:be:65:18:92:d1:bd:8c:c0:47:c5:55:9f:
                    53:12:32:c0:3f:5b:10:a5:31:12:e5:bd:f9:93:e7:
                    bb:c6:d9:85:c8:b7:d9:87:04:15:4f:f5:6c:fc:12:
                    83:cc:7d:6d:46:65:d3:c2:5b:14:cd:ea:03:3c:72:
                    55:71:6f:f4:ce:ee:99:6b:6b:a7:6c:d4:7e:3b:d3:
                    03:d4:f3:fe:1d:26:ec:0f:c1:e5:d0:ad:78:37:c1:
                    a1:ad:23:5b:3d:c7:a2:35:f3:5d:4a:69:89:c3:0a:
                    27:d6:78:19:df:2d:f7:42:92:52:dd:f6:9e:2b:de:
                    bf:1f:50:f2:87:5a:84:1a:0d:76:c0:d9:1c:2b:03:
                    db:fd:ad:5e:43:f7:b7:4c:45:30:04:bf:ac:c9:70:
                    9e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:93:62:43:06:70:77:FB:54:86:12:35:DD:7E:C4:0E:19:81:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:05:02:18:c7:a2:8f:89:4e:91:fc:69:7e:54:3e:e3:ff:3b:
         78:7a:45:37:6b:b4:69:aa:d7:d3:38:62:77:01:cc:fd:95:6c:
         55:fc:88:af:75:07:1f:f2:d2:8d:27:75:a5:1c:6d:f3:01:ec:
         b7:24:55:03:98:6a:89:b4:59:fb:dd:a0:da:ac:d2:0b:f7:34:
         94:d0:54:35:83:88:76:1d:84:83:04:59:75:fe:05:94:dc:39:
         7e:be:1f:0c:bf:9e:f3:83:3e:e5:29:22:56:1a:56:82:71:27:
         c3:c4:1f:9d:7a:49:bf:34:1d:87:cb:a4:19:71:86:c1:01:ef:
         76:d6:bb:b4:58:80:3b:f3:cc:1d:aa:f6:a1:2c:b2:fd:06:71:
         23:42:1e:dd:83:c3:97:64:5b:5a:ed:6c:4b:84:ce:22:11:5b:
         14:93:87:12:01:c1:e3:d0:e3:80:b0:58:62:6f:88:dd:b6:fb:
         bb:2b:f7:1d:54:99:d9:83:72:75:49:95:fc:ba:22:00:bb:83:
         8d:3e:ca:91:67:98:d7:b1:78:6c:3b:aa:15:85:83:7b:41:86:
         60:4d:99:a9:e8:8e:58:de:fd:15:12:aa:d8:fe:b5:df:ad:bd:
         0a:fb:a5:7b:8f:83:09:50:1a:f7:f2:33:1e:2b:44:aa:b2:0c:
         1d:01:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:54:17 2024 by rpki-client on console-fra.rpki-client.org