Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa
File:                     b4c87209-cc1c-34e0-924a-da969c75af3f.roa (raw, json)
Hash identifier:          mu/LvE4L2vgqr864v7qQtBFzcXarBOAmYeC4GJqEZ/Q=
Subject key identifier:   46:5A:DA:B7:56:21:95:AD:96:78:A0:37:8A:2B:2B:0D:34:90:9B:24
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F43285842097D7D1656C2CAD887474E80
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa
Signing time:             Mon 29 May 2023 01:00:17 +0000
ROA not before:           Mon 29 May 2023 01:00:17 +0000
ROA not after:            Sun 27 Aug 2023 01:00:17 +0000
asID:                     399883
IP address blocks:        104.247.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:09:7d:7d:16:56:c2:ca:d8:87:47:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: May 29 01:00:17 2023 GMT
            Not After : Aug 27 01:00:17 2023 GMT
        Subject: CN=640781e5-e336-496f-8858-f8062d39337f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:84:fb:20:f6:71:a8:d7:f0:de:b6:d2:05:
                    60:cc:ff:4e:e4:d7:48:8c:a4:d3:34:d5:bd:00:48:
                    7e:f2:e0:36:cd:f1:6e:5f:fd:70:dc:8f:f8:30:3e:
                    7f:82:03:ef:bf:d5:b8:d5:b8:9d:c9:e1:bd:04:42:
                    cc:80:9f:07:26:ff:d4:be:df:73:4d:a0:65:82:dc:
                    46:89:ec:c3:80:30:d6:be:39:a6:7a:b6:76:40:19:
                    34:bd:79:7c:39:23:83:b5:f8:c3:19:43:c5:ec:85:
                    ee:3b:94:b2:db:60:9c:a3:41:fe:90:85:60:1d:bc:
                    2f:98:c0:50:1f:2e:16:47:4d:25:87:f1:1e:7f:e0:
                    cf:c1:25:c6:57:33:40:77:c5:fc:fd:9f:35:7e:d0:
                    f8:34:3d:86:2c:1a:bf:34:31:28:85:20:a6:37:87:
                    59:a4:ab:93:dc:88:fd:8f:f4:1b:0f:34:14:c0:35:
                    f3:6a:ca:b9:d5:14:eb:73:26:27:92:da:18:ae:ec:
                    c6:25:a1:12:3d:9d:d6:b4:06:7a:d8:5e:67:ba:1b:
                    a6:fe:cf:aa:00:a2:3f:44:30:08:2c:22:5e:6f:ea:
                    9c:aa:3f:a6:61:b8:aa:bb:ad:73:d2:8c:e8:bc:e5:
                    6b:b2:11:2e:0c:13:6a:02:ea:a8:ff:a8:86:97:20:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:DA:B7:56:21:95:AD:96:78:A0:37:8A:2B:2B:0D:34:90:9B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:e1:77:48:81:39:3f:74:9e:74:36:c7:8f:42:24:41:fa:
         40:1e:6f:a9:d8:a6:f8:0f:2b:5c:86:d5:fd:42:95:49:a1:a9:
         c6:f0:69:75:7f:29:5a:22:5e:e9:fc:06:31:48:af:99:2b:ba:
         f3:f3:be:29:54:26:95:ac:c2:9c:c7:cf:49:a7:21:17:bf:b8:
         d1:a8:db:6d:50:63:37:ee:a3:a0:aa:64:e7:c7:c4:33:26:e7:
         fd:3a:7c:5c:a7:b2:22:3e:d5:14:c0:ee:c1:30:ef:b2:34:be:
         40:ba:b7:94:b4:21:9d:d4:7e:9b:b9:26:b0:f1:69:4d:ac:cb:
         5c:1e:df:7b:38:4d:c5:92:a7:8d:3d:ac:43:9f:63:87:99:01:
         d6:3e:69:e7:1e:f2:80:10:97:8c:ac:ca:d4:38:7f:7a:b6:53:
         53:26:f2:fd:75:11:cd:ab:da:38:19:58:7a:53:ce:a1:89:e9:
         33:af:2b:7d:d8:40:f6:48:df:15:a9:53:eb:59:3c:89:cb:e8:
         73:ef:e6:5f:3d:10:64:ed:fe:1c:d6:90:be:3c:ed:91:6e:96:
         67:82:23:57:fc:76:b8:60:fa:e8:1d:48:0a:fb:2e:6b:dc:dd:
         a8:21:4c:ac:96:81:40:34:b4:00:5e:64:02:de:e4:1b:a5:b2:
         f3:6a:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 29 01:54:09 2023 by rpki-client on console-fra.rpki-client.org