Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
File:                     2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa (raw, json)
Hash identifier:          9Y8qewVGRNU90oglphZhPn3iYmbAaVs5ii/bhDSWwNw=
Subject key identifier:   A9:64:5D:85:5A:1E:D2:C5:51:0B:0D:C6:37:D2:A3:68:7B:E4:01:DD
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858450ABAD1B55B2F6196C67B0AC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     36829
IP address blocks:        104.156.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d1:b5:5b:2f:61:96:c6:7b:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=1286d7a0-0670-48b2-af06-7012b5e54664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:f6:c5:f1:26:89:bc:17:04:40:71:0b:c0:
                    a5:03:05:3f:6b:eb:a9:41:a0:58:99:26:98:dd:9c:
                    76:44:25:81:ce:4e:b2:1d:41:b7:78:6a:22:a4:f6:
                    f4:35:58:fd:69:ab:18:26:69:cd:e7:42:ce:bc:e7:
                    a6:7c:2c:35:91:e8:63:48:5a:77:2e:24:12:3d:d2:
                    cf:7e:8f:4b:52:e1:4d:a9:0a:63:31:48:c7:fd:15:
                    2c:3c:bf:1a:2b:29:2c:99:78:e4:6d:43:2c:2e:46:
                    ea:d1:ae:0e:9a:4d:51:38:b7:3c:51:a4:94:7b:54:
                    28:ee:f8:ed:01:e0:d5:db:fa:e1:97:dd:32:d4:40:
                    57:e7:13:b7:5c:00:2f:ec:4e:5a:5c:df:ae:92:4f:
                    f3:aa:6e:d9:b7:1d:36:d8:d5:ab:6b:ac:f7:36:61:
                    49:25:cb:8e:3f:03:ee:0e:3a:cf:95:77:d1:e9:82:
                    f7:32:b0:c1:41:95:71:d5:86:20:37:97:f8:45:30:
                    9f:4d:db:39:25:d6:f3:ff:c3:29:10:72:2e:fb:76:
                    87:48:71:a9:aa:5b:80:cb:96:b6:2a:64:dd:d7:ae:
                    08:6f:41:b9:67:17:90:df:c4:54:de:d1:75:1a:14:
                    d7:cc:f0:8b:65:38:7f:10:6b:1b:a0:f2:92:ce:f6:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:5D:85:5A:1E:D2:C5:51:0B:0D:C6:37:D2:A3:68:7B:E4:01:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:a0:1f:df:7b:46:a5:58:9a:32:07:31:fb:d1:3e:cb:c2:
         95:3b:18:c6:d1:67:6e:a3:ea:34:fa:f9:8f:a1:78:1a:eb:bf:
         9f:ea:bb:0b:a8:b4:08:a9:73:93:b0:8f:ca:86:92:b7:2f:63:
         ff:16:51:e3:7e:3a:af:31:ce:2d:da:68:8f:33:ce:80:11:8e:
         6d:6d:35:bc:80:31:0b:43:58:3a:15:da:3d:e2:df:f8:06:38:
         c6:ad:3f:da:67:8c:d9:0b:0a:19:f0:81:f2:e8:3c:92:72:97:
         f6:82:f5:ce:f5:c3:7e:00:b8:7d:0c:7a:2c:28:68:ee:4f:02:
         b0:1d:40:e2:a6:47:8f:c8:08:9f:1f:66:7e:1e:bc:3b:6f:18:
         05:74:3f:05:9d:48:29:ce:e3:b8:b1:2a:dc:29:b2:88:83:bf:
         f1:b1:a0:c6:79:82:82:3f:79:c6:33:a1:41:66:1b:28:04:43:
         6f:c5:dc:5f:d8:37:48:73:1a:df:8a:e7:ba:7e:ca:90:7b:ec:
         a4:33:e5:98:a3:dc:81:e6:a5:0d:07:02:2f:05:d4:63:d3:5f:
         92:89:27:60:99:8f:57:8d:bd:28:1f:46:d8:5c:28:9b:23:d9:
         cb:44:e5:24:be:a7:a0:82:32:ca:60:3f:ce:5e:7c:db:05:cb:
         80:91:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:32:24 2024 by rpki-client on console-fra.rpki-client.org