Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
File:                     0a661bd3-50cb-3aaa-b872-5572157cf927.roa (raw, json)
Hash identifier:          OGu8qV4e88H68hyC8MhROuJpG5RjOcZSl2Nm1BXe+dQ=
Subject key identifier:   CA:82:5E:6B:FB:CB:14:14:B5:49:10:6F:AF:88:57:68:26:32:02:DB
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584789EBF42E2AA52ABD095E0040
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     11325
IP address blocks:        104.251.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f4:2e:2a:a5:2a:bd:09:5e:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=14b1aef8-0c1c-4b4d-9b80-7e4b4a27a09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:a5:4b:5d:38:f6:c3:85:3e:5f:83:cc:fa:
                    eb:38:36:61:36:9c:b2:e9:2d:29:8b:74:49:d2:0f:
                    24:89:9a:0e:8d:58:9e:2b:e3:24:c9:8e:01:a0:61:
                    ab:ce:c7:a0:63:53:ba:13:d8:a4:a1:5e:c2:09:ac:
                    68:e1:35:2f:6c:8e:5f:be:b7:92:14:10:63:dd:1a:
                    9a:8a:08:cc:d8:48:08:ff:d4:ae:70:81:bc:56:0e:
                    75:c2:38:82:c8:6b:72:b2:b6:e0:62:40:43:31:75:
                    23:b3:55:3b:93:b4:a1:d3:8f:8d:7f:3e:93:f9:17:
                    38:4e:b1:6c:e5:68:ad:03:b1:65:03:65:e0:e6:d3:
                    79:17:10:39:92:17:05:38:5a:12:e3:af:be:0c:b6:
                    dc:3e:bb:3c:52:e1:fa:9d:94:37:78:b6:4d:18:22:
                    55:81:c9:92:01:7d:40:8e:34:0c:3f:4e:22:45:75:
                    61:6b:59:ba:90:07:c8:2d:8a:d1:a6:16:49:78:a7:
                    a2:1b:61:64:38:24:ec:19:41:8e:88:f4:e5:f3:a6:
                    09:3a:c6:81:a6:39:3a:4e:f9:88:0e:5c:c9:47:26:
                    06:fa:01:8e:4b:e2:8a:2c:8e:f5:cf:ae:c1:57:2a:
                    91:c3:5e:cb:c0:f3:bf:4b:16:21:fd:eb:93:bd:57:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:82:5E:6B:FB:CB:14:14:B5:49:10:6F:AF:88:57:68:26:32:02:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:c6:6b:7e:84:cc:17:3a:f8:87:a6:9e:64:46:02:0c:c5:
         7a:18:73:bf:ed:a8:1e:3d:32:19:73:2b:68:94:cc:4c:4e:bc:
         9b:fd:5b:4f:7d:b5:66:81:bf:d2:8c:c2:af:c5:ae:88:3a:f9:
         0f:b6:00:35:15:ee:ae:d8:2d:3b:da:53:12:68:f1:d4:13:40:
         ed:0f:95:95:ba:4e:90:d4:08:33:4f:a8:dd:f9:3b:88:50:21:
         20:ef:e7:38:54:98:95:a6:f0:b3:d4:0a:4e:0b:07:75:0f:b7:
         53:51:fa:d8:32:fe:7e:06:c9:78:c5:f0:75:17:84:69:b9:cd:
         2b:12:2d:c4:08:26:a4:7a:80:15:b9:66:5e:0f:73:ce:7f:4d:
         dc:99:f0:a7:7a:19:b7:f9:95:06:14:23:d4:e5:a3:66:4b:fb:
         6e:cd:03:e1:d3:5f:67:00:79:83:c5:de:0d:10:f2:c5:76:4f:
         64:bf:fb:b7:2e:9b:7c:12:89:cc:3b:d6:75:44:ec:e3:c0:88:
         43:6a:e7:05:d8:ea:b6:b3:4f:d8:49:4e:18:22:89:d3:44:4d:
         d3:7f:a3:4f:71:dd:4f:4e:cb:11:33:cc:45:90:45:c2:be:ad:
         05:b1:57:c7:73:ce:b5:fb:95:83:83:36:bc:94:f5:dc:6b:7a:
         80:04:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org