Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa
File:                     8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa (raw, json)
Hash identifier:          LKXtTLwyzx306DKCBH2DNbaalRPewe9Q8fsBk4FJO90=
Subject key identifier:   BD:16:7E:E7:8D:6C:DB:D7:91:9F:FA:0C:DB:25:FA:81:0C:AD:FE:E2
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285841E46C9C2ADD8B6DA4EBAAD480
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 30 Jun 2023 16:30:23 +0000
asID:                     1239
IP address blocks:        104.251.86.0/24 maxlen: 24
                          104.218.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:9c:2a:dd:8b:6d:a4:eb:aa:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 30 16:30:23 2023 GMT
        Subject: CN=8f49e923-a497-44b0-bebd-9325e2abc510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:6f:c6:ce:79:8c:e2:f8:29:f2:1b:e7:5c:
                    48:11:ae:81:41:8e:66:0c:7f:e2:c1:a1:fa:e6:dd:
                    43:5e:43:e9:bd:57:98:f2:e8:3b:31:c2:26:0f:ec:
                    39:45:66:e7:3f:4c:66:46:8d:b3:da:90:fa:f7:4b:
                    c0:29:cd:c1:99:37:3d:a2:91:d2:a2:b9:ee:57:c4:
                    13:e5:db:e3:6e:ea:05:08:e5:f9:a7:95:2a:6d:e4:
                    d9:b6:4a:f0:5e:f2:b7:88:d8:f0:88:8e:a2:94:b1:
                    84:6d:c5:cd:ea:a4:b1:86:bb:9d:24:c4:53:cc:6f:
                    ae:68:b3:62:e2:72:ee:d3:9b:f5:bd:a3:4d:15:a5:
                    80:4b:86:97:ec:ce:96:b5:16:e2:df:4a:9b:ac:9f:
                    e4:75:3f:5b:07:1c:72:e3:4c:aa:8d:3f:3f:fe:4a:
                    04:47:c7:fe:25:3a:a5:84:cb:36:4c:e7:fb:38:33:
                    56:47:71:bd:79:c2:75:99:ec:4a:01:06:84:06:bb:
                    42:f1:cf:db:0e:75:a3:87:0f:ae:32:0d:e4:c4:f3:
                    c7:4d:ac:2a:ef:ec:9e:a3:d4:e7:19:86:f0:df:fd:
                    df:7f:28:24:1d:29:3a:86:d0:ef:74:99:73:49:af:
                    9b:97:83:15:f3:ad:0f:c2:90:95:21:19:b4:a3:69:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:16:7E:E7:8D:6C:DB:D7:91:9F:FA:0C:DB:25:FA:81:0C:AD:FE:E2
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier: 
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.195.0/24
                  104.251.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a7:9f:b6:d0:3b:a5:4c:09:90:c8:57:41:8b:c8:de:46:ed:
         0b:12:fd:d2:54:5b:0f:00:2f:87:e3:5e:5a:df:4d:21:d0:ae:
         c6:6b:03:56:2c:3c:1d:de:13:ab:10:ea:14:ca:43:37:fc:f7:
         10:c7:65:c9:36:23:23:e9:4e:19:8e:93:31:fe:d7:07:ad:bb:
         5e:35:ab:d7:5f:17:c6:df:5f:f0:aa:d4:d5:d7:4f:10:0c:25:
         eb:7a:54:c5:33:1c:1a:13:24:4f:ba:66:f1:ed:b0:be:44:bb:
         56:19:c0:3d:61:54:c9:22:85:b1:fc:e9:4e:62:52:3f:1b:c8:
         a4:14:b2:48:00:d7:dc:8d:5a:21:67:62:d0:01:7d:f1:dd:1e:
         9c:42:fc:6d:65:d2:19:58:b1:77:17:0d:96:21:91:04:ce:4a:
         22:e1:59:50:6a:0f:3d:88:3e:45:7f:41:66:74:27:4e:27:4a:
         79:aa:a0:5b:23:d1:cf:28:b5:06:f1:98:0f:60:b7:80:e9:70:
         c9:6d:8b:6e:6a:71:3a:26:41:70:ef:ab:24:ed:a0:04:c5:85:
         11:12:8f:2d:e3:be:4d:c6:ab:c5:b4:a7:48:33:de:eb:33:5d:
         d4:a1:4a:04:cb:b7:85:a8:29:bd:0a:6d:11:ff:9b:dc:63:d7:
         6f:1e:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:57:16 2023 by rpki-client on console-ams.rpki-client.org