Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/2e52089a-df73-39d5-890f-0d664469f969.roa
File:                     2e52089a-df73-39d5-890f-0d664469f969.roa (raw, json)
Hash identifier:          SGRymnBevrzfOPAchIoyQpKJJi5Al7CAB0q3gYiC7Xw=
Subject key identifier:   76:84:5A:00:E4:4D:4F:52:55:38:AD:17:62:44:44:7D:BC:39:C2:EA
Certificate issuer:       /CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
Certificate serial:       010D0C9F43285844CBEBADF31F848C4B59B38080
Authority key identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/2e52089a-df73-39d5-890f-0d664469f969.roa
Signing time:             Tue 06 Feb 2024 02:00:26 +0000
ROA not before:           Tue 06 Feb 2024 02:00:26 +0000
ROA not after:            Mon 06 May 2024 01:00:26 +0000
asID:                     400260
IP address blocks:        104.232.0.0/24 maxlen: 24
                          2602:fcac::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cb:eb:ad:f3:1f:84:8c:4b:59:b3:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
        Validity
            Not Before: Feb  6 02:00:26 2024 GMT
            Not After : May  6 01:00:26 2024 GMT
        Subject: CN=c44c0f47-8989-4a8c-b36b-55ad361ba2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:b3:02:10:0b:f2:4b:af:8f:97:42:2f:4b:
                    b7:94:38:e5:51:1a:ab:cb:14:bb:01:ba:6a:13:57:
                    b1:99:3b:36:b1:91:98:00:58:e9:f9:cc:e2:a1:95:
                    91:5c:00:92:cb:3f:62:89:60:46:f0:e9:9d:d6:42:
                    28:2a:ab:7b:07:c6:fc:c9:e0:5b:08:2f:8d:6c:5c:
                    78:5a:01:4f:f6:1a:30:5e:e0:34:c9:6e:5d:2d:a3:
                    13:05:ee:f1:5e:82:05:88:9c:2a:e4:35:e1:17:d5:
                    60:9d:4d:26:01:e3:f5:8d:dd:9c:96:67:64:29:d9:
                    48:d5:d2:ed:b7:6e:a7:13:0b:b0:91:17:9e:38:c4:
                    30:f0:96:47:36:4a:d7:bc:fb:e0:aa:8a:ad:f0:98:
                    4d:70:49:eb:38:f9:98:d3:3b:58:0e:5c:5c:b4:b5:
                    0d:3a:00:64:37:aa:2c:42:4d:95:1a:c3:40:a5:22:
                    eb:1a:47:69:50:36:c0:4b:6d:2c:19:3a:83:2e:52:
                    32:d3:d5:34:d4:91:d6:99:89:bc:a6:e8:06:a2:94:
                    9f:44:df:70:bd:64:bb:7d:60:a9:f5:29:a6:f8:42:
                    15:66:87:0e:f5:b3:c9:c0:79:86:33:8b:65:7f:57:
                    77:e4:f8:bb:d4:0a:f5:b5:2c:52:54:53:81:03:b6:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:5A:00:E4:4D:4F:52:55:38:AD:17:62:44:44:7D:BC:39:C2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/2e52089a-df73-39d5-890f-0d664469f969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl

            X509v3 Authority Key Identifier:
                keyid:3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.0.0/24
                IPv6:
                  2602:fcac::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ef:88:55:dc:92:4b:08:03:4a:0f:63:5c:0e:24:b4:82:1f:
         fa:81:e1:42:75:c2:70:ea:d3:6e:64:c0:a6:92:25:7b:83:d4:
         30:b4:48:e9:f5:be:8d:26:c2:e4:e4:7a:0b:19:aa:7f:28:11:
         74:cc:93:81:ed:94:3b:39:0b:7d:be:1f:84:d8:fa:b8:c2:c6:
         8a:65:40:c0:26:e2:4a:a3:f8:65:40:8e:e0:1d:9f:02:d4:c8:
         9d:af:73:3a:c5:85:be:4e:96:ac:db:6a:2c:6a:b5:59:99:82:
         8f:c9:b3:ce:fa:89:22:58:b8:30:24:b0:51:93:50:38:19:11:
         0d:21:4e:aa:d4:da:5a:c1:1c:e8:16:ca:2c:bd:03:2b:9c:c9:
         f7:5c:5e:aa:d7:4b:5e:cc:82:af:56:3f:22:3d:1f:53:09:91:
         a2:3d:46:86:0f:1a:4a:bb:2d:30:e9:e2:f3:94:3a:2c:79:4b:
         22:db:4d:b0:4e:62:b4:5a:13:a2:74:a2:46:d9:94:54:12:f1:
         40:09:c9:8c:f9:ad:8d:16:64:6c:f2:f8:4b:5a:2b:f5:4e:7a:
         a1:2a:f2:0c:9f:49:a0:74:10:ae:ab:10:7d:c2:bc:b1:6c:b1:
         16:02:af:5e:4b:7b:61:75:71:04:84:77:b7:93:5f:60:a2:e3:
         ee:5f:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:21:55 2024 by rpki-client on console-ams.rpki-client.org