Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
File:                     472b8477-15d6-33d4-b0d4-4c577d494c08.roa (raw, json)
Hash identifier:          75KaDxYnHUCsssj+LcoZ+vSJt3Zyl2hzjPoD2aoMOlc=
Subject key identifier:   03:02:23:3E:80:52:2D:A7:03:2A:82:56:61:54:9E:4C:73:26:44:D3
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584570830A25239675DD52E40000
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     9312
IP address blocks:        104.245.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:0a:25:23:96:75:dd:52:e4:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=298c9b07-efd9-4001-98fc-9489bacc3b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4d:80:dc:76:b2:e8:0c:29:de:80:9a:95:9f:
                    f6:11:b8:ed:5a:20:d2:d7:cb:f6:0b:0c:bb:59:3d:
                    af:5e:fa:2c:1a:6b:5a:db:a0:9e:4d:1c:d5:e8:87:
                    0b:50:9a:d8:1b:63:79:88:9e:d7:4b:e2:63:6c:23:
                    d5:49:22:81:39:98:f5:7e:af:c6:a8:25:4d:8e:37:
                    84:4f:28:dd:2d:d1:99:6b:8a:e0:a6:86:5f:43:e6:
                    03:41:29:84:ee:bf:28:8d:c3:e6:c2:02:c4:a0:d9:
                    00:60:29:ef:c0:42:4b:44:b7:bf:9a:b5:61:d7:1c:
                    92:d1:eb:af:4f:d0:a8:7f:0d:c8:27:4e:19:d2:64:
                    45:26:e6:f9:0d:b3:b8:8f:5d:22:90:b4:ca:02:cf:
                    1c:74:6f:25:0f:e7:10:43:7b:44:5c:03:e3:d4:8e:
                    e2:c4:0d:ae:ad:66:2f:80:e5:f3:27:90:62:c9:3a:
                    37:d9:96:bd:21:d3:5f:dc:bf:e8:02:d8:a6:17:ea:
                    88:ba:81:ef:0a:45:a4:20:dd:a8:d5:e8:7a:bb:df:
                    18:d6:9d:89:53:2e:41:8f:12:a9:47:5e:11:a8:8a:
                    90:c5:a7:2d:80:1b:85:89:4d:ce:f1:89:f2:a2:74:
                    78:e8:a7:c4:e4:c2:02:4f:b4:f2:e3:36:96:6d:24:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:02:23:3E:80:52:2D:A7:03:2A:82:56:61:54:9E:4C:73:26:44:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ab:9e:4f:6a:1d:64:a8:2a:21:3f:7c:01:b9:6d:32:3e:75:
         df:5c:05:5b:5e:12:8d:3b:a5:c9:69:2c:65:27:11:9f:57:51:
         c3:ab:11:ae:a4:df:15:c0:05:9b:13:3d:47:8b:7b:15:7a:00:
         9f:cc:67:7b:8c:45:f7:59:3c:98:99:36:f0:06:68:d5:ce:9d:
         8b:4c:6d:e3:01:76:c5:7d:47:9a:34:eb:7c:3b:9c:45:19:f8:
         bf:1a:af:04:9b:49:61:28:89:5d:67:e2:7b:4b:ad:42:d4:be:
         39:d6:fa:4a:e5:88:49:3b:01:2a:24:ed:9e:bf:2f:19:75:3b:
         2f:04:59:a7:a2:57:3f:b0:22:ca:50:7f:88:14:9c:70:fc:d7:
         8a:c2:59:e8:96:8b:75:eb:46:c6:94:6b:7b:57:92:b4:f8:8c:
         c1:a7:4e:0e:ce:52:4c:3b:1e:66:b2:13:ec:da:d1:b4:43:1e:
         66:2d:34:72:9e:09:92:20:f3:23:e7:ff:d0:15:9e:27:a6:a4:
         71:23:22:fa:d2:2b:a8:01:58:a2:85:c7:da:ae:b3:6f:8c:63:
         b8:0b:af:85:d2:a6:ed:9f:a2:49:d7:af:84:82:09:b5:f6:61:
         f7:37:85:d4:ce:aa:f3:93:eb:b7:a0:31:2f:53:bc:58:b3:04:
         20:4e:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:11:13 2024 by rpki-client on console-ams.rpki-client.org