Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa
File:                     7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa (raw, json)
Hash identifier:          oElY0IlMgrrGmrzGwJSeNm9WSBZtVRB00AlBO1teuF4=
Subject key identifier:   1A:C9:F6:4E:6B:5D:C5:64:C0:F5:3C:96:2E:9B:BE:CD:DD:A7:CD:4B
Certificate issuer:       /CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb
Certificate serial:       010D0C9F43285845549818DE82F0114130212A00
Authority key identifier: A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        104.219.162.0/24 maxlen: 24
                          104.219.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:18:de:82:f0:11:41:30:21:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=23b826cc-f797-4c61-bc97-0daed6e2597c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:c2:ab:5f:49:b4:99:d2:5c:84:06:6c:14:
                    03:be:51:0a:77:66:44:20:77:0f:07:58:5a:ca:90:
                    54:f9:49:00:7d:88:a5:1e:5e:54:05:bc:9d:41:cd:
                    92:46:77:15:18:38:5e:3b:a6:1c:83:76:7b:ef:10:
                    4a:e0:ef:17:b9:f1:ae:6b:c2:0e:a3:bf:64:55:fd:
                    7b:4b:78:c6:0e:d4:1c:1f:49:a0:60:5b:ba:d9:81:
                    f3:7a:1f:cf:f4:f3:1e:65:71:96:7c:ee:eb:b8:5c:
                    37:54:62:30:7c:05:2a:d2:84:4f:11:c0:d4:86:42:
                    9f:9b:e6:ae:b7:d5:44:83:b2:e7:de:a3:df:3e:5f:
                    bf:9e:e9:0a:15:eb:5f:a2:86:1d:0b:43:12:04:be:
                    96:34:86:4f:02:08:e1:52:18:27:2d:c0:fc:c7:22:
                    c1:ff:f5:8e:81:f8:fa:a3:a7:b6:3b:3d:d3:7b:69:
                    a4:72:36:d2:73:1b:81:74:a6:15:f4:f2:ea:37:13:
                    05:4f:68:3d:6b:3a:3c:11:f4:a1:d9:47:05:b4:61:
                    7c:64:56:f1:41:87:b5:d2:27:66:23:6f:9a:a9:b3:
                    ab:e4:c0:d5:ea:83:a0:d0:28:d5:5c:be:77:c1:1e:
                    45:2b:ea:e7:fb:70:ec:a8:ad:9a:ac:8f:f6:85:6e:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C9:F6:4E:6B:5D:C5:64:C0:F5:3C:96:2E:9B:BE:CD:DD:A7:CD:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7fbfe8c7-1c1b-35c8-9e9c-ba7d62909d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.crl

            X509v3 Authority Key Identifier:
                keyid:A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:27:4b:32:90:bf:7c:9b:d5:08:95:c2:58:a8:13:a3:8c:b0:
         93:2e:95:b7:6d:2d:fe:5e:bd:dc:59:29:39:06:92:01:c7:f4:
         6b:d7:f6:d3:f5:2c:30:07:27:a8:96:a2:1d:9d:27:85:9d:e1:
         c6:04:d7:08:46:c6:99:ea:41:b8:ed:23:ed:ea:5a:1f:67:41:
         ca:36:0b:8e:93:24:a2:65:e6:44:ec:75:0f:41:c4:53:8f:3f:
         61:44:bd:ea:fa:15:18:41:21:df:60:23:b7:10:15:3e:00:7c:
         78:03:60:85:17:c0:ab:96:92:8a:0f:27:fa:44:82:ee:06:3a:
         9a:56:ab:28:42:be:82:ea:81:c7:d4:aa:ac:c8:ae:57:6c:c7:
         5b:15:1e:ce:f9:a0:46:75:70:63:d7:a7:41:55:dc:00:09:f2:
         79:ae:20:8d:5f:bc:61:aa:7d:66:90:d2:38:04:2b:20:dc:e2:
         cd:27:8d:a3:59:53:0d:ee:58:4b:c7:5f:0b:0d:b2:7e:7c:b0:
         96:fd:28:c0:ab:c1:6a:8a:7d:ed:d5:95:c0:c1:69:a3:59:da:
         1c:03:df:10:0e:1d:c2:9f:c3:45:8e:df:a9:02:a9:2e:2a:bd:
         d5:df:33:a0:11:e6:ea:79:42:08:0f:79:03:54:90:d0:cb:bc:
         c5:d1:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:52:02 2024 by rpki-client on console-ams.rpki-client.org