Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa
File:                     d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa (raw, json)
Hash identifier:          0Mip7d3enkQKQ0o45mQsvKDsvOD0UMqt+11v5/Uq+KQ=
Subject key identifier:   D6:41:79:1D:1A:16:F9:22:A7:CA:8E:DE:9A:96:8C:E0:9B:3D:C1:FA
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F4328584574A6AED99040FE2282F528E0
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa
Signing time:             Sat 06 Apr 2024 12:35:41 +0000
ROA not before:           Sat 06 Apr 2024 12:35:41 +0000
ROA not after:            Fri 05 Jul 2024 12:35:41 +0000
asID:                     26548
IP address blocks:        104.193.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:a6:ae:d9:90:40:fe:22:82:f5:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Apr  6 12:35:41 2024 GMT
            Not After : Jul  5 12:35:41 2024 GMT
        Subject: CN=d068fd57-f461-4964-a61d-d9056c55f4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:10:8b:8f:a2:df:a0:44:49:ad:fc:6c:40:
                    95:84:5a:1a:83:40:6a:70:dd:08:9f:79:8d:6c:e1:
                    06:29:85:98:40:13:14:83:35:a0:00:3c:81:fd:b6:
                    c1:e5:af:a9:bf:d5:a6:14:c7:3c:a6:a6:fc:ea:1e:
                    a6:13:17:f2:bd:d0:b2:d5:16:08:86:4f:f0:50:f6:
                    9f:1d:28:5e:0f:42:38:51:94:d7:bc:e9:93:98:71:
                    fd:19:79:21:db:66:51:78:49:23:55:cb:14:00:4b:
                    83:c1:75:7a:0b:bc:38:17:88:cc:85:c6:57:2c:d8:
                    ab:99:04:51:83:86:e7:3c:51:81:90:6e:40:c2:05:
                    3f:98:7a:4f:2d:60:5a:89:90:66:87:43:d9:3d:08:
                    29:6c:21:93:bb:bf:29:b2:9c:64:9c:68:01:6d:97:
                    ba:09:b2:87:93:cd:fd:41:16:b3:c7:5c:f3:5c:1c:
                    5e:01:3a:03:a2:ab:14:27:60:d2:24:59:b2:2f:3a:
                    c7:10:de:f1:2b:f2:5f:d0:97:6f:eb:32:09:05:28:
                    e6:e4:97:2a:44:dd:e5:4d:16:8c:53:4b:94:07:2f:
                    89:27:2a:9f:e3:24:01:1b:7f:5e:bc:fb:8d:e2:7d:
                    de:95:c2:43:c1:b6:5c:41:aa:d1:da:30:9e:cc:b2:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:79:1D:1A:16:F9:22:A7:CA:8E:DE:9A:96:8C:E0:9B:3D:C1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d948fac1-6ae5-3ea2-8a41-6f37b23ae80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:d9:c1:69:6e:3e:0c:a6:1d:f9:ee:75:f4:1d:df:4d:1c:
         d4:43:eb:37:9b:c0:23:88:89:b1:ac:4b:fa:04:1c:a3:dc:f6:
         6c:73:19:62:ca:66:9c:40:70:00:b6:a5:3e:7b:6e:cc:74:e1:
         90:f2:45:82:b8:6c:77:d2:d9:5f:34:cd:11:bd:d3:80:84:d9:
         60:4d:00:54:15:e7:e1:f6:97:2d:92:72:d0:b3:9e:d0:f8:d3:
         93:b7:b7:86:26:5d:46:5e:ff:0b:bf:73:db:83:49:07:50:e8:
         66:85:81:2e:f9:f8:e7:e1:f8:b8:0e:ef:d3:cd:c7:87:ac:56:
         22:eb:1f:af:35:88:a7:23:4a:f4:58:b5:e3:04:48:90:59:71:
         4a:b1:43:dd:83:dd:2c:14:63:2e:ca:a9:1e:1b:ac:b3:5a:32:
         11:ae:3b:1c:3f:7d:bb:da:ab:09:39:67:e2:4b:5e:2d:73:71:
         ee:46:8c:4a:3d:5f:2e:92:2a:84:26:a0:15:c1:57:77:34:ee:
         32:ed:ac:b3:33:7b:ae:09:bd:4e:96:22:d4:b4:d2:03:a6:be:
         c7:4b:b1:59:f2:8f:b5:43:bf:a3:05:03:f1:4a:be:1c:08:3c:
         df:5c:76:2a:76:08:c9:bb:d1:c6:72:42:6d:85:0c:52:a9:43:
         07:75:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:25:44 2024 by rpki-client on console-fra.rpki-client.org