Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa
File:                     af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa (raw, json)
Hash identifier:          N/Ol23EMtGZ6Eg6gMo8C/3h7mFoWmVmXDQBqFnRzEsQ=
Subject key identifier:   44:F7:FC:CF:51:9D:E6:43:68:04:76:5A:8C:A1:7E:86:C8:11:C6:01
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F43285844FB600EB8C81D945DDB94E680
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     20303
IP address blocks:        104.251.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:0e:b8:c8:1d:94:5d:db:94:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=fec6809c-bcce-4e24-b3aa-b7a92731d044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:dd:03:8a:ed:b2:06:01:c2:cf:8d:06:69:
                    8d:1c:a2:72:02:51:10:93:e4:61:b5:1c:d2:72:da:
                    17:98:43:fc:0c:1d:f9:3d:cb:68:7d:ad:c4:6d:7c:
                    bd:84:4e:5b:d9:ed:0e:d2:82:99:a8:f4:70:50:53:
                    f2:ce:29:9f:d2:8b:a9:86:0b:6b:69:c1:97:e2:f8:
                    a3:fa:06:56:9e:bd:ee:2e:f7:17:9a:d7:97:6f:45:
                    aa:2a:d0:d1:4e:9d:f1:b0:15:82:b4:a4:45:d8:85:
                    61:a4:70:d5:1b:a8:3d:97:e1:e0:4d:6c:d4:7c:22:
                    72:e9:fd:de:7e:8a:64:55:b3:31:79:25:64:e1:aa:
                    4a:93:ff:d9:a4:25:fa:3d:ad:89:28:2c:a8:33:62:
                    cc:5e:d1:35:f0:13:ff:83:e6:0c:79:51:18:21:f7:
                    85:dd:03:59:c8:64:36:39:06:d4:fc:64:42:02:7f:
                    a3:1b:bd:c7:92:d6:51:44:2b:8d:ab:b9:60:bc:6f:
                    16:5f:59:9a:5c:ab:73:34:47:94:01:23:0b:53:76:
                    97:f2:34:52:f2:15:7f:79:0e:f7:43:6a:f7:ae:45:
                    33:97:f3:35:12:49:f1:86:1a:74:48:92:41:04:5f:
                    2a:30:56:58:a2:6b:52:89:00:6e:10:70:33:85:f4:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F7:FC:CF:51:9D:E6:43:68:04:76:5A:8C:A1:7E:86:C8:11:C6:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/af8d84fa-ba63-3eb9-97c1-ca43e1eea1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:37:c7:af:7e:3e:04:d6:12:4c:53:4c:b0:9c:d7:36:ec:
         4e:7e:21:ae:3d:1c:c1:40:c2:99:d3:38:94:74:75:86:68:97:
         8b:47:4d:b4:b4:9d:6b:9f:1e:82:df:09:d1:54:f6:28:c8:58:
         f8:cc:98:1d:b0:c1:39:1e:c0:96:be:fc:b0:6d:12:6a:33:c7:
         a0:35:e6:9f:e8:34:ad:72:c9:40:fc:59:b8:6e:98:e5:ac:7b:
         08:ab:33:3a:84:9a:54:05:f7:b8:c0:65:92:b3:6c:ef:2b:70:
         3f:1c:4a:df:3b:33:66:2b:71:68:43:2f:67:22:b9:f2:51:91:
         db:de:1f:02:a3:62:b6:60:eb:73:de:01:77:e8:92:16:50:01:
         d2:01:42:58:42:28:3d:c3:cb:0e:20:ab:4b:60:8a:a0:06:e6:
         e9:35:5b:53:c6:52:06:20:d8:19:5f:00:c1:53:d3:f2:10:a4:
         39:0f:bc:e8:6c:3f:fd:66:09:72:1a:fa:1a:dc:d4:8d:15:03:
         a0:67:59:12:8e:40:c5:77:ee:76:7b:f1:b4:ff:50:bf:ad:d3:
         f0:14:ee:2f:fa:e0:9f:1d:0c:fc:19:03:4c:c8:d3:1b:cb:3c:
         ed:fa:fa:b6:6c:f7:e7:df:c7:91:8b:92:06:7f:7a:6e:e5:23:
         31:07:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 07:03:32 2024 by rpki-client on console-ams.rpki-client.org