Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
File:                     3e73c06b-902f-3599-accc-26c4dac8766a.roa (raw, json)
Hash identifier:          fAUhUsBowwlo+L1pUS1+ANN14z1Rng9gwGsMpU1+TZ0=
Subject key identifier:   42:7E:2D:15:D5:62:E8:43:9D:C1:FD:D7:13:6D:B3:67:97:F6:BE:CE
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F43285847AF9BEC824AA9EB23AE027180
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     40342
IP address blocks:        104.200.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:ec:82:4a:a9:eb:23:ae:02:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=5fb339a7-80d8-4717-bb25-ce562e2d511b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:18:64:21:73:98:7d:20:57:dd:1b:b3:1a:
                    ac:90:b4:af:35:3f:ff:5d:f8:58:7b:59:17:4d:a4:
                    5c:58:97:36:50:77:99:f1:91:be:ed:f5:9d:ee:99:
                    e8:b4:9a:b5:f3:b4:36:5f:dc:ec:f2:4f:7e:12:79:
                    c4:92:d9:ba:68:a3:5f:9f:c5:70:cb:a1:fe:90:ff:
                    b2:74:c8:0d:1a:cc:52:15:55:72:2e:03:6a:08:67:
                    b0:43:1f:b2:dd:0a:15:07:e4:25:df:20:2f:df:8f:
                    53:52:54:c2:e8:28:5e:0d:f3:b5:07:47:a3:24:9e:
                    9b:19:70:5f:c0:70:b7:4f:46:09:c3:7c:6c:1b:61:
                    e8:4b:51:e8:6d:53:b5:99:cd:f5:13:d6:76:36:08:
                    27:28:72:5b:ca:0d:e5:4c:72:e5:db:b4:e2:0b:d8:
                    d0:fd:ef:a8:c1:54:dc:e4:14:ea:bb:d3:b5:d6:f6:
                    42:9a:5d:91:61:de:22:29:28:f3:21:8c:c3:a5:cf:
                    ed:43:b9:00:91:b6:4e:2c:0e:11:1b:d0:f2:a4:54:
                    cb:02:93:ad:82:7b:29:7a:71:21:0a:86:85:8a:fb:
                    88:8a:c5:cb:5f:b9:16:dd:c5:43:0e:a8:ef:5b:8c:
                    ab:0a:a9:54:e7:5b:de:65:79:4b:f4:7c:37:13:1a:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7E:2D:15:D5:62:E8:43:9D:C1:FD:D7:13:6D:B3:67:97:F6:BE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3e73c06b-902f-3599-accc-26c4dac8766a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:42:5e:85:07:a2:64:5d:b9:27:31:01:1c:65:9e:76:22:e5:
         e6:44:5e:7e:b1:9a:3b:e7:fd:09:d9:38:78:7e:e5:a6:d7:de:
         c7:6e:90:37:2a:d6:86:25:12:b1:06:0b:ad:e1:c4:43:5c:26:
         bd:c0:08:b1:08:14:4f:0c:96:d8:12:b9:f7:e1:35:f5:0d:7e:
         c7:a9:6b:a2:7b:64:dc:0c:e3:7a:90:a2:85:f1:af:64:66:98:
         c9:2f:47:92:b1:3e:bf:be:1b:b8:9d:9b:d2:cf:1d:59:be:0c:
         fe:85:df:8f:38:e2:40:70:d3:d9:cc:6d:be:fb:48:bd:7c:87:
         35:b7:ae:3a:3d:eb:e7:91:01:8b:12:e1:da:38:03:2a:c9:eb:
         64:39:e5:19:0c:4f:41:d1:0f:a4:e2:ac:ee:9c:78:5e:06:4b:
         f0:a0:3d:a9:fc:70:a2:5f:d8:c9:ae:b2:08:b5:0a:7a:56:37:
         d3:75:05:7c:04:ec:dc:da:f1:d0:5f:38:34:e9:28:df:69:78:
         6f:f8:5d:70:37:c1:15:91:ac:0d:27:2e:0e:c3:fb:18:fc:8a:
         c1:12:b8:d1:a0:4e:8f:b9:54:2c:c2:1d:e7:0d:9a:f4:36:2c:
         31:7b:04:86:f0:8f:e1:74:38:17:98:03:f4:93:98:4f:ac:bf:
         80:77:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:27 2024 by rpki-client on console-ams.rpki-client.org