Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/90925d72-6482-3d0d-b571-8b76bfd22cd2.roa
File:                     90925d72-6482-3d0d-b571-8b76bfd22cd2.roa (raw, json)
Hash identifier:          bWFbm+p3K5tZHNQqviOXjuqSBq3vVXdteS17rz3m0Cw=
Subject key identifier:   BD:D5:FD:1A:54:67:F1:6E:CD:83:B8:0F:88:EC:51:D0:54:CC:17:E4
Certificate issuer:       /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Certificate serial:       010D0C9F43285845E7292DC0D5F3B9F3C0C58F00
Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/90925d72-6482-3d0d-b571-8b76bfd22cd2.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     13438
IP address blocks:        104.232.42.0/24 maxlen: 24
                          2602:fc78::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:2d:c0:d5:f3:b9:f3:c0:c5:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=c2c1aca3-85fc-49ac-95f7-457f97aeda2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:b2:09:7f:e2:6b:57:01:d2:f3:42:68:4f:
                    6c:59:db:99:46:c5:7b:0f:f6:fd:37:34:31:1a:ce:
                    66:22:a2:a9:7e:ab:38:3c:f5:a4:94:ab:63:24:bd:
                    5d:36:a4:59:7b:ec:ea:4b:7f:76:2b:78:cb:07:08:
                    3c:25:c8:dd:7b:f2:9a:55:6f:73:9e:95:06:7f:2a:
                    d3:c9:fd:90:47:9f:35:81:7c:22:9a:3c:dc:b2:3c:
                    2d:ff:55:c5:f0:dc:13:5d:2f:c9:a1:77:6c:e0:1c:
                    29:71:48:a7:35:a6:59:76:52:bb:2b:1d:a2:7f:21:
                    72:f6:f2:75:0c:aa:c3:aa:3b:17:02:23:4a:18:65:
                    8e:46:ba:dc:6a:02:85:a3:ee:cc:18:65:51:1c:95:
                    f7:7d:23:b9:c9:5c:b2:de:f9:11:a1:4c:fc:5b:5d:
                    58:5a:9e:c4:4f:9d:63:32:a8:16:6b:0a:7c:6e:f3:
                    62:bc:ed:23:48:46:c8:75:aa:50:fc:32:3a:5b:95:
                    cf:7f:03:db:11:02:28:a1:08:0b:dc:d9:24:f7:8b:
                    40:53:d2:36:d4:b4:49:fb:a6:a2:a0:ae:30:31:77:
                    c0:70:01:a5:b2:d7:09:10:66:bc:5e:33:04:41:f6:
                    c6:01:d5:b3:7f:68:7f:9a:53:63:7c:83:c3:02:72:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D5:FD:1A:54:67:F1:6E:CD:83:B8:0F:88:EC:51:D0:54:CC:17:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/90925d72-6482-3d0d-b571-8b76bfd22cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl

            X509v3 Authority Key Identifier:
                keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.42.0/24
                IPv6:
                  2602:fc78::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8d:04:2d:07:a3:3c:d1:e4:48:f2:5d:b6:8e:b5:c0:cc:ad:
         5d:a8:18:1d:7b:c3:fa:90:fd:df:2c:07:e0:7a:0f:af:a0:a8:
         0e:13:fb:8c:23:1a:c6:fd:91:93:25:c5:73:4f:cd:ad:5c:15:
         57:0d:fb:18:80:c5:2f:9b:68:ca:5f:62:50:56:dc:6c:ec:04:
         48:63:53:ed:a0:5c:0a:bc:8d:a1:99:0e:87:10:c3:82:a1:9b:
         ca:99:52:13:0b:07:c5:73:be:b3:c4:0c:db:8b:2a:1f:12:40:
         6c:01:ab:e1:08:cd:27:1c:43:dd:1f:9d:a3:fa:31:c9:c8:0f:
         ce:6e:24:0e:60:0a:34:68:81:fa:39:d3:95:a8:65:c1:bb:2f:
         7e:23:07:03:da:f9:d6:b9:eb:47:74:41:fd:7d:7d:d9:67:37:
         89:0b:06:c8:9e:2b:74:55:ba:ab:c4:81:eb:5a:c4:04:49:d3:
         86:02:20:3a:43:98:ab:75:4b:25:c6:12:89:11:81:62:d2:08:
         be:bb:41:cb:c5:da:f4:d6:c7:cf:5c:bc:ff:1a:0a:97:a1:bb:
         30:b7:39:b8:ec:3a:65:9b:6a:1a:54:8b:50:4d:c9:2e:c8:eb:
         90:f1:96:69:91:b5:ca:ea:bb:bc:2f:7d:d2:66:3a:56:2f:7c:
         b6:1b:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:35:59 2024 by rpki-client on console-ams.rpki-client.org