Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa
File:                     f1b53950-8f95-3608-896e-d18a018c60b7.roa (raw, json)
Hash identifier:          kSjDNF4WuR6WaRCGVtfMGmKYzZIXS9iq1cIYLL/net0=
Subject key identifier:   68:3F:93:3E:DC:E9:FC:61:51:FE:E6:A7:6B:39:92:A3:0C:4C:07:1C
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F432858476F662B4C3F9A6D9804FEFF20
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     401241
IP address blocks:        104.238.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:2b:4c:3f:9a:6d:98:04:fe:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=7d5bef7d-e1c4-4481-be28-48d58c63e2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:7c:0d:c8:ee:7a:80:6c:96:47:17:f3:8f:
                    95:b9:7b:64:cc:f3:a5:55:23:12:b6:3a:d4:37:f3:
                    9f:5f:2c:c2:d5:e7:81:16:06:62:3e:81:22:7b:c8:
                    10:f7:a0:2f:bd:35:93:85:60:12:bf:04:59:21:0b:
                    d1:a7:9d:99:b4:38:31:3d:28:d9:f5:73:93:8c:dd:
                    30:a1:b9:1e:d5:b2:a1:dd:48:b1:d1:da:15:26:2c:
                    c8:71:b8:32:15:fc:0e:75:63:a5:54:c4:74:2b:0f:
                    6d:e8:fb:83:55:5f:02:5b:0f:15:0c:8b:7a:31:b9:
                    6b:52:13:8c:bd:dc:ce:d3:72:00:88:d4:97:33:5c:
                    26:6b:87:65:c8:eb:90:53:7c:af:cf:b4:f8:6e:c7:
                    48:52:44:31:5a:4d:b8:de:d6:66:a8:59:c4:40:f5:
                    95:fc:3c:4f:0e:11:8e:94:9d:71:a4:3f:d8:ca:9f:
                    f2:07:26:b7:09:89:23:a5:8e:c6:ac:fd:96:38:1f:
                    5a:ae:ab:62:32:35:8c:e2:bf:11:22:bd:a3:67:49:
                    52:73:59:23:28:04:e3:eb:4e:cb:6f:2e:ec:55:41:
                    5a:c6:f0:33:dc:47:4b:21:25:a9:95:73:1e:03:af:
                    a2:83:77:26:19:08:dd:cc:3d:dc:68:51:73:0d:4b:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:93:3E:DC:E9:FC:61:51:FE:E6:A7:6B:39:92:A3:0C:4C:07:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:69:11:2d:14:11:7d:d0:b5:dd:ee:2c:1a:b7:29:22:c6:
         de:44:16:f0:8a:e3:6e:47:25:0c:a1:4c:d9:86:3d:28:02:3b:
         be:c3:7b:98:ae:fc:df:ff:49:87:85:9d:4b:cf:57:92:bd:7f:
         fa:92:1b:fc:34:d0:2d:13:c4:5b:16:d2:a7:55:f1:b8:b5:c7:
         17:50:1d:ee:66:76:70:34:ba:c7:92:7d:d7:84:04:64:75:eb:
         db:ea:13:7d:5c:bc:02:bd:5d:a7:9c:8d:2f:d5:c8:05:e8:ab:
         da:6d:27:55:3d:4d:9d:56:8e:cb:88:ab:f1:e1:da:2c:c3:53:
         72:d9:40:3e:4b:0c:49:83:3b:2c:eb:65:e7:08:cc:57:35:6e:
         5a:5c:80:1d:91:26:d3:5e:b6:75:d9:1b:1c:b0:87:48:9d:13:
         e8:70:40:8f:07:53:27:20:a1:30:2c:9d:7e:2f:97:50:8e:ee:
         e7:16:2f:78:29:0c:7f:b7:e9:67:eb:3c:9f:cf:58:ae:8f:92:
         55:4a:a2:57:c3:ed:56:30:50:45:33:96:ce:7f:35:b5:8b:25:
         73:01:8d:01:d5:91:de:48:4b:fc:4a:d2:06:4f:bd:8e:22:2e:
         36:6a:6d:2a:35:21:7e:f5:05:d0:03:66:e7:a7:ec:53:42:03:
         88:d5:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:54 2024 by rpki-client on console-fra.rpki-client.org