Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/a42bb71d-2336-3ef6-a6bd-e30f46d0813d.roa
File:                     a42bb71d-2336-3ef6-a6bd-e30f46d0813d.roa (raw, json)
Hash identifier:          7GCfQISp8bGz22Do5pP8aeeaaDSlumSN1uLlEYQx5E0=
Subject key identifier:   8A:1D:C4:EE:70:4D:A4:5D:11:A1:7D:B7:40:56:CF:A6:1C:0F:E2:41
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F432858450EEAD167EC61B4DC4E5EEF40
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/a42bb71d-2336-3ef6-a6bd-e30f46d0813d.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     64200
IP address blocks:        104.247.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d1:67:ec:61:b4:dc:4e:5e:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=a69a5ba6-02ee-42d6-854d-a3457e389c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:78:b0:f5:4a:e5:c2:b7:83:78:42:29:46:
                    34:a4:8c:7d:a8:a0:15:69:f8:0f:df:b5:49:3d:9f:
                    a4:cd:ac:d4:b5:73:d9:85:22:53:e8:11:a1:ac:16:
                    5f:4b:67:d9:51:1e:7e:4a:e9:b8:e4:ea:be:bf:67:
                    03:7c:98:15:53:30:f4:de:58:76:1a:6f:f0:e2:f8:
                    10:f6:64:4b:ed:be:fc:eb:81:8a:ee:e3:fc:d4:7a:
                    92:7c:46:d3:39:c7:06:84:76:ab:9f:72:47:19:9a:
                    95:4b:21:2e:ee:54:4d:99:32:85:6a:15:1b:11:6e:
                    18:3d:04:8a:04:f0:40:7f:3e:26:34:59:24:6f:49:
                    98:c2:d9:80:d4:8b:74:3c:f6:92:b1:63:94:96:22:
                    af:26:ff:51:d0:aa:73:bc:dd:f5:51:02:76:40:b9:
                    bb:72:e4:1f:97:91:53:c0:38:f7:dc:1a:34:0d:37:
                    33:e4:76:9c:eb:41:d5:c1:df:85:7f:41:ec:f6:a7:
                    7c:08:52:91:a9:84:d0:19:f8:51:08:2e:3c:58:11:
                    16:c8:b4:b2:8d:7d:89:8c:75:58:f7:2c:de:41:ae:
                    dd:ec:19:55:72:ab:34:0e:13:ab:63:88:0b:68:60:
                    0c:56:0b:10:fa:f1:22:3a:d0:8f:8c:d4:14:07:57:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1D:C4:EE:70:4D:A4:5D:11:A1:7D:B7:40:56:CF:A6:1C:0F:E2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/a42bb71d-2336-3ef6-a6bd-e30f46d0813d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:78:ba:58:86:27:8b:92:43:64:bf:30:7b:7a:b3:a0:aa:
         cd:3f:c3:95:9b:92:8e:f8:c2:98:b0:c3:be:b9:c9:ac:3f:ca:
         c4:c9:b1:4a:3e:aa:8d:fc:9a:5f:7b:5c:2e:16:30:c7:17:2b:
         4f:67:ce:bf:ba:50:e8:0b:97:c2:15:b4:9a:0a:0a:21:93:30:
         d7:40:d9:f0:f0:2a:fb:3a:a4:e6:8d:a9:ca:ed:88:01:4c:73:
         d9:0b:de:9b:bb:48:36:d9:9f:35:5c:24:8b:97:df:a6:f9:11:
         1c:39:c8:b4:ff:8f:cb:be:36:83:5f:56:8b:6d:44:ba:ee:ca:
         64:07:42:bc:c7:02:8f:59:14:cc:fa:fe:1a:cc:81:dd:b2:19:
         89:a4:64:44:63:9c:26:85:c3:05:08:68:30:2e:c7:a9:eb:e6:
         84:25:9f:3d:f5:db:4f:52:04:ba:43:0d:5f:7e:2d:5c:bf:53:
         66:5d:98:69:8c:cd:a5:9a:5f:8f:c9:72:95:66:2a:cf:b0:4c:
         5b:05:fa:11:6a:09:5a:36:68:58:3d:92:47:3e:0e:8e:89:2a:
         ee:61:54:9a:62:92:41:53:15:fb:1b:64:1c:04:67:dd:25:62:
         13:c7:5d:01:2b:4a:f9:a5:af:6d:a0:32:50:73:f9:41:af:c2:
         4e:8b:d5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:17:05 2024 by rpki-client on console-ams.rpki-client.org