Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa
File:                     c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa (raw, json)
Hash identifier:          QGFKyBofiw7sWBrUvetX4DGkhKHtHfEdFjm0EjqGFG4=
Subject key identifier:   29:5B:FE:F5:2D:45:CA:1F:75:84:0C:57:4A:56:DD:E9:EF:4E:3D:E9
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285845C873AABA366D5F35E7951B80
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        104.243.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:aa:ba:36:6d:5f:35:e7:95:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=0ebc1f76-5227-4c04-a4fb-5a83412ab748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:62:43:9a:30:c6:ac:c1:4b:ad:21:1b:76:99:
                    d7:52:de:09:17:35:a4:0f:c8:14:fe:ad:a7:77:2f:
                    d0:4a:ee:4d:53:90:27:cb:4a:ce:af:56:5f:e9:bb:
                    97:da:dc:9b:c3:ed:c7:ff:ae:a3:1b:1d:fe:5a:30:
                    f0:15:fb:96:98:2e:cb:63:bf:9e:33:e6:3e:cc:f0:
                    c3:5d:4f:09:65:31:0c:83:c2:91:9a:16:78:3d:c4:
                    9f:13:b5:26:b5:2c:d1:e5:cd:9a:8a:b9:18:82:e7:
                    55:58:49:d2:41:1e:cd:c6:be:e4:b0:96:36:02:00:
                    55:68:4e:bf:2e:9a:ae:72:b2:78:db:41:96:e4:a3:
                    be:b2:ef:92:f1:3e:99:1e:76:61:10:57:8f:f3:47:
                    62:da:10:ad:2c:86:5e:01:b4:97:3b:f5:16:7b:ad:
                    d5:24:98:39:b3:f1:81:ef:b0:0d:03:77:f3:b4:0c:
                    9d:83:dd:b2:46:32:ab:05:67:ba:f3:22:a7:3a:b2:
                    d3:92:a3:f2:60:06:c9:12:ac:e8:30:ce:f9:36:f7:
                    2f:00:43:fd:0a:00:49:ed:0f:74:bf:2a:06:56:55:
                    c4:6e:f7:d0:41:db:85:e9:17:70:ea:85:73:b7:83:
                    62:01:33:48:43:2b:74:7d:bd:ca:2c:ae:ee:8c:39:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5B:FE:F5:2D:45:CA:1F:75:84:0C:57:4A:56:DD:E9:EF:4E:3D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:19:3d:30:21:4e:e9:0b:d4:2c:b6:60:fe:f3:78:32:06:
         2d:69:ff:33:1b:ca:b6:28:36:27:36:db:65:ed:ee:49:62:34:
         90:f9:49:0a:60:cf:39:5a:7a:3d:0e:dc:15:cb:58:98:99:1c:
         83:9b:f7:d4:9a:9d:32:41:1d:01:1a:c4:e4:b7:ae:7f:73:64:
         fe:ed:c6:c3:41:86:a4:9f:94:af:53:35:98:c8:4d:34:8f:04:
         7f:c7:d2:4e:97:ff:cb:cb:42:bb:c9:6f:13:21:9b:94:4a:5a:
         56:17:d5:3b:4d:f4:f5:20:f8:ce:a0:8b:b8:7c:c6:dd:90:e9:
         2e:23:bd:3f:df:77:c1:78:e8:2f:e8:ac:56:d1:d6:3b:15:0f:
         d0:34:e8:db:37:8b:64:17:7d:03:a8:10:24:ee:03:dc:ce:2f:
         25:26:f2:c2:b7:00:58:0a:89:55:b7:eb:31:c1:94:ee:ac:9a:
         f1:51:7d:cb:18:84:91:b8:f7:5d:bf:2c:64:42:e5:00:09:2d:
         50:ad:f3:d1:e4:62:fb:17:fc:c9:4b:cb:c3:66:43:a0:05:13:
         38:44:34:79:27:88:1d:2e:be:10:3a:a4:7e:c7:18:ac:54:2b:
         4b:9b:af:ba:34:6b:fd:33:7e:b7:7f:3f:92:c9:c9:9f:0f:f4:
         13:8d:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:16:07 2024 by rpki-client on console-fra.rpki-client.org