Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa
File:                     839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa (raw, json)
Hash identifier:          V1GARAK2gD95830LFa6sfaTFvjrHZz5jfGoeZtvyyLQ=
Subject key identifier:   D7:63:7F:04:23:34:1F:26:DF:4A:F3:7D:F5:A4:1D:69:08:9B:7F:B7
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F432858454A227A113502A60650A118C0
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa
Signing time:             Fri 22 Mar 2024 07:05:22 +0000
ROA not before:           Fri 22 Mar 2024 07:05:22 +0000
ROA not after:            Thu 20 Jun 2024 07:05:22 +0000
asID:                     6507
IP address blocks:        104.160.128.0/19 maxlen: 19
                          104.160.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:22:7a:11:35:02:a6:06:50:a1:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Mar 22 07:05:22 2024 GMT
            Not After : Jun 20 07:05:22 2024 GMT
        Subject: CN=f3b62536-d09d-4b60-b4de-0b0cdabb7dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:cf:f5:ce:ea:4c:99:ef:89:45:06:b5:13:
                    0a:9a:8f:37:25:8d:91:86:67:ae:89:4c:e9:94:e8:
                    43:8e:3d:3e:7b:39:e7:0b:bd:d7:01:77:33:22:97:
                    81:17:98:59:06:d4:d8:0d:f7:79:57:79:90:82:84:
                    cc:1a:24:4c:8d:87:5e:a7:c3:99:30:41:8f:c8:69:
                    53:8b:03:56:77:9b:77:c0:44:06:f5:92:33:d6:3b:
                    88:9e:a5:ec:4b:ff:78:01:db:46:e2:bf:3f:9e:32:
                    7a:ac:5e:f1:f1:d5:44:0f:8d:0e:ce:14:82:7a:d8:
                    f5:8e:47:f6:d6:b5:3f:e9:ed:8e:32:00:e5:7a:af:
                    27:d9:a1:f1:c1:51:fa:e7:cb:ba:60:58:d7:3c:ab:
                    e3:49:4b:91:30:be:4a:5f:c2:70:60:68:95:71:ec:
                    0b:10:1e:f4:fe:2d:fb:fc:a5:c0:16:8f:b9:1a:82:
                    32:f3:5a:2f:22:c8:cf:d9:ae:e3:f3:aa:aa:41:d0:
                    96:4b:60:96:3f:3f:d2:ad:80:91:d2:64:1d:80:11:
                    76:1b:23:66:01:eb:d7:22:f3:3e:5b:dc:68:d4:3a:
                    1d:08:b0:31:9c:fb:3f:e6:8f:4e:1d:73:b3:5e:92:
                    24:30:ad:29:2e:41:ff:cd:69:29:dd:b9:8b:63:06:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:63:7F:04:23:34:1F:26:DF:4A:F3:7D:F5:A4:1D:69:08:9B:7F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:67:7f:cc:cd:f0:35:8e:ae:90:64:fe:de:21:30:01:4d:
         b6:64:7e:7d:b8:85:5b:95:28:54:3e:21:19:72:3d:db:13:f1:
         de:a6:44:ee:e1:1d:b4:86:00:7f:33:bd:cc:7c:15:05:62:91:
         69:24:32:9f:ce:57:a8:4b:43:1d:f3:97:08:43:48:05:d3:5a:
         ce:60:e1:1f:0b:f5:97:2d:fd:1a:a0:41:ba:67:73:92:a9:7c:
         15:29:82:a0:64:0b:21:05:0a:a4:72:6d:5f:ad:17:87:dd:90:
         60:42:83:18:03:ba:f3:f2:b8:57:38:87:db:23:f4:f1:fd:23:
         34:1d:81:12:4e:1c:73:01:f1:fa:bb:00:86:20:2b:92:da:4d:
         f5:77:5c:dd:92:b5:b4:6d:b5:02:01:08:4a:fc:01:c8:02:81:
         13:be:b3:40:68:d6:d7:13:73:9e:9f:c2:c8:2f:87:39:2e:40:
         35:77:58:15:1f:b8:0f:fe:4a:d4:20:09:ad:32:c1:27:92:f4:
         02:9c:3a:0a:15:cf:b5:c8:2c:60:e9:c6:fb:d6:37:01:35:53:
         c7:4f:99:fc:7f:55:39:71:31:2d:5a:d5:f4:e1:5f:ca:ff:3e:
         75:74:ee:fd:38:0f:2a:ce:6a:8b:52:49:ab:b7:10:19:9f:34:
         5a:ab:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:41:11 2024 by rpki-client on console-fra.rpki-client.org