Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31cabb2a-5dcf-38b6-91c8-ae34ea8434a7.roa
File:                     31cabb2a-5dcf-38b6-91c8-ae34ea8434a7.roa (raw, json)
Hash identifier:          DDXdYeHW0E238AM+LUUVFFfp2QpWU0xrfpxmFc6uyd4=
Subject key identifier:   B3:3E:CD:F1:2E:E2:DF:00:08:E0:65:31:2A:FA:F8:3E:DB:80:68:02
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BA27BD8E0B55FCFDE4E4F700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31cabb2a-5dcf-38b6-91c8-ae34ea8434a7.roa
Signing time:             Wed 01 May 2024 10:06:30 +0000
ROA not before:           Wed 01 May 2024 10:06:30 +0000
ROA not after:            Tue 30 Jul 2024 10:06:30 +0000
asID:                     20940
IP address blocks:        104.123.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:27:bd:8e:0b:55:fc:fd:e4:e4:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 10:06:30 2024 GMT
            Not After : Jul 30 10:06:30 2024 GMT
        Subject: CN=307a94bf-aa28-4ac3-9ace-efe0a0fc651c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d4:75:b5:b7:e8:39:04:9d:fd:1e:d6:b2:25:
                    07:c7:ff:40:e7:5f:6c:3d:b2:3c:e9:56:59:7a:c8:
                    19:8d:be:57:19:45:4c:01:92:f3:71:0d:91:1e:d4:
                    92:ec:fd:c8:b2:37:b5:f3:67:9a:df:78:6b:9b:78:
                    7e:b8:3e:29:8c:6e:48:ba:f9:19:ca:1b:e5:38:2e:
                    7f:f9:4d:75:20:1a:f1:b2:e9:4d:66:76:2f:d1:0b:
                    8a:20:8d:b4:99:71:10:9e:b3:b2:aa:49:ed:5d:03:
                    41:00:49:1f:e7:f3:07:f9:c5:0c:b1:bc:1a:db:ee:
                    32:71:3f:26:8d:36:82:49:64:c8:86:f3:ec:a0:17:
                    6d:62:e5:9f:3d:fa:4a:12:48:f9:a9:77:04:ec:e7:
                    d9:ca:7a:b9:2c:aa:56:e0:3d:17:70:26:cb:41:42:
                    b3:6f:b9:22:4f:2f:a0:76:0d:24:85:47:09:b2:d1:
                    af:de:51:dd:24:42:f0:35:af:c5:d4:f1:fc:83:49:
                    c5:40:3c:fa:5b:27:84:9b:6d:09:04:df:2f:2f:e0:
                    0b:2d:1e:cf:83:e1:3e:d1:45:1a:0a:e7:ac:b4:2c:
                    18:30:bd:59:2b:fd:21:de:97:e3:b9:1f:6d:d2:94:
                    1e:d7:12:57:bd:b9:5f:9e:3f:0c:68:e1:f5:1b:b5:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3E:CD:F1:2E:E2:DF:00:08:E0:65:31:2A:FA:F8:3E:DB:80:68:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31cabb2a-5dcf-38b6-91c8-ae34ea8434a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:31:9e:23:12:1b:aa:60:50:d6:bc:73:61:96:df:7b:ae:61:
         44:c6:c7:f5:f3:98:02:9a:3e:f4:fb:24:b1:96:58:2a:2a:b2:
         32:7e:f9:73:5c:f3:c5:54:0e:19:95:10:5e:9c:11:94:9e:81:
         f6:6c:d0:23:88:bf:d9:e4:cd:9a:8d:d4:c8:d0:a7:b0:88:98:
         19:a0:79:71:e1:d4:f0:08:0a:cf:c1:e2:1b:dc:d4:a5:cc:01:
         7f:eb:08:a7:41:f9:eb:97:1a:7b:96:c9:3c:a9:fe:09:61:59:
         24:0c:12:23:b5:fb:ee:64:2e:8e:bb:80:a3:80:b7:b4:54:9f:
         84:4c:07:ae:8a:bf:36:73:9f:07:a0:bc:5e:7f:81:7a:31:56:
         f3:a0:08:04:4b:82:32:2a:fe:af:cd:d2:ca:7b:58:c0:25:71:
         13:02:48:44:93:0c:79:c0:e3:cc:4e:7c:bd:42:41:8b:f8:02:
         a8:16:b1:57:e4:68:76:8d:53:df:af:8a:12:89:76:2d:27:be:
         9f:db:07:57:c9:cb:d5:17:20:0c:c9:13:76:fc:70:bc:fb:ff:
         0d:b5:8a:7a:8d:1e:8d:e7:43:c8:59:03:a4:1b:03:77:d0:72:
         40:37:37:03:ba:a0:25:ff:1f:72:92:c9:8c:2d:66:fd:6d:11:
         41:f5:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:08 2024 by rpki-client on console-fra.rpki-client.org