Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8539c58e-1a3f-3c8d-96fc-00c796e4896f.roa
File:                     8539c58e-1a3f-3c8d-96fc-00c796e4896f.roa (raw, json)
Hash identifier:          neu3VbRQgfdo7j2sXDCVlQ3b30me/IyGkdNna9+6qus=
Subject key identifier:   B8:2F:BB:61:E5:E1:FB:02:AA:D4:36:44:28:8E:1E:06:FC:B2:81:02
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B4D49401019AA691BEF37448
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8539c58e-1a3f-3c8d-96fc-00c796e4896f.roa
Signing time:             Mon 29 Apr 2024 12:19:54 +0000
ROA not before:           Mon 29 Apr 2024 12:19:54 +0000
ROA not after:            Sun 28 Jul 2024 12:19:54 +0000
asID:                     16625
IP address blocks:        104.79.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:d4:94:01:01:9a:a6:91:be:f3:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 29 12:19:54 2024 GMT
            Not After : Jul 28 12:19:54 2024 GMT
        Subject: CN=52442a47-177c-4bb9-b6a7-04380910c3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:49:a9:0b:a0:10:5f:d5:39:f2:f0:0b:c8:
                    67:12:fe:45:98:81:de:d9:6f:e2:a5:ca:79:16:fa:
                    44:4f:18:34:9a:b0:38:30:76:ea:9e:e1:9f:06:37:
                    81:d7:92:1e:70:d5:76:4d:42:6d:59:24:5c:01:2c:
                    94:1e:99:1c:21:2e:66:b7:69:ee:43:af:c1:7e:e2:
                    65:20:2d:36:7d:5a:61:18:48:bd:24:45:82:31:22:
                    6c:15:95:99:be:9c:3a:b9:5d:50:4a:14:08:21:fa:
                    4a:07:ff:90:38:91:ec:b6:b0:f0:91:36:d4:f3:c9:
                    3f:a6:dd:04:09:c9:ff:60:41:17:c3:fe:73:ec:e7:
                    e2:fa:c2:4d:61:17:8b:13:e4:d0:2d:b7:58:3c:b1:
                    c2:68:a5:48:17:72:0a:e5:63:aa:99:c9:e3:87:0f:
                    ac:92:f9:14:92:58:49:08:76:4d:8e:50:f2:14:65:
                    0f:76:70:9f:b3:0a:d4:b5:d4:d7:4b:c2:cb:28:16:
                    7a:0f:f7:47:cc:ce:96:d6:f6:e0:61:a4:dc:9a:0f:
                    9a:01:6c:68:80:0f:b5:24:0d:6d:2e:6a:42:01:81:
                    15:fa:56:e9:3d:2c:0a:e3:55:bd:7e:30:38:b6:e8:
                    9a:04:69:09:d3:61:40:64:da:c8:b4:63:c3:35:ce:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2F:BB:61:E5:E1:FB:02:AA:D4:36:44:28:8E:1E:06:FC:B2:81:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8539c58e-1a3f-3c8d-96fc-00c796e4896f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.79.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:65:f8:67:e8:16:bb:49:dd:fc:09:fa:96:a7:b6:8b:0c:58:
         b6:4a:51:df:1c:2e:66:b8:a7:15:ec:40:b8:c1:f5:a1:dd:16:
         bc:51:06:cd:14:67:22:c8:f4:00:36:de:52:d9:51:9a:32:74:
         99:f3:71:7e:09:9c:6c:4a:d5:70:30:f3:5e:24:3a:a8:14:0f:
         35:8e:61:85:e6:be:d0:aa:8d:2a:a8:08:81:ef:b1:0c:0e:da:
         97:39:95:d3:fe:59:3e:06:7f:09:ee:dd:a9:47:8a:60:ee:0f:
         0b:42:a8:a5:0c:70:32:1d:36:c9:87:5a:c9:4a:f6:6f:6c:32:
         a1:e0:4e:a5:d2:e0:87:4c:08:10:4d:d7:18:f9:23:98:bb:a3:
         11:d4:05:da:b1:59:16:69:b9:af:36:eb:27:32:3a:a1:2f:ca:
         18:ce:6f:66:c5:ee:08:11:11:db:21:10:65:99:04:c6:44:75:
         a3:98:1a:8c:ab:83:ac:0c:fb:3e:0f:64:27:80:64:00:49:56:
         46:42:39:b0:0c:d1:68:39:fe:d3:b9:07:db:1d:b4:47:e3:8a:
         0d:93:1f:22:b2:23:12:01:29:a4:63:0f:ed:aa:c0:2a:94:af:
         29:30:f1:d5:22:ef:08:de:aa:b0:66:27:99:05:05:bf:9f:61:
         32:57:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:09:27 2024 by rpki-client on console-ams.rpki-client.org