Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7d585-d657-331d-8b96-bb7a1ad6daea.roa
File:                     bae7d585-d657-331d-8b96-bb7a1ad6daea.roa (raw, json)
Hash identifier:          MWl9/XI/Gw72VU2P+Ai3Kcyel3CgMdnisCGHWnrNfNU=
Subject key identifier:   64:E4:D2:05:57:4B:8E:0D:95:83:EF:9E:7C:5D:0F:4C:43:30:23:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A73988442842FB61EF53B980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7d585-d657-331d-8b96-bb7a1ad6daea.roa
Signing time:             Wed 24 Apr 2024 15:21:59 +0000
ROA not before:           Wed 24 Apr 2024 15:21:59 +0000
ROA not after:            Tue 23 Jul 2024 15:21:59 +0000
asID:                     16625
IP address blocks:        104.106.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:39:88:44:28:42:fb:61:ef:53:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 24 15:21:59 2024 GMT
            Not After : Jul 23 15:21:59 2024 GMT
        Subject: CN=de0a7c0b-50c5-43af-84cb-0073b68acd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:79:ca:14:f0:39:85:c2:bb:0a:f5:17:96:
                    ff:eb:61:a1:c9:ff:b1:70:9f:72:c1:f5:b3:81:5f:
                    26:72:29:c9:d5:b7:41:0f:ab:bb:dd:91:86:97:10:
                    cc:f1:f9:c0:b1:53:d5:8b:6f:51:a7:54:9d:d4:9b:
                    92:c0:ea:c2:dd:dc:b4:85:f3:5c:44:25:2a:65:ce:
                    00:71:f2:97:50:db:9d:0b:8b:94:9f:cd:11:26:e0:
                    fe:b6:76:c6:b1:93:fb:fe:17:30:ad:c0:86:ab:7f:
                    18:c2:84:6d:4c:9e:6a:ec:a4:98:1f:1e:46:62:ab:
                    d1:f1:fb:aa:9b:7f:21:40:40:e0:af:24:2c:e3:39:
                    de:b2:5a:1a:b7:44:66:5d:82:d3:2b:86:27:69:73:
                    28:be:52:d9:59:28:12:89:df:3a:46:b8:0a:9c:34:
                    49:b4:b1:56:15:fd:ba:67:b4:ad:7f:67:cd:a4:dd:
                    2f:f0:07:9d:51:4d:95:25:1e:4e:75:94:aa:7e:d4:
                    c6:af:3e:74:a6:28:eb:8a:bf:74:07:10:4b:6a:a4:
                    38:b9:ad:c8:fa:89:74:98:30:eb:ca:1f:bc:97:27:
                    d8:b9:f7:a2:08:57:18:36:2d:4d:5f:00:7e:14:71:
                    66:f8:f5:0f:10:1f:66:40:9a:75:25:ff:77:8a:d4:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E4:D2:05:57:4B:8E:0D:95:83:EF:9E:7C:5D:0F:4C:43:30:23:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7d585-d657-331d-8b96-bb7a1ad6daea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.106.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:77:c1:18:16:97:06:39:d2:77:63:58:89:a1:3c:41:5d:75:
         87:48:32:ac:8e:4a:e3:c1:a9:bb:96:e0:5b:a4:dc:f1:c9:88:
         26:07:de:a6:0d:5b:15:36:52:b0:e4:10:5e:2d:45:cb:7c:25:
         3e:d7:e4:d8:f7:7b:b8:fe:c5:f9:f2:b0:e5:6d:d2:26:55:4b:
         31:f0:d8:5c:e5:30:11:13:69:c8:2b:66:5c:52:09:ed:96:56:
         0b:a4:90:b2:8f:78:4b:f3:fc:ef:01:74:6f:41:5e:ef:52:74:
         80:99:e1:ef:93:b5:83:1f:fb:81:34:1c:31:23:a7:10:b2:5f:
         ef:54:9f:36:6c:15:dd:be:3f:82:1f:03:a6:d1:ae:50:50:59:
         87:fc:c8:e7:51:4c:e3:3d:e8:1f:da:50:4b:df:79:3b:eb:9d:
         8f:b1:6e:5a:ff:71:b1:bf:ee:41:1c:5d:60:00:ce:1f:6f:93:
         1d:a8:54:79:a4:79:98:a9:b8:cf:76:65:ef:07:f3:6c:46:ad:
         3e:e7:ae:d6:56:17:82:f5:43:6e:57:3f:df:ed:ec:f3:3c:c3:
         73:97:30:57:8c:6f:8b:2f:0e:26:99:5f:95:0e:a4:6f:17:12:
         6a:80:e8:eb:15:15:94:60:24:60:47:21:fb:5c:53:bb:56:ab:
         5c:16:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:21 2024 by rpki-client on console-fra.rpki-client.org