Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb6b1c25-ad15-3989-acba-74f0f91dfa72.roa
File:                     bb6b1c25-ad15-3989-acba-74f0f91dfa72.roa (raw, json)
Hash identifier:          ssDXkdESCv3ZnB44mWUj/5srfrSFfsLXOfheLyDWWOs=
Subject key identifier:   AE:FF:F6:3A:C0:D6:5C:F3:5D:0E:8C:EA:5C:AA:EE:F3:8C:E3:B5:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B731E368ABF7865810C65220
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb6b1c25-ad15-3989-acba-74f0f91dfa72.roa
Signing time:             Tue 30 Apr 2024 08:39:31 +0000
ROA not before:           Tue 30 Apr 2024 08:39:31 +0000
ROA not after:            Mon 29 Jul 2024 08:39:31 +0000
asID:                     16625
IP address blocks:        104.80.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:31:e3:68:ab:f7:86:58:10:c6:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 08:39:31 2024 GMT
            Not After : Jul 29 08:39:31 2024 GMT
        Subject: CN=27306276-fa5e-4389-826e-097ccb44c811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:fa:79:19:6a:14:ff:b5:4e:56:dc:96:c7:
                    61:0a:50:e0:a0:30:6b:81:a8:ab:50:fa:33:73:1a:
                    4f:2a:d5:d0:df:37:1a:8f:b4:77:47:b7:b1:c9:16:
                    58:1c:df:cd:c6:f2:ee:03:38:24:f5:9a:4d:59:65:
                    f7:e6:d9:4a:12:31:e3:6b:05:3d:1d:83:2d:bc:e9:
                    a4:e4:99:9e:a6:eb:c9:ce:07:5b:c1:a6:03:a6:e9:
                    f1:0a:af:c6:6e:ca:e6:76:4a:d4:5b:3d:69:cb:9d:
                    54:5c:ec:67:a9:6d:d5:1f:ef:87:f9:16:42:41:95:
                    25:4a:ad:6b:21:93:67:67:ca:77:3d:c6:cb:c6:44:
                    ff:b4:ba:25:f6:fb:cc:7c:22:ae:09:4c:df:e9:a5:
                    30:19:9d:10:6c:44:b3:e8:16:70:b2:3f:93:91:cf:
                    2c:c6:ae:a1:eb:20:31:d0:f4:f0:ce:47:d0:08:14:
                    35:88:54:07:3f:48:18:2b:e3:cb:34:f8:85:8c:92:
                    98:86:67:e7:9f:2d:25:a7:76:36:92:dd:a1:b6:f9:
                    a9:27:cf:4c:c7:31:c7:05:73:9b:40:55:70:5f:a8:
                    d7:0a:34:41:60:d8:11:1e:5d:3e:64:a4:d7:8c:01:
                    17:ce:e8:e8:e6:bb:79:77:65:e2:42:11:91:49:35:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FF:F6:3A:C0:D6:5C:F3:5D:0E:8C:EA:5C:AA:EE:F3:8C:E3:B5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb6b1c25-ad15-3989-acba-74f0f91dfa72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.80.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:27:70:8a:95:9f:21:33:be:68:fb:8d:cd:2f:ef:81:a3:36:
         17:cf:54:0d:94:90:2e:d3:f0:99:82:3a:a8:13:cf:b5:14:db:
         d7:e1:0d:8f:a2:61:03:ef:46:cf:af:32:c0:d6:5c:45:ab:7e:
         58:f8:05:8f:6e:d0:e1:27:9f:f5:27:fa:61:28:43:e9:9e:12:
         59:5c:2e:24:6c:21:3a:14:d2:de:af:a4:a6:81:56:5d:56:48:
         16:e5:5a:01:2a:52:f2:e2:91:bb:6e:eb:9d:a5:f7:fd:3a:12:
         a8:b0:11:c8:f8:16:b3:ce:29:71:9b:d8:dd:d4:73:e6:33:6b:
         b7:39:d5:7a:8b:21:36:09:d9:0e:50:54:d2:8d:ff:68:e7:73:
         ff:f5:1b:81:04:48:8b:2a:8c:be:6e:0c:ef:d7:2b:29:55:3c:
         87:d2:c6:fb:e4:5b:e5:cd:30:46:1d:ed:36:e8:88:de:b4:2d:
         9e:42:0a:72:eb:02:9e:16:82:86:eb:ba:aa:53:4b:9f:be:1f:
         cc:ab:01:e2:81:a6:94:bb:f3:68:7b:94:fe:6f:98:e3:9e:fe:
         3f:74:ab:f3:82:f9:96:5e:ec:a0:f2:5e:f0:ca:39:dc:f9:e1:
         27:f1:b9:85:f6:cf:67:59:c1:63:f0:ab:12:7e:85:8a:e7:4e:
         d3:cd:c4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:15 2024 by rpki-client on console-ams.rpki-client.org