Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc1ef6c2-5474-38f9-95ef-93053e69e633.roa
File:                     cc1ef6c2-5474-38f9-95ef-93053e69e633.roa (raw, json)
Hash identifier:          jkqqcvK6bb7yqSTYqFxsnk8fTeCoLujRFcLnwmiN0U0=
Subject key identifier:   96:E4:D3:81:A4:37:8F:5A:CD:0A:08:9D:C5:2D:97:44:D7:A4:B9:95
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845931B2B4AB40C0698220EBEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc1ef6c2-5474-38f9-95ef-93053e69e633.roa
Signing time:             Wed 17 Apr 2024 10:24:39 +0000
ROA not before:           Wed 17 Apr 2024 10:24:39 +0000
ROA not after:            Tue 16 Jul 2024 10:24:39 +0000
asID:                     20940
IP address blocks:        173.222.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:1b:2b:4a:b4:0c:06:98:22:0e:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 10:24:39 2024 GMT
            Not After : Jul 16 10:24:39 2024 GMT
        Subject: CN=1904400b-37dc-44cd-a88b-93f63235875a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:bb:1a:3f:f4:6c:b9:03:22:e5:a0:78:78:
                    96:f6:00:0d:83:0d:70:9c:55:02:f4:96:ea:92:0e:
                    25:d4:2f:e5:c8:45:ed:37:75:cf:f3:e5:75:65:8d:
                    f3:ef:b4:90:ac:33:1b:5d:88:0b:80:88:bf:da:21:
                    b7:13:7e:75:5f:1c:81:10:c3:9a:56:f1:22:0a:0b:
                    2c:7f:73:c4:ef:51:c1:46:9c:7b:09:69:73:85:28:
                    c7:f1:84:ea:61:84:76:df:33:d1:d4:7a:4b:3f:b5:
                    08:3f:f5:7d:49:53:91:43:a3:a2:d3:fb:67:83:53:
                    aa:f9:15:5b:86:89:28:b9:4a:97:30:1f:f1:02:8b:
                    77:c4:c5:a4:92:d8:e7:27:a7:c7:f5:26:ed:51:5e:
                    42:03:9f:4a:6a:dc:89:a8:8e:89:a4:6b:6b:f3:79:
                    b9:16:2f:17:d3:f3:9a:92:34:2a:75:ef:78:10:78:
                    dc:7c:de:1e:fc:97:3c:d5:3d:3f:6e:dd:ce:1d:a9:
                    b8:94:87:10:ee:ba:6f:53:7b:58:f6:7b:e4:00:05:
                    5a:46:74:e9:ab:c7:a8:88:34:1d:cc:4e:56:b5:cd:
                    fd:f3:e0:27:60:f1:91:d1:37:7a:fc:ce:a0:35:77:
                    0b:86:dd:3a:66:70:67:aa:90:ed:dc:af:e1:48:8a:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E4:D3:81:A4:37:8F:5A:CD:0A:08:9D:C5:2D:97:44:D7:A4:B9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc1ef6c2-5474-38f9-95ef-93053e69e633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:27:1e:9a:35:99:5a:73:56:99:6f:4e:31:ac:5a:f3:b3:2f:
         22:ef:80:19:eb:3e:12:d2:34:7a:f1:cc:c2:6c:62:88:18:e1:
         7e:c4:3a:17:74:ee:e6:a4:cf:8a:5c:b1:da:79:04:39:b9:fd:
         28:82:6e:c6:2f:7f:4b:d3:7c:78:79:c6:58:80:bf:79:cb:57:
         fa:2d:82:ef:f1:6c:ad:ed:99:23:b3:4f:cd:23:8f:d3:57:d6:
         00:e4:35:99:38:d6:e7:48:78:87:9a:bc:57:df:07:68:94:6e:
         21:cd:10:51:36:c3:b0:8e:be:9b:33:38:a7:6c:0f:62:53:3a:
         5c:a6:1c:07:0d:7a:8d:8b:ff:03:f4:e3:d1:ab:43:28:f9:c7:
         1c:98:69:bb:f2:94:4c:77:69:9e:0a:65:6c:c9:63:5c:a6:f6:
         b3:1c:70:2b:09:e6:68:6b:d4:d2:c5:f5:9a:ee:1b:de:07:80:
         8c:c0:3b:69:cf:d2:ac:af:1f:28:f4:96:4a:78:1d:9e:f8:7b:
         95:af:3c:5b:e2:99:e3:f8:e6:1a:13:c2:d4:ca:66:30:bb:f9:
         36:ef:83:dd:2e:da:bb:03:ea:1c:c9:83:ee:d7:fb:c2:18:f9:
         c6:27:b0:c9:ce:1c:3e:2d:13:05:a1:47:9e:d0:88:df:e7:05:
         34:72:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:54 2024 by rpki-client on console-fra.rpki-client.org