Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa
File:                     f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa (raw, json)
Hash identifier:          AJNGiHhnXFvrh5DIBOKzcO+TuXAEKgR+AAbpGn+paMw=
Subject key identifier:   96:A7:9B:91:C2:67:74:FA:1A:7E:42:69:99:E2:63:B2:94:9A:73:6C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B4A91F38301437BFF37C3F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa
Signing time:             Mon 29 Apr 2024 10:52:20 +0000
ROA not before:           Mon 29 Apr 2024 10:52:20 +0000
ROA not after:            Sun 28 Jul 2024 10:52:20 +0000
asID:                     20940
IP address blocks:        104.70.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:a9:1f:38:30:14:37:bf:f3:7c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 29 10:52:20 2024 GMT
            Not After : Jul 28 10:52:20 2024 GMT
        Subject: CN=584cf74e-9417-4aea-bf5d-5dce95f0215b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6a:d6:50:0b:ef:f4:e9:c6:8e:2b:2c:75:8c:
                    2a:05:25:60:60:04:70:30:3f:db:cd:1b:ae:8d:43:
                    24:9f:7c:05:0b:2f:3c:65:37:41:79:61:90:59:8f:
                    5f:d7:b5:d3:3a:68:69:f0:d1:36:58:24:65:79:a7:
                    69:3c:f6:71:db:d2:98:a4:9f:00:61:eb:b8:37:66:
                    47:80:a7:35:b2:a0:f6:5c:1c:bb:94:c3:04:af:d2:
                    11:41:df:a1:52:e4:69:40:20:96:b4:02:b7:79:cd:
                    25:e0:0a:02:0b:2a:0a:ad:35:26:55:59:2e:58:39:
                    16:ed:68:42:a3:bb:9a:32:49:f4:0d:9a:7e:73:e5:
                    7f:37:ad:44:c8:54:aa:3a:2e:20:8e:5d:e3:48:c4:
                    a7:b5:e3:25:e5:70:30:f7:3a:08:02:aa:2c:13:ab:
                    33:b1:d4:33:c1:50:18:27:fa:49:69:66:68:89:a8:
                    01:4a:93:46:87:d0:6b:1f:cd:ad:b3:d5:b2:04:85:
                    cd:ab:2e:df:1c:57:49:33:cb:a9:b8:67:14:b4:c5:
                    a9:c0:8b:0d:bc:2f:89:7c:37:4a:de:15:1f:28:15:
                    c5:06:cb:06:31:20:7e:0a:2b:b0:d6:15:f0:c6:75:
                    0c:8d:58:60:31:8d:99:3a:d4:cb:0e:1a:aa:f2:94:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A7:9B:91:C2:67:74:FA:1A:7E:42:69:99:E2:63:B2:94:9A:73:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f542f7a7-f5f9-36ad-9b74-ef92d136ad83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.70.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:26:6e:4f:ed:40:94:2f:18:ba:5d:19:52:f4:e5:ad:86:
         b9:48:46:66:4f:0d:79:89:6a:dc:c7:ed:a6:3d:22:dd:d0:9e:
         9d:d6:6d:1f:95:66:90:f5:e5:e7:e3:e6:a9:0f:19:43:fa:1e:
         b8:ac:9a:18:b1:9e:08:38:87:83:73:e6:c3:cb:b2:f4:ea:8e:
         19:e8:6d:dc:a4:83:2b:18:e1:94:45:3e:2f:7b:29:b2:ab:59:
         d3:29:07:a7:7b:28:e4:ee:c3:63:29:8c:94:aa:fa:5c:54:2c:
         d9:b7:d3:e6:11:47:3e:db:c6:47:96:e2:4c:80:73:37:09:4a:
         c3:55:ae:14:c5:cc:52:9a:38:bb:d2:a8:e9:b6:f3:59:0f:37:
         7f:ff:29:2f:40:9b:bc:9c:39:b5:40:65:24:b9:48:0d:b5:25:
         c3:d0:ee:8a:2e:87:08:ba:75:4a:5f:24:f4:dd:5e:10:1d:ed:
         17:0e:b5:d1:99:c7:3b:23:72:4c:40:12:c4:60:64:e8:00:2a:
         c3:ec:7b:fe:36:c6:a2:ae:ae:f7:7c:38:ba:5f:f1:dd:28:47:
         c7:d2:92:9f:d2:d6:e1:ec:ad:4d:ff:6e:93:cc:47:df:c8:34:
         3f:ea:27:b2:ff:cc:4e:b4:71:5d:86:03:8d:b5:9a:8a:9a:45:
         27:25:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:40 2024 by rpki-client on console-ams.rpki-client.org