Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa
File:                     9b494297-3222-3843-851d-68c7c1744624.roa (raw, json)
Hash identifier:          BqYC+Xd7eCv06Yqy0AkdhstZzfHL3f7KwZ58trg1UP8=
Subject key identifier:   1D:59:3E:17:0E:8F:72:04:0C:EA:40:78:B1:18:4C:22:9F:49:07:86
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F43285847A30BF5C276D44554CF032130
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     21743
IP address blocks:        104.247.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f5:c2:76:d4:45:54:cf:03:21:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=6b001270-c496-42d9-ab85-699ae6670bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:7b:62:79:45:34:13:79:68:30:b4:5b:30:
                    10:71:0d:a3:b5:0c:5d:68:64:96:37:f9:ba:f3:ea:
                    58:03:1d:67:27:95:09:ce:76:fe:50:70:75:73:68:
                    c8:d3:20:c3:0a:3e:ca:03:2d:bc:d9:9b:a7:f6:c5:
                    a2:3d:d2:02:4d:e1:5c:f1:f3:cc:d7:04:63:db:71:
                    b7:ca:ec:d9:15:b5:dc:27:a5:22:f2:79:e1:1c:da:
                    cf:7b:3c:78:51:73:87:5c:70:4f:64:78:fc:64:70:
                    30:3c:da:5c:a7:06:81:e6:4c:27:42:05:e6:08:1f:
                    db:ed:11:4b:c1:ee:4d:a2:34:6e:09:2e:38:24:61:
                    c9:f4:fd:e8:49:dc:25:92:c7:54:92:a4:b5:5e:22:
                    30:f1:fd:86:6d:c4:9b:34:ed:1a:bd:64:d8:06:af:
                    f5:0c:84:76:57:e4:21:65:17:aa:c4:8b:9a:62:27:
                    31:af:a1:b4:b3:09:a6:3f:6f:c8:d3:5a:94:23:3e:
                    c8:a5:41:52:ce:95:1a:79:d7:63:c8:54:16:d8:f0:
                    7b:7d:b7:6c:b9:ba:6f:de:76:b6:37:87:6d:08:33:
                    92:66:57:d4:43:d1:85:61:38:8d:42:32:ca:21:9a:
                    7f:f1:93:05:29:0f:fc:c1:8b:47:82:2f:27:df:f7:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:59:3E:17:0E:8F:72:04:0C:EA:40:78:B1:18:4C:22:9F:49:07:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:40:26:87:6a:6d:40:d4:0b:5b:59:f7:ee:05:db:be:be:f5:
         51:f7:a4:e8:5e:68:d1:c7:f1:0e:ca:89:dc:39:2b:80:b8:5a:
         26:ff:f4:8b:84:13:b5:31:2e:21:c8:78:b9:90:00:ff:74:bb:
         39:39:ff:c4:6a:5c:d3:f5:fb:bc:c5:0f:a2:f7:48:2b:32:bc:
         01:da:d9:3b:ac:cf:84:6d:d6:1d:76:09:a9:c1:bc:de:ed:de:
         95:31:cd:d3:6a:12:f3:07:7f:e6:90:1e:f8:d6:84:17:ca:05:
         68:e2:8f:93:f1:86:4a:b9:7c:65:87:3c:be:6f:92:ec:87:50:
         79:13:a0:2a:9c:5d:33:df:22:1c:cb:a6:f1:db:77:df:d3:79:
         f5:3d:74:6f:10:84:65:e8:e8:50:98:0c:19:32:f9:f6:65:c2:
         6f:9d:a2:f6:60:fa:8d:25:2e:62:99:fb:4e:b6:18:a2:ea:7c:
         23:b4:ef:59:d6:35:e1:0e:4a:34:5c:b5:37:2c:f3:b8:9e:ea:
         dd:ec:c5:89:02:c9:39:a0:f5:77:3f:43:2a:48:e2:e0:8f:6d:
         35:67:5f:eb:ed:e6:4b:a3:08:1e:20:d7:ba:3a:45:37:df:fc:
         dd:8c:a7:ab:56:e3:04:c3:53:17:85:c8:93:91:7e:8c:31:4a:
         b4:a3:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:40 2024 by rpki-client on console-fra.rpki-client.org