Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa
File:                     a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa (raw, json)
Hash identifier:          Ywv+Rcxu4wJFs1IrZPFmNxil6cirjGv3H0WhYdF5O+I=
Subject key identifier:   0C:96:5F:D9:39:BE:CA:7E:3C:DE:F2:B5:91:F4:1A:B3:24:72:E0:DA
Certificate issuer:       /CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
Certificate serial:       010D0C9F4328584754E0E25370B13BD928A9B500
Authority key identifier: 76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     14588
IP address blocks:        104.219.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e2:53:70:b1:3b:d9:28:a9:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=5caaedc9-2397-473b-8182-976d42532aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4e:02:07:e1:34:3c:42:ec:41:67:29:d4:cf:
                    ff:27:4a:a5:58:7d:5b:1c:12:61:35:84:a9:2d:e0:
                    da:35:08:11:0c:51:16:d9:f0:00:10:7f:c3:c7:33:
                    26:14:fb:c9:76:cf:0d:8a:13:df:e3:cd:e2:63:38:
                    c8:8c:54:db:aa:c3:ad:be:c6:aa:7b:59:b5:e4:14:
                    c4:c5:38:49:77:45:16:06:49:0d:c0:84:6e:a8:2f:
                    95:09:61:e8:3a:d2:84:31:46:bf:13:cd:c1:6a:a7:
                    05:d2:79:cc:99:9e:01:bc:14:07:9f:83:8a:e4:a1:
                    1f:0d:54:19:bd:a9:e7:9d:e4:27:8f:f9:f6:06:ec:
                    ac:f6:17:e3:a4:68:2a:36:90:20:51:bd:24:a6:56:
                    30:15:5e:d2:8e:9a:5b:43:49:80:ff:92:90:ce:94:
                    03:f9:44:5f:e5:73:aa:5d:7d:ba:b4:34:3d:32:4b:
                    4d:db:a4:4d:04:87:2c:1a:3f:82:37:f8:4f:7d:f6:
                    ac:ed:af:cd:05:13:41:a2:53:a6:55:86:34:d0:b4:
                    02:75:07:bb:98:d4:b9:0a:33:d5:d4:af:66:94:5c:
                    33:3d:9f:d6:22:f1:57:95:7a:e0:66:40:6c:0d:02:
                    37:6d:89:75:c7:3f:3b:04:82:c8:21:22:d6:da:56:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:5F:D9:39:BE:CA:7E:3C:DE:F2:B5:91:F4:1A:B3:24:72:E0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl

            X509v3 Authority Key Identifier:
                keyid:76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:0b:c6:8f:13:24:b2:74:96:23:ed:f1:d4:47:02:1d:6c:
         1b:89:da:3a:2b:55:eb:5a:52:54:f0:31:01:64:2d:e1:f9:ad:
         ba:1b:69:d1:c4:72:e8:2e:ce:f2:f3:cc:48:5d:2b:e2:54:cf:
         48:47:2b:2a:c5:f8:2d:3a:98:9b:46:e2:5b:bc:d3:1d:3e:08:
         38:ec:3b:46:a8:3f:5b:09:7c:1d:82:c0:52:21:32:ec:04:4c:
         55:e4:12:6c:7c:96:41:59:bc:f6:f2:f9:6b:4d:a2:5f:e0:b0:
         f9:4f:fc:7a:45:a2:77:37:b4:c6:a5:37:9d:f6:7c:9f:ca:a1:
         6d:0d:b9:81:15:eb:33:9a:31:6f:8e:20:88:71:8f:69:48:09:
         37:ee:ad:3a:e4:a4:c7:a8:03:29:15:6c:5e:f6:4c:d9:48:93:
         9e:12:1f:eb:08:1f:82:6d:b7:47:7c:cc:bd:d2:35:e0:10:d3:
         b2:37:05:f2:ca:24:c9:22:11:fc:32:8d:78:6b:28:7a:3d:82:
         c9:4b:37:d7:71:d6:0e:8c:e9:ae:7f:f3:09:dd:47:de:70:2b:
         7e:9b:99:2c:6c:70:fa:78:25:8b:d9:22:c8:27:5a:35:7a:4b:
         a4:2d:bb:bc:87:72:86:26:2b:73:61:0a:a2:cf:7f:a6:85:d9:
         a3:53:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org