Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/00a0fd58-547b-3598-b844-3385c2f1787b.roa
File:                     00a0fd58-547b-3598-b844-3385c2f1787b.roa (raw, json)
Hash identifier:          LcYG/M3lzaBE0/teyJFZGkL5irQfVRwxeu9K9QVsJZc=
Subject key identifier:   70:6E:95:0F:DE:58:21:59:20:A8:8A:16:EE:66:2A:EA:86:CB:34:81
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F432858454AD2D03EE002B785003DBA80
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/00a0fd58-547b-3598-b844-3385c2f1787b.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     10996
IP address blocks:        104.37.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:d0:3e:e0:02:b7:85:00:3d:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=b0f4c211-3ad7-4091-a473-e580c2db1595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cb:34:a6:f0:da:cd:7c:ac:c8:38:87:d4:c4:
                    d8:60:70:16:1e:d2:8b:2f:1b:4a:ff:5a:cc:64:d8:
                    64:73:87:bd:d1:6f:8f:44:4e:83:0b:89:33:27:46:
                    de:31:ef:64:62:2e:63:4f:d9:0d:26:08:ef:1a:13:
                    17:68:7a:86:3e:d6:70:59:f9:2b:eb:a3:4e:52:b4:
                    fe:49:83:a1:d1:8f:cb:21:be:0c:27:2d:67:f2:7a:
                    19:3c:b2:67:cc:26:4f:65:0a:d5:a5:a3:5f:ab:bf:
                    22:c6:95:2c:d7:1a:41:7a:50:89:25:f7:7a:ba:02:
                    d5:53:1d:0a:05:dc:7e:de:6d:f2:7d:ac:88:42:23:
                    3e:96:32:0a:c5:69:22:fa:ff:bd:f8:ae:9f:ac:13:
                    3a:8d:4b:14:1c:75:1b:c9:fb:4e:85:2d:d0:c7:c7:
                    f9:d7:5b:be:60:b4:31:68:74:71:76:84:39:a1:f9:
                    14:fc:5c:6b:89:75:ad:6f:16:03:af:31:03:b7:b5:
                    45:b8:96:29:d2:9f:59:53:ac:13:55:5b:72:d9:1e:
                    36:ae:ae:24:e7:94:06:43:f9:05:0e:1e:c9:84:90:
                    19:cd:cd:58:5a:0d:3d:0b:16:c8:1c:b2:d2:03:f7:
                    88:c2:85:25:5c:32:73:1c:ca:ac:ca:24:c9:5b:1a:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6E:95:0F:DE:58:21:59:20:A8:8A:16:EE:66:2A:EA:86:CB:34:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/00a0fd58-547b-3598-b844-3385c2f1787b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f4:e1:a1:2c:24:40:c8:60:f2:22:38:0e:0e:63:54:c3:c3:
         02:1e:1e:9f:f4:bd:de:4b:98:52:5f:5c:25:84:49:82:ab:bd:
         56:ba:82:7e:ce:74:c5:df:1b:ff:29:59:f8:14:46:58:f8:b1:
         91:a9:6f:8b:d2:25:8c:1b:c7:94:c2:d7:af:16:36:0a:e1:b5:
         df:35:cc:8a:c5:7b:ce:fc:71:be:f6:b7:19:fa:ef:d0:4c:58:
         9c:07:d9:0a:91:0b:aa:af:bf:54:d5:4d:8b:a4:8d:d5:81:e2:
         7c:11:ba:df:d4:88:ab:d2:a6:08:8a:88:67:01:1b:f8:b9:13:
         f7:61:cb:c2:e3:eb:e1:28:c9:df:87:f5:87:d2:f7:cb:41:d9:
         d4:8d:6c:32:36:32:47:9e:cc:75:a2:f9:c3:2a:4e:1a:bf:ee:
         5c:36:af:20:f8:07:18:f4:18:06:79:44:46:18:9b:ec:46:0c:
         0b:75:57:b4:b0:b7:50:b3:87:c9:4b:4a:a0:2c:56:a3:15:a6:
         3b:0a:ca:f6:df:e6:96:71:67:22:dc:12:67:3d:59:63:f5:8e:
         b9:39:c9:94:73:e1:3d:1f:33:59:be:f8:ad:5f:a1:33:bb:c3:
         eb:93:32:81:c3:5a:05:0b:f2:8e:29:b2:69:aa:8d:a9:f3:0b:
         79:13:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:13 2024 by rpki-client on console-fra.rpki-client.org