Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa
File:                     b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa (raw, json)
Hash identifier:          HUvywapufmBUktLcwODeDq3ZdqsueHwefVWem5yf2jc=
Subject key identifier:   4F:01:A2:30:5E:6E:87:07:8E:4C:A6:2A:71:0A:1F:A5:19:08:70:5B
Certificate issuer:       /CN=d84d90bc-9144-4684-9270-edf2e53d3879
Certificate serial:       010D0C9F43285847E35F72F7316207D35E7EA320
Authority key identifier: 9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     5065
IP address blocks:        104.247.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:72:f7:31:62:07:d3:5e:7e:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84d90bc-9144-4684-9270-edf2e53d3879
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=a07c0ab4-5904-48fc-8352-256f37a5d60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:f8:21:30:71:18:f8:54:83:26:ad:56:16:
                    af:3e:3f:07:32:2d:b6:4b:2b:3c:bc:6d:3e:7d:bf:
                    81:62:8c:74:57:bd:f0:19:5c:ee:87:6e:a9:c1:c9:
                    d4:c3:fa:c5:1c:63:87:60:04:60:08:88:30:a5:c2:
                    80:11:b5:25:7a:9a:a2:6a:fd:58:38:24:78:58:7c:
                    bd:ab:25:d5:89:d2:31:07:3d:74:67:7d:c0:32:32:
                    4b:42:b3:aa:70:c8:f0:3a:6f:5a:67:d4:ad:e1:91:
                    0f:b2:d0:99:d9:65:8b:9c:c0:e8:2c:87:50:52:9a:
                    ec:d0:8f:65:ba:ad:25:d7:26:6c:cd:36:fa:1a:64:
                    75:45:cb:47:67:4a:d8:98:eb:c5:2d:43:8e:06:c3:
                    68:4d:73:b0:9b:f5:53:48:1f:28:15:21:ae:d0:14:
                    33:20:6d:96:9d:be:5b:09:c1:ed:06:9d:76:db:b3:
                    14:08:55:07:15:71:00:94:91:4c:e8:1d:3e:b6:be:
                    12:f3:b5:fd:30:7a:6e:a7:2f:de:99:da:38:ec:fb:
                    de:5f:e2:4a:2b:b9:c0:78:ed:aa:b9:0d:5e:93:58:
                    7e:f4:e1:97:54:88:8a:13:99:03:65:74:4e:58:b7:
                    7f:3a:4e:fc:d3:6b:09:a8:23:b5:8e:15:2f:c7:ad:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:A2:30:5E:6E:87:07:8E:4C:A6:2A:71:0A:1F:A5:19:08:70:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/b0204fe4-e9f9-39bd-9e9f-12d269d2c93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.crl

            X509v3 Authority Key Identifier:
                keyid:9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:b3:4b:84:2d:2f:48:60:39:c8:12:4a:02:16:9e:23:66:
         04:e2:59:c4:fd:f7:02:28:9a:c2:a3:9b:71:2c:cf:37:70:c6:
         e5:6b:9f:05:78:28:8b:24:fd:12:d4:03:b0:f2:43:67:a3:83:
         e1:e1:1c:42:96:4b:89:3a:51:a1:b3:74:40:8f:82:2c:9f:29:
         5b:3c:23:d5:73:42:83:4a:47:24:0b:c2:97:7d:f2:e1:fa:ab:
         5b:72:4e:83:b3:b0:73:fd:48:d2:dc:59:77:43:a2:f9:ed:b7:
         8e:1f:d7:8e:6c:b4:fd:85:dc:61:a9:1a:22:f0:11:90:0b:7e:
         e9:f1:26:10:08:0e:76:b4:54:53:e6:2e:70:5b:8d:55:09:f9:
         d3:4c:0e:7f:59:7c:da:07:11:08:18:39:8f:31:d9:c3:e6:42:
         f7:e9:ce:23:3a:27:5d:33:95:ef:ad:36:ab:31:0b:5a:df:05:
         c9:78:c7:d5:0d:1f:c2:90:a3:14:2d:e5:22:ce:87:44:46:af:
         ea:fb:30:eb:e4:af:91:29:29:df:1c:6a:00:b5:f8:59:dc:09:
         ba:04:d2:38:e7:69:e0:ff:9e:52:53:7b:f4:c5:b9:c6:3b:20:
         92:36:32:c3:cf:53:14:10:00:28:4f:aa:43:70:35:6d:e6:bd:
         d9:48:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:17 2024 by rpki-client on console-ams.rpki-client.org