Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa
File:                     89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa (raw, json)
Hash identifier:          zq2y1iw6vzqOZFUQ2GVT5K+4dt5ZAVKA97IHtwGcXlU=
Subject key identifier:   31:0E:75:09:98:37:82:71:12:18:07:E5:D3:37:3E:08:1E:5B:78:EA
Certificate issuer:       /CN=f07b485c-efcf-472d-9a69-ff56ca77fb4c
Certificate serial:       010D0C9F43285847B2669AA2F4CBB5D8BFA43B40
Authority key identifier: 6B:59:7B:EB:0D:65:71:87:ED:8D:BB:A1:08:31:60:53:35:CA:A2:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
ROA not before:           Tue 29 Oct 2024 01:00:32 +0000
ROA not after:            Mon 27 Jan 2025 02:00:32 +0000
asID:                     395945
IP address blocks:        104.36.72.0/22 maxlen: 23
                          2604:7840::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:66:9a:a2:f4:cb:b5:d8:bf:a4:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07b485c-efcf-472d-9a69-ff56ca77fb4c
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Jan 27 02:00:32 2025 GMT
        Subject: CN=18e3c3ef-9d67-4f2c-a4d8-56a99c41b6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:fc:fe:fb:be:9f:c5:14:66:f0:d5:2c:bc:
                    cf:03:ef:ac:6b:12:4e:15:09:f0:9d:88:9f:21:23:
                    17:c2:4b:bb:d4:4a:3e:76:b8:c3:9a:da:b9:12:1c:
                    8c:79:35:b4:f5:29:df:08:6a:8d:a1:5a:2e:b5:c4:
                    50:aa:2f:43:87:1f:8a:b7:4b:eb:7c:17:6d:73:18:
                    64:0c:b0:cc:cb:a9:ff:c9:07:d9:8a:ab:cc:56:99:
                    58:c4:76:4a:28:6e:9f:1c:ba:db:19:7d:e5:ac:81:
                    5c:71:7e:b1:3e:43:b5:d3:6b:8c:95:f0:a6:de:e0:
                    41:85:ce:e1:a7:25:b9:45:3a:68:1f:34:af:c4:15:
                    b2:0b:cf:89:7b:66:88:53:0a:46:bc:e0:48:70:14:
                    24:b0:78:e4:3f:10:28:3d:d2:4d:9d:17:04:f0:9b:
                    a7:9f:3b:a5:c2:f4:9e:ef:b9:a6:85:10:5e:e5:aa:
                    f3:8c:34:b3:d7:91:c2:09:59:af:d4:65:09:75:8b:
                    7e:7b:8b:3a:fd:c3:42:fb:e4:be:36:7d:14:b4:a4:
                    f4:a9:fb:28:48:57:ca:62:bc:8a:f1:9c:8b:d0:22:
                    97:e1:61:fb:ed:96:46:db:68:1a:c5:f3:9f:9b:e1:
                    0a:2a:84:b6:1a:7f:37:44:55:77:5b:80:63:ac:a0:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0E:75:09:98:37:82:71:12:18:07:E5:D3:37:3E:08:1E:5B:78:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/89e6e84c-745b-3d51-b228-ad389a8e3d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c/f07b485c-efcf-472d-9a69-ff56ca77fb4c.crl

            X509v3 Authority Key Identifier:
                keyid:6B:59:7B:EB:0D:65:71:87:ED:8D:BB:A1:08:31:60:53:35:CA:A2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f07b485c-efcf-472d-9a69-ff56ca77fb4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.72.0/22
                IPv6:
                  2604:7840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:01:4c:ef:f0:a9:8b:c0:54:d7:1b:b8:ef:4f:4f:66:cd:b6:
         80:ca:e9:f9:d5:a7:94:d4:56:4a:7a:e9:04:8a:14:5a:b5:f8:
         eb:7a:aa:1a:55:fe:c2:87:f0:28:fe:fd:98:a6:3c:c2:6f:4a:
         02:c9:19:60:53:08:4d:8e:0a:fd:90:5c:7e:cc:ff:5a:25:9c:
         9b:f2:99:1b:99:59:f3:f8:b2:11:2c:c3:b6:b1:4d:fa:29:52:
         1e:31:63:98:9e:9d:e2:48:23:f6:5d:84:ca:21:2d:78:ee:ef:
         bc:3c:e0:5c:f5:c0:01:81:e8:35:26:30:17:5e:23:97:88:42:
         7c:44:6a:53:aa:f2:e9:28:81:ee:73:58:2b:c2:f0:7f:9b:8c:
         e0:10:b1:7f:b1:c5:dc:81:f6:34:78:49:5b:e1:92:0c:46:aa:
         c4:6a:5a:9f:81:49:23:ca:82:6d:13:13:d2:d7:e2:f7:09:22:
         a5:18:90:97:ca:48:0c:86:03:8b:4c:68:d9:ed:00:90:b3:d7:
         ef:58:5f:da:bb:d6:3f:36:0a:4b:f3:52:fa:ad:89:51:50:9b:
         0f:10:50:93:d7:3e:8a:22:08:d9:5c:4e:05:0d:2e:b4:7e:c9:
         8d:08:56:31:c2:1f:5d:44:38:f6:dd:22:11:4c:db:06:8b:97:
         61:5b:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:33 2024 by rpki-client on console-fra.rpki-client.org