Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/60865740-d45e-3574-8042-7cfae34971b4.roa
File:                     60865740-d45e-3574-8042-7cfae34971b4.roa (raw, json)
Hash identifier:          WJhq9mTYklEnITNnYwchAYEbu+g9MVQRe9I/QvCQbro=
Subject key identifier:   98:A7:86:41:B7:32:49:83:49:C0:A3:E1:BE:8A:93:0C:62:9C:D6:76
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F43285847B101675BD8320FE598493300
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/60865740-d45e-3574-8042-7cfae34971b4.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     32931
IP address blocks:        104.219.168.0/23 maxlen: 24
                          216.126.56.0/24 maxlen: 24
                          216.126.59.0/24 maxlen: 24
                          2606:1880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:67:5b:d8:32:0f:e5:98:49:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=a91df94e-f6ca-4378-9da6-177a321919a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:3d:74:52:67:de:45:94:07:35:e3:62:52:
                    58:f9:4c:a6:59:90:9f:6c:b4:9e:9b:7e:59:3f:87:
                    90:08:b7:23:ff:87:f1:ae:e3:8d:9b:60:d2:e7:46:
                    75:f7:cc:3d:5d:00:c1:66:18:ca:09:45:b6:0c:e4:
                    5f:7e:64:8c:2a:c8:f7:4a:e8:f3:cb:75:70:30:65:
                    e9:84:55:90:2d:b6:64:1c:17:33:f4:35:b3:21:c5:
                    76:8d:19:f3:84:ac:28:13:54:8d:85:b2:2c:d3:02:
                    64:22:6e:68:b2:ff:b4:1c:3d:b7:e3:72:b8:dc:3c:
                    4a:2c:4a:c8:a2:20:b2:48:59:ca:70:82:e9:79:61:
                    7c:bd:8a:f3:e7:e7:39:65:97:6b:bf:9d:af:01:27:
                    bc:bb:39:39:7c:51:71:15:3d:5c:90:74:72:2d:b2:
                    e6:f1:cb:0e:5d:05:5c:f7:05:d8:21:90:69:e2:e2:
                    5b:1b:a3:b7:09:60:5d:00:09:8b:e1:64:73:0d:70:
                    f2:6b:0e:86:d2:97:1a:3b:86:50:cc:7b:32:9a:31:
                    5a:10:36:9b:56:e1:42:1e:5a:6e:7e:f1:10:25:56:
                    a6:25:ff:7e:e2:4f:6e:91:78:25:b9:4a:51:2f:7d:
                    22:02:6b:bc:4a:1f:7c:02:87:ae:27:53:5b:3b:95:
                    0d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:86:41:B7:32:49:83:49:C0:A3:E1:BE:8A:93:0C:62:9C:D6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/60865740-d45e-3574-8042-7cfae34971b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.168.0/23
                  216.126.56.0/24
                  216.126.59.0/24
                IPv6:
                  2606:1880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:53:6a:be:a8:1f:ef:9a:d5:70:72:6a:a0:59:3a:d1:31:
         77:6b:a7:db:5c:e5:0d:58:97:3f:b2:ba:d6:f9:85:c4:14:63:
         58:96:08:13:a7:4a:09:55:37:93:ac:c2:80:03:4a:4d:d7:34:
         66:95:90:72:21:55:29:0b:4b:81:65:b9:45:35:6b:06:2e:f5:
         44:91:a4:30:6c:c2:e0:ec:44:c9:0d:ee:b4:82:5d:a4:df:df:
         13:65:86:80:2a:62:d3:ab:c9:28:b9:f2:f8:da:a7:4a:8d:62:
         c3:5a:d5:bb:16:eb:94:07:a7:eb:d8:7d:82:40:6d:82:fb:93:
         74:d8:12:c8:60:ef:34:a9:5b:4b:a7:ee:8f:cc:cd:a0:c2:44:
         ac:74:2c:f5:58:60:e7:bd:39:f0:22:21:ae:fd:00:4b:28:1b:
         cd:02:ac:35:db:1e:1b:36:fb:da:59:3b:79:ef:e6:fc:8f:e8:
         0b:de:8a:01:25:53:12:1f:76:fc:08:20:18:27:e9:53:10:d5:
         26:ff:33:80:d7:5e:ce:9f:51:3b:10:70:bd:00:d5:6e:f8:13:
         1c:e1:be:ab:7a:4e:9e:5e:42:e1:fb:6d:3f:c8:54:a0:93:c9:
         f9:fc:9d:58:62:e1:13:88:e7:ec:76:70:d2:a8:c9:c3:6b:f8:
         17:7b:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:03 2024 by rpki-client on console-ams.rpki-client.org