Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/605cb406-8c49-3399-99e1-f5dd8da59193.roa
File:                     605cb406-8c49-3399-99e1-f5dd8da59193.roa (raw, json)
Hash identifier:          8QnZ6FB6kBstODOP8IX17ouGv5Ju4nQzGR81B50lfwk=
Subject key identifier:   37:A4:A7:57:84:EB:45:D4:D0:44:5D:83:E5:45:7B:4A:02:0C:3D:AC
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285847739657A2D5A7291F15DF9F20
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/605cb406-8c49-3399-99e1-f5dd8da59193.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     7922
IP address blocks:        104.171.160.0/20 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:57:a2:d5:a7:29:1f:15:df:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=84dcba84-be65-4e13-8466-4772cbd59717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:b2:e7:ac:d4:fb:05:da:21:57:68:b4:16:
                    08:11:26:cd:69:24:cc:3a:b4:94:26:0f:3e:a9:c2:
                    f9:57:27:3f:87:15:33:9d:b0:69:09:ba:05:7d:4b:
                    ba:2b:b1:eb:a5:73:8c:18:8e:91:a8:c8:db:10:2a:
                    d8:14:29:f1:ed:80:87:81:db:67:36:7d:72:8e:fb:
                    fc:72:bb:c8:95:d7:f6:46:de:70:9b:74:d3:34:59:
                    ff:a1:2e:47:61:7a:dd:13:ea:a5:48:02:12:98:cc:
                    9b:90:c7:e9:88:0f:b9:b2:32:6a:ee:05:68:be:d0:
                    be:ee:97:6d:ae:c9:14:c6:d2:c7:fa:17:ef:c6:46:
                    2b:66:4f:6f:38:6e:2f:ae:dc:d1:3d:97:7d:17:b1:
                    d3:67:47:4a:ed:b4:38:67:27:94:ee:ed:e7:1e:7f:
                    be:0b:62:dd:4d:2f:ad:c1:35:a2:d5:04:cc:39:c8:
                    e4:3f:e4:46:21:7f:c8:cd:e2:d0:27:30:fc:c1:79:
                    b6:f7:25:39:f5:5d:e5:6d:d7:70:de:9f:7f:c5:b9:
                    66:a7:62:18:98:c1:4d:31:d9:9b:bb:47:98:00:a1:
                    41:f0:b3:4d:34:ef:2d:ed:92:cd:c4:a4:32:93:21:
                    1e:02:79:58:2d:3e:2a:c2:17:f1:b7:64:3e:fa:15:
                    4f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:A7:57:84:EB:45:D4:D0:44:5D:83:E5:45:7B:4A:02:0C:3D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/605cb406-8c49-3399-99e1-f5dd8da59193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:70:d1:c8:da:09:2c:6f:98:f4:5f:76:a4:fd:06:38:a6:3b:
         b9:57:1d:c0:0b:f4:15:01:5c:20:79:00:47:2c:40:cd:3f:2c:
         1e:f8:e7:1f:bd:d1:70:5d:19:7d:4a:0a:64:02:4d:35:ef:db:
         fa:d8:3c:b8:1f:f9:0f:ef:0b:13:e2:aa:d1:43:43:8e:07:9b:
         7a:ba:1e:bf:ce:e2:d9:19:17:75:c3:df:31:97:36:0f:49:a5:
         c8:c8:4f:f3:c1:df:3d:04:a7:8a:e6:f4:e9:ba:b5:6a:87:82:
         1e:66:b5:1a:a7:19:44:23:65:b6:51:93:82:49:09:93:14:21:
         45:d4:fc:84:40:2d:91:98:b6:7d:3c:4b:5e:c7:ab:2b:31:f7:
         60:88:fe:9b:66:93:b8:18:d1:72:90:08:ef:0d:16:7d:df:9d:
         5f:ac:e6:74:be:7f:a5:46:e2:1d:d3:72:80:92:e5:a0:a2:11:
         8d:e7:3f:f1:c8:94:a3:d1:71:ae:45:a3:b9:2b:cb:1d:aa:9a:
         91:56:79:2f:cc:21:a1:7e:ef:8a:2a:5e:b1:1e:97:09:f6:71:
         7b:7f:10:f6:e8:17:03:f3:2c:2d:f0:73:12:83:20:8c:df:19:
         e5:a6:9a:52:18:2b:b6:40:04:59:21:4b:92:31:3b:d5:3a:cf:
         1b:12:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:20 2024 by rpki-client on console-ams.rpki-client.org