Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/28f25892-51a6-3f63-92fc-b32b3c8570ad.roa
File:                     28f25892-51a6-3f63-92fc-b32b3c8570ad.roa (raw, json)
Hash identifier:          x1XeUkCoXGKkIzRVO7Y9OBdcY2tMWkK0XGmjkIBoimQ=
Subject key identifier:   91:40:99:B1:DE:98:12:23:18:85:31:AC:F6:24:3F:D2:BC:25:5E:F6
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F43285847924BDC046378F7E656B86BF0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/28f25892-51a6-3f63-92fc-b32b3c8570ad.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     20068
IP address blocks:        104.223.44.0/24 maxlen: 24
                          155.94.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:dc:04:63:78:f7:e6:56:b8:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=9cd43c7e-e9a0-4773-9535-df7b1cb7410f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:28:07:d3:26:40:f0:de:8e:74:cf:f2:3c:
                    cf:eb:68:6e:47:e0:cd:99:ad:77:2c:73:90:72:ac:
                    17:fb:45:6d:e5:44:d1:ba:a9:49:79:49:7b:17:de:
                    eb:27:5d:aa:4d:d3:3b:bc:b2:93:dd:6b:25:60:36:
                    89:42:63:ee:9e:a1:9c:fb:0d:c0:f1:6f:cb:bf:d8:
                    fc:6b:cb:00:0b:58:90:fb:a0:7f:7f:7d:3c:cf:13:
                    a9:31:1a:db:71:c6:44:f1:c2:87:de:a9:47:da:0a:
                    4f:74:ef:3d:39:07:18:bf:53:dc:00:62:5b:74:2f:
                    62:e6:55:c5:b8:f8:8d:d3:9b:52:d3:99:49:94:ce:
                    43:f5:32:3a:82:1f:f3:73:15:ef:da:8e:b2:88:96:
                    78:29:70:1b:24:a4:28:ad:97:e5:a5:54:31:e7:d8:
                    10:d2:bd:73:aa:2f:96:65:5a:9f:08:69:d0:c1:19:
                    88:76:99:6c:79:eb:ae:1b:33:b7:84:51:53:84:e7:
                    42:96:11:8c:f4:3a:c6:5d:51:8c:5f:61:1f:a1:a2:
                    8e:d0:ec:36:e3:be:77:bc:85:58:79:8e:30:39:72:
                    12:75:21:50:33:a8:b4:cb:2f:f8:2e:a3:6c:67:54:
                    1d:32:ec:9f:ce:36:d2:88:92:c9:55:2c:e5:f6:33:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:40:99:B1:DE:98:12:23:18:85:31:AC:F6:24:3F:D2:BC:25:5E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/28f25892-51a6-3f63-92fc-b32b3c8570ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.223.44.0/24
                  155.94.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:b4:1f:3f:1a:17:a4:25:e9:35:ca:f3:dc:0a:19:39:24:
         c3:e0:d4:06:25:ba:33:49:c6:f8:2d:f9:a7:a4:11:cc:90:b2:
         b5:df:46:44:db:f7:fa:d2:13:a2:c6:57:2a:10:4f:ba:42:a8:
         a3:61:48:a5:ea:b3:71:d6:3f:16:f7:16:87:e8:53:94:8e:b3:
         7a:79:90:c0:e4:74:b9:eb:cd:09:c9:28:d7:2d:1c:76:c9:a5:
         57:2a:94:96:c6:3b:fc:dc:4f:29:bb:e1:63:58:23:9b:cb:fd:
         2c:e7:8e:7c:02:48:2f:df:0a:1b:eb:37:f9:c1:fb:33:ff:bd:
         35:35:3c:8e:3c:14:7d:53:b4:dc:f3:4f:39:bd:32:22:07:f1:
         90:c9:90:6c:8d:17:12:17:9f:1b:24:d2:67:5f:97:44:ad:dd:
         bd:72:df:21:da:ab:4f:62:30:a6:c0:a0:47:5e:63:57:4f:ef:
         c2:32:01:5a:1f:8f:e0:e4:cf:8e:bb:7e:a1:42:37:6c:2f:39:
         b6:ae:00:ea:0a:41:33:4e:0d:97:3c:b7:aa:8f:c9:f4:97:36:
         20:2f:15:9d:9c:ac:30:4b:cd:6d:b0:c6:72:e8:af:06:95:ab:
         cd:bc:b6:ff:7d:f8:92:b3:96:73:24:e7:d9:3a:ef:41:4f:12:
         72:84:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org