Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa
File:                     2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa (raw, json)
Hash identifier:          2bIRp//QeR9NyiQtLCYwCJxPm6N237KOt2gm93+Hous=
Subject key identifier:   D4:EF:B1:4B:2E:56:00:24:05:E9:C8:48:46:1F:70:99:60:62:E1:B0
Certificate issuer:       /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
Certificate serial:       010D0C9F432858471E7066D4355CEBD7BD7DFBC0
Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     36352
IP address blocks:        104.166.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:66:d4:35:5c:eb:d7:bd:7d:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=cc5feca2-d391-423a-872b-d8771ffd6e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:5e:ed:88:d1:85:71:af:a1:11:26:de:ce:
                    6e:72:11:26:bd:51:20:00:c1:b9:75:31:3a:da:39:
                    37:fe:c0:30:19:1a:cc:17:09:6f:2b:7d:13:89:af:
                    b7:64:b1:75:cf:1a:df:74:ff:cc:0e:21:67:12:e7:
                    8a:48:c5:50:79:a4:28:4f:7e:80:bb:3d:09:1d:b6:
                    b9:1d:c7:85:61:f0:a6:00:4c:67:75:cb:27:5d:4f:
                    68:27:98:50:da:2d:06:52:b0:39:5d:0f:e7:0a:23:
                    93:ef:8a:ff:40:ac:a5:16:ad:4c:99:0b:6c:1c:32:
                    47:e6:ec:76:c6:59:33:25:00:b6:72:6c:95:31:7b:
                    30:78:41:e5:e7:3a:85:23:f3:f7:cc:12:db:67:74:
                    cb:c6:44:1f:6f:cd:69:f3:a6:70:6c:32:41:ab:44:
                    7c:62:ae:9b:68:4b:15:bb:50:06:a3:64:d8:34:26:
                    be:af:9d:07:c6:c5:79:a9:ff:ed:1b:f4:55:18:33:
                    8b:9a:7e:56:8b:2a:d9:05:44:5d:5f:f0:8b:d8:93:
                    c2:a1:bf:e3:3a:66:79:63:8a:40:71:6a:ae:df:c8:
                    78:89:97:61:8c:48:1b:e6:f3:07:5b:29:e5:34:45:
                    ee:a7:74:d7:c3:aa:80:35:fa:93:f4:48:51:ca:97:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EF:B1:4B:2E:56:00:24:05:E9:C8:48:46:1F:70:99:60:62:E1:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:52:5b:e6:6e:f6:98:29:f7:0b:0e:76:6d:d8:fa:5f:b7:09:
         30:c8:96:e7:48:5e:91:a9:de:6e:2e:0e:02:d2:0f:20:87:e0:
         19:09:75:5c:46:f7:28:b0:3f:78:a4:79:a0:a2:2a:62:c5:2f:
         82:ba:cc:78:68:df:d3:07:b8:c8:1d:b5:71:89:5a:85:df:b9:
         c3:fe:c4:89:55:d0:50:d1:ea:67:54:5d:13:2a:5f:8c:16:73:
         b9:4f:69:88:37:23:f5:03:bb:10:4f:64:d0:27:f7:f5:95:ab:
         7a:dd:16:4e:31:78:8f:ee:36:e0:8a:2c:f3:ae:e6:4c:6d:79:
         29:52:c1:29:c4:37:6a:22:73:a1:04:7d:26:de:c2:21:3b:9d:
         2e:45:7f:dd:12:b6:e6:81:d6:8b:ae:49:cd:77:54:b7:79:0f:
         79:71:bf:5b:ba:6f:db:ce:1a:02:fb:42:06:f8:4a:88:56:e7:
         c4:54:b7:61:e4:b5:57:cd:63:4f:76:9e:a3:d3:44:cc:fe:a1:
         f3:25:af:bc:dc:22:48:bb:f3:d9:b7:c8:5a:f0:88:eb:8f:c1:
         37:57:02:15:92:2d:b3:4b:ac:06:18:6d:3d:cc:e1:7e:19:8e:
         d2:5e:6b:8d:ca:a2:0b:62:7b:e7:54:26:6e:a8:08:96:04:e0:
         c9:1d:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:36 2024 by rpki-client on console-fra.rpki-client.org