Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
File:                     a4264dfe-d219-3086-936c-b9b00996afd3.roa (raw, json)
Hash identifier:          DDmLDGQyNnLotA2OozZIPAh4nVDwnPG2oJ37GRpAz/0=
Subject key identifier:   3C:A4:A9:04:7A:C5:3E:78:98:16:2E:8C:34:F1:70:58:A4:A2:22:72
Certificate issuer:       /CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
Certificate serial:       010D0C9F432858478CB689D28A6E143CDA754240
Authority key identifier: 9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     16509
IP address blocks:        104.36.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:89:d2:8a:6e:14:3c:da:75:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b400c5-de2c-4a3d-a19e-a928e8743b70
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=f39e7e2c-7b12-41bc-910d-07364898a306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:37:4b:d0:2c:59:b5:6e:70:bf:13:b7:18:
                    b5:e1:da:31:03:ed:4b:61:c6:d9:d1:c3:10:74:b8:
                    bc:f0:1d:04:e4:ec:b9:c6:7d:cf:66:ad:ad:36:f2:
                    99:57:0b:33:9e:9e:56:76:0f:d2:6d:ee:c1:93:df:
                    7b:76:16:05:ff:61:f1:31:0b:70:a3:c6:1a:1b:80:
                    de:c3:1e:36:f1:b6:58:3d:fe:6a:2b:e8:88:a0:3e:
                    22:cc:b9:5d:23:10:c0:04:6a:73:f8:bc:52:2a:03:
                    4d:c9:8e:08:30:5f:4d:c0:33:88:84:ea:82:65:2b:
                    a8:34:82:2f:16:0a:38:11:95:30:d2:6f:47:07:6b:
                    bf:31:06:a3:d6:e7:1f:d4:98:cd:b9:6e:45:f3:8d:
                    5e:87:e3:73:e5:f9:6c:cd:24:29:bf:80:9b:a7:6d:
                    ed:c7:35:82:81:e1:4f:6a:15:e2:b3:da:b9:e4:c0:
                    47:04:f1:ca:29:0b:34:11:cc:b8:ae:e7:38:5b:31:
                    b6:a4:b8:06:37:87:53:db:b4:e2:e2:78:52:b8:b3:
                    f1:61:06:64:34:32:2a:ff:37:91:e1:3f:ef:18:c6:
                    f8:ca:63:78:46:7f:80:04:1e:2d:21:21:17:c2:c4:
                    02:6f:98:d7:7a:8b:16:e7:04:a2:07:8e:0d:5c:e1:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:A9:04:7A:C5:3E:78:98:16:2E:8C:34:F1:70:58:A4:A2:22:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/a4264dfe-d219-3086-936c-b9b00996afd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70/22b400c5-de2c-4a3d-a19e-a928e8743b70.crl

            X509v3 Authority Key Identifier:
                keyid:9C:D4:4A:9F:6E:93:8A:0E:E6:8D:83:25:5B:18:16:64:C3:6E:B5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22b400c5-de2c-4a3d-a19e-a928e8743b70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:5b:18:39:0b:f3:b1:d2:19:4a:36:b5:fa:a7:65:ab:46:1d:
         9e:eb:21:84:7d:33:4f:6d:36:b9:3f:3b:fc:28:83:91:ba:68:
         ad:ea:7e:63:12:e7:ef:f6:a2:b6:6c:48:f0:3c:b1:04:97:30:
         07:16:c8:ed:43:ed:3a:fc:39:27:3c:a4:7b:d3:11:ab:8a:41:
         cf:67:7a:03:35:46:72:46:43:ef:76:05:31:80:90:bf:41:22:
         a5:82:e3:f1:6c:01:bd:da:e9:12:e9:b5:0e:fa:30:e1:54:7c:
         43:e5:6f:63:a0:b9:60:74:b7:b6:81:0f:45:43:1e:01:6c:76:
         8b:ee:32:86:a6:1c:ff:6f:27:af:ce:cb:0a:cd:11:b9:45:c5:
         40:30:b3:ed:bf:f0:cc:9c:86:0e:e1:1b:76:4b:85:1b:0f:f8:
         0b:86:b9:14:5b:60:b6:e1:17:73:07:94:17:a7:1c:22:26:2a:
         1a:05:5d:22:88:33:c4:6a:0f:fb:c5:29:09:63:4f:25:eb:ab:
         ea:24:00:86:73:ec:a3:a1:dd:92:05:16:f9:e6:fb:ea:0c:58:
         c9:ed:71:ba:ce:92:79:06:5d:1a:85:10:cc:bb:40:ee:f1:2e:
         e8:a9:83:e0:f2:db:7b:8d:e4:66:2b:6c:46:95:43:ea:60:8f:
         ef:3e:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:07 2024 by rpki-client on console-fra.rpki-client.org