Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa
File:                     2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa (raw, json)
Hash identifier:          ahRTgraYZMKxF1pUCvwb6HFQZlwewjRuaMqjXJ2FVSo=
Subject key identifier:   7D:69:A1:FE:43:FD:8A:1F:9A:F5:1B:EC:1C:7E:57:92:02:D8:51:FC
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F432858471AF8BBE6FCBC63A65615FC80
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa
Signing time:             Wed 04 Sep 2024 19:12:08 +0000
ROA not before:           Wed 04 Sep 2024 19:12:08 +0000
ROA not after:            Tue 03 Dec 2024 20:12:08 +0000
asID:                     5645
IP address blocks:        104.222.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:f8:bb:e6:fc:bc:63:a6:56:15:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Sep  4 19:12:08 2024 GMT
            Not After : Dec  3 20:12:08 2024 GMT
        Subject: CN=6ab8e98f-914a-4044-a274-8be2f25d0968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:54:a0:93:e4:0d:a3:9f:fd:7e:60:e2:1b:
                    35:78:b9:ca:b2:82:55:af:5c:e6:7b:20:92:0b:a4:
                    2a:56:3c:2b:be:7c:a8:ac:85:ea:94:8d:7a:0d:ef:
                    ca:06:9a:0d:38:76:d7:db:44:25:46:e9:0d:23:8a:
                    dd:30:4c:bc:25:fc:3b:c2:82:7f:64:05:5d:d9:8f:
                    15:08:a0:30:4e:24:bf:d4:13:7c:e7:6c:d1:e0:dd:
                    7d:e8:60:de:ce:fb:5e:db:f5:48:3a:e4:0b:af:b8:
                    bb:72:97:02:99:dc:98:f4:30:50:e0:90:7c:f7:f0:
                    7d:7a:84:76:d6:2a:05:35:c7:92:49:db:df:08:f1:
                    25:69:65:54:a8:b0:f4:eb:81:92:ac:2b:6c:fb:4b:
                    dd:4d:a7:7d:8c:cf:b8:dc:92:3c:27:00:76:7a:2d:
                    6e:a2:26:b8:3f:1f:a2:af:ca:be:a7:20:cb:bb:57:
                    39:73:d7:d2:27:c5:d1:38:09:0a:9b:11:30:00:f2:
                    c0:7b:41:33:63:d3:72:6b:87:f1:2b:8c:dd:b4:d4:
                    f1:72:7f:21:42:bf:a4:f7:a5:41:6b:8d:38:61:aa:
                    b3:90:e8:98:82:53:03:ea:08:dc:38:bd:fd:e2:98:
                    24:b8:66:5e:ac:81:f5:c0:b5:7f:2a:ea:d3:b3:db:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:A1:FE:43:FD:8A:1F:9A:F5:1B:EC:1C:7E:57:92:02:D8:51:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.222.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:91:68:ef:35:25:20:5c:cb:6f:80:64:60:26:37:61:4f:dc:
         fd:ef:3f:2e:0c:2a:0a:b6:ba:42:59:16:2d:c5:1a:86:12:2e:
         28:08:a2:98:7e:22:75:95:64:b0:b0:e1:13:55:f4:1f:e7:fc:
         c0:0d:81:0f:02:14:65:22:5f:c7:e0:0c:36:37:54:6b:bc:21:
         e4:4f:34:17:e6:e6:20:85:dd:f6:91:81:ac:32:c5:31:f6:80:
         df:3b:29:c5:aa:48:c5:35:fa:2b:dd:55:99:f7:ef:0a:18:c2:
         da:9b:23:a8:d7:55:4d:c4:f6:09:83:66:1b:be:84:95:e6:1c:
         e4:bc:c8:8b:ce:6c:74:0f:fe:16:57:11:31:f3:d7:60:be:67:
         84:bb:69:43:65:b9:21:21:ec:06:e3:b1:fd:f3:3e:d5:97:8f:
         f6:1c:f2:a5:e6:fc:f5:2e:75:b5:d8:81:f0:d7:c4:98:43:2a:
         53:7a:a1:8a:75:48:64:db:4a:83:32:67:11:59:2e:78:f5:3f:
         29:40:cc:67:e2:dc:d9:3a:99:92:fd:68:be:07:9d:c4:48:61:
         02:60:10:7b:b1:16:42:19:31:8f:40:03:2e:bf:46:58:65:9b:
         07:60:31:3e:b6:bd:bf:2c:ff:79:b9:0b:94:db:86:4b:e0:c0:
         c5:1e:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org