Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa
File:                     a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa (raw, json)
Hash identifier:          dRf0Kdnqlaewni6iPYPMgPbOC1PI0Kx9eupImuASykQ=
Subject key identifier:   1D:F5:3C:CD:52:28:AB:C2:E7:1D:D3:42:11:4F:F8:B8:F6:68:8A:98
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F432858472C65D90334B862A56F1CC300
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     40627
IP address blocks:        104.245.56.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d9:03:34:b8:62:a5:6f:1c:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=f0a067df-b278-4f5a-a6e0-5c3a77a891fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:35:b1:5d:77:20:0a:a1:a3:f2:68:2f:54:
                    20:46:ba:6c:13:a6:7f:fc:2e:2f:98:6e:6f:dd:4c:
                    78:ba:d5:c8:01:83:0e:e5:46:cd:6f:8b:92:e1:32:
                    fe:02:f3:85:96:b4:ad:0e:c8:8c:3b:54:a5:83:53:
                    08:0e:7e:8b:22:0e:a2:ae:a9:75:f1:24:c9:08:20:
                    4e:86:d5:97:19:9e:21:5d:63:08:30:f8:75:8f:6c:
                    aa:6e:3b:82:35:ec:28:df:93:a2:97:06:1b:93:fb:
                    b1:56:22:97:df:b3:9c:ce:70:c8:46:c2:8b:f1:76:
                    4c:7a:9b:62:6b:57:85:70:25:22:45:03:f3:fd:d9:
                    db:62:8b:3f:28:da:5a:70:23:41:91:c3:2c:b6:2f:
                    c9:8f:0e:9f:df:dd:05:64:72:6e:57:91:d9:ee:d5:
                    51:04:e2:bb:31:22:bc:cc:8e:61:63:54:27:6e:7a:
                    b7:b1:15:1b:04:aa:ac:aa:ec:8d:a1:7d:c1:fb:c3:
                    61:68:7f:fb:97:5f:a4:cb:dc:4b:71:b9:6c:6e:7d:
                    cb:12:ae:d2:4d:f7:b7:14:25:e9:db:75:e4:4a:7c:
                    1b:b4:a0:8c:d9:16:8d:d1:00:d8:9b:1c:c7:1a:5e:
                    9f:26:46:92:fd:07:25:e5:1a:3a:04:be:1b:95:2d:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F5:3C:CD:52:28:AB:C2:E7:1D:D3:42:11:4F:F8:B8:F6:68:8A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:7e:69:5d:3d:53:b4:7a:22:94:bb:77:bb:1b:b9:b2:27:
         3b:b6:77:92:65:f6:e0:6f:9e:20:1b:ec:2d:91:b5:d2:09:27:
         c5:ed:b4:22:57:a9:e2:ed:2d:85:ea:50:3f:ea:4e:b0:aa:53:
         08:a6:a8:b7:7f:c8:f4:c8:38:3f:de:50:49:30:07:af:aa:ab:
         53:a4:aa:f0:8e:a8:53:fe:d0:a3:c6:67:4c:0f:29:4c:ff:fc:
         3a:ca:7d:88:9f:37:e9:8b:8c:19:b4:82:bc:87:16:3d:06:dd:
         0c:65:9c:1a:f6:d7:fc:b0:91:c6:64:44:a8:2b:71:b7:f3:9b:
         47:a8:f7:12:12:be:10:41:ad:2c:cd:42:6c:4c:06:9a:d7:c7:
         e8:ce:18:08:3f:59:fa:b3:30:51:86:e2:cb:6a:69:6c:0d:40:
         67:24:d6:a5:0a:f9:1f:82:3c:49:5e:7e:62:2c:54:07:68:fd:
         d3:be:2f:64:81:a8:a2:6d:02:f0:1a:b8:27:2e:51:e7:65:0e:
         9d:4e:7b:b7:35:76:b8:e6:77:69:5d:7d:f3:c0:da:4b:96:11:
         b6:e7:a0:e0:ce:43:8b:bd:06:eb:f2:b4:c7:32:97:75:11:51:
         5c:da:02:00:44:cf:56:c2:a1:32:ab:45:60:3e:8c:a0:6d:3b:
         9d:6a:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:13:04 2024 by rpki-client on console-fra.rpki-client.org