Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa
File:                     0bde66e0-ee94-3e23-97de-fad631a974c8.roa (raw, json)
Hash identifier:          fQ7Zg4wD3hhjtb3Oj0LK2SKj/3e5kXuxibiiXtwjPLU=
Subject key identifier:   AF:4C:48:B0:9E:C9:7F:4B:1D:F8:99:5A:23:02:94:46:B2:C7:AB:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858477661173076B9DC36C90D09F4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     9498
IP address blocks:        104.104.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:17:30:76:b9:dc:36:c9:0d:09:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=79da0910-1dea-4d22-9570-b2a6931ab069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:e1:fc:9f:dc:d8:19:21:e0:a0:58:b5:ff:
                    06:4f:8c:8f:cf:11:54:27:d1:1e:c9:95:2e:ca:d1:
                    6e:46:14:1c:a7:1d:46:c2:66:22:9e:61:ac:b7:22:
                    15:1c:d1:50:5a:1d:4b:96:c2:17:88:d9:a3:a7:e7:
                    5d:8c:d8:9c:c3:10:c3:7b:83:7a:94:a3:33:9a:a7:
                    6c:ab:47:ec:a5:c8:b1:9e:f5:f3:23:10:84:7d:fd:
                    ac:81:71:d1:af:63:e7:9a:fa:df:da:7c:8f:ef:36:
                    b8:13:fd:fe:66:00:7e:f6:95:03:85:67:05:be:6f:
                    f6:03:db:03:c7:33:c1:f4:6c:db:49:d7:e3:87:db:
                    15:3c:4e:7e:20:b6:27:bc:3a:6d:9b:47:65:03:07:
                    c5:05:0c:00:85:ae:89:6d:9f:7e:8b:b9:2e:d3:51:
                    74:54:49:53:d9:61:27:f4:de:3c:af:ca:e7:b3:42:
                    b6:36:3a:8f:c7:5f:99:7a:16:5d:7b:16:fb:f9:59:
                    2e:23:6d:dc:51:30:97:42:91:03:36:1f:4c:22:be:
                    b8:31:d5:d9:d8:7b:ef:18:c6:1b:f3:4a:af:70:19:
                    ec:a1:65:bd:e4:cf:a6:0d:fd:8f:ca:66:68:66:df:
                    4c:95:87:9f:8e:eb:de:04:e1:1f:16:df:ab:3e:40:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:48:B0:9E:C9:7F:4B:1D:F8:99:5A:23:02:94:46:B2:C7:AB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.104.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:be:49:cd:06:67:b9:e1:f9:ba:47:cc:39:4e:be:cb:56:
         c0:72:60:d1:d6:b2:c6:d1:00:7e:4a:3e:26:a2:c4:b8:bd:5d:
         45:19:4e:b8:1c:b8:a0:bf:9a:77:b4:6e:26:d4:fe:aa:1a:ee:
         05:7f:3b:48:1a:4f:63:e3:79:06:cd:e7:16:95:d8:f9:19:db:
         37:bd:55:84:fe:42:f0:90:ad:f5:49:73:49:b5:ec:f7:7b:b1:
         5c:1e:d1:bf:e1:b4:2e:d4:80:26:ef:0a:18:eb:b4:1f:1e:0f:
         86:4f:3e:dd:d9:23:14:09:fa:5d:12:84:ce:36:ff:d3:eb:88:
         a9:2e:9e:b5:69:ba:8f:11:87:e6:37:81:f2:ca:ed:ff:3b:aa:
         ac:b7:47:51:94:cd:1a:53:4d:0c:2f:cf:e8:e0:31:06:6e:85:
         6e:b2:22:f8:54:1b:ef:46:7f:11:c1:cf:80:e2:30:df:3c:22:
         d2:2d:ec:78:40:e4:10:a6:cb:ce:6a:bc:dd:e6:69:01:23:bd:
         1b:b2:a6:90:61:2d:ba:98:91:c8:6d:c2:87:63:ed:bd:1d:bd:
         71:18:59:17:b6:bf:5c:db:81:ee:ac:9e:46:ed:fe:ed:7c:96:
         66:fa:9b:2d:a8:04:b4:b8:48:7c:26:c3:d2:fa:c2:38:27:90:
         5f:0d:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:30:04 2024 by rpki-client on console-ams.rpki-client.org