Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11df0081-e999-306c-a06d-d5fe4dd5848d.roa
File:                     11df0081-e999-306c-a06d-d5fe4dd5848d.roa (raw, json)
Hash identifier:          QpUV8uIEoM2L2B8n5vxcmWzNurx8Sen6+hJTvD2Vg4U=
Subject key identifier:   E4:C7:9D:E2:60:6A:80:A4:F7:79:06:06:5A:DA:C5:A5:8D:A5:21:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845824CF5260D167EB2DDEA3700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11df0081-e999-306c-a06d-d5fe4dd5848d.roa
Signing time:             Thu 11 Apr 2024 09:56:13 +0000
ROA not before:           Thu 11 Apr 2024 09:56:13 +0000
ROA not after:            Wed 10 Jul 2024 09:56:13 +0000
asID:                     16625
IP address blocks:        69.192.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:4c:f5:26:0d:16:7e:b2:dd:ea:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 09:56:13 2024 GMT
            Not After : Jul 10 09:56:13 2024 GMT
        Subject: CN=861f9923-0ac8-4cd4-a91c-200146806ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:6f:75:70:93:60:c8:56:94:c7:41:f5:71:
                    1e:57:35:de:30:b0:e0:7e:4c:72:27:1f:2c:ff:2a:
                    dc:d5:24:0f:02:db:24:91:40:b9:da:1e:15:92:cf:
                    2e:93:13:2c:93:18:5d:7d:74:ca:66:ac:67:0a:5b:
                    0f:6d:59:84:d6:0d:e5:0b:62:c2:1f:93:2e:4b:f5:
                    2e:31:7d:ba:64:13:ce:92:a3:74:01:42:cc:eb:ad:
                    f3:b2:f2:fd:13:9f:be:20:f9:4d:be:09:20:c1:3b:
                    fb:f3:0d:65:3d:2c:86:e7:65:1a:d6:c2:a6:ac:87:
                    dd:c3:c8:55:fd:5d:a7:e9:3b:aa:89:56:82:89:2f:
                    1c:94:7b:7f:3b:15:f8:a7:ee:12:a8:65:29:6f:d1:
                    ba:ff:76:55:e8:a2:ff:24:4b:c1:aa:94:37:97:37:
                    39:90:51:dd:6b:d0:84:23:c6:f7:79:6f:f2:ce:98:
                    d3:05:2f:76:09:81:4b:47:cf:e0:37:2b:05:a8:1d:
                    1f:ee:cb:fc:84:26:e7:b8:4b:40:cd:a4:04:59:dd:
                    2b:9a:58:56:6c:1f:49:d7:e0:80:57:91:2d:6e:7d:
                    cb:09:b0:18:1f:7f:7a:75:ce:a7:83:f1:15:fd:be:
                    fe:cd:8b:36:cd:77:95:4e:c9:b5:b3:c4:b4:1a:97:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C7:9D:E2:60:6A:80:A4:F7:79:06:06:5A:DA:C5:A5:8D:A5:21:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11df0081-e999-306c-a06d-d5fe4dd5848d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.192.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:08:19:67:05:a4:27:47:72:90:f3:bc:e7:d8:79:21:8c:b4:
         a5:07:09:b8:9a:44:89:08:17:4d:87:34:ac:3e:c7:d5:de:b8:
         f4:0c:79:31:63:8c:af:93:30:16:af:e2:31:0d:0b:14:f1:8d:
         c4:c9:17:25:9b:31:84:55:25:e0:cd:d6:72:b4:48:e9:83:cd:
         7c:ce:88:dc:6b:84:e7:db:85:8d:1a:78:47:dd:d3:fb:fa:06:
         2b:9d:a8:68:40:3d:84:09:da:cf:54:9d:68:93:c0:cf:ee:0c:
         1d:1e:6e:a3:e4:2b:5d:ca:1b:0d:4f:e4:aa:d4:6e:f6:ea:b2:
         8f:bb:ff:25:80:a8:b2:ce:19:fd:c4:59:e1:d2:ac:7c:75:76:
         a2:d3:f9:c0:61:7f:97:91:99:0d:23:d9:4e:8d:76:87:46:60:
         54:a0:d0:19:f6:6f:e4:9f:cd:77:a1:49:f0:b7:94:15:22:e8:
         a4:4a:0e:29:9b:0f:74:64:51:11:e7:d5:29:d9:83:40:35:d1:
         00:46:4e:ba:59:51:1b:73:f4:d3:d2:b7:f7:fc:63:63:6e:20:
         ef:b3:42:ef:7a:06:17:1a:2b:83:4e:ab:3e:4e:10:34:05:43:
         f1:94:ed:78:66:23:bd:fb:a2:b7:37:2c:14:62:9e:79:06:c3:
         12:34:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:46 2024 by rpki-client on console-fra.rpki-client.org