Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17fd9cc3-0e05-3882-8d2f-2ff30d308d79.roa
File:                     17fd9cc3-0e05-3882-8d2f-2ff30d308d79.roa (raw, json)
Hash identifier:          2lU1cvx+lxMK3ChhFxZrm1KnDIa5xjfj/UCq8/jLVvc=
Subject key identifier:   B6:17:96:F1:AE:72:ED:A2:4F:0A:3E:76:FC:89:EB:53:A9:E9:32:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B7BC2B8394A920AAC52B2DB0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17fd9cc3-0e05-3882-8d2f-2ff30d308d79.roa
Signing time:             Tue 30 Apr 2024 13:18:09 +0000
ROA not before:           Tue 30 Apr 2024 13:18:09 +0000
ROA not after:            Mon 29 Jul 2024 13:18:09 +0000
asID:                     16625
IP address blocks:        104.111.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:bc:2b:83:94:a9:20:aa:c5:2b:2d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 13:18:09 2024 GMT
            Not After : Jul 29 13:18:09 2024 GMT
        Subject: CN=c48d4d98-228c-48d9-ab18-7cd6df50bfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:e3:d8:b5:53:a2:0a:40:1a:c1:ab:9f:77:
                    d3:88:e4:f1:3b:fd:bd:06:4a:d8:68:7e:71:e6:78:
                    61:4c:72:22:ee:31:f8:3c:15:ad:42:18:9d:1b:de:
                    5b:fd:6e:68:0a:93:e5:06:22:bd:a1:82:de:35:7c:
                    9c:3b:c1:0d:17:c2:be:69:45:85:86:42:99:7c:37:
                    6e:b6:ce:f7:b6:40:f8:70:05:9d:6a:c2:b5:14:2d:
                    d6:bd:91:79:92:56:ef:58:ec:32:60:3b:d3:d2:3e:
                    e3:b6:94:5d:b0:d6:b4:18:d1:e8:f6:99:eb:a6:39:
                    ab:17:9b:43:b2:9f:74:6c:cb:a6:ea:b1:5b:0d:3b:
                    90:38:69:d0:33:b0:19:25:62:f5:85:70:5f:a8:bb:
                    a8:8b:0b:f0:70:68:77:9e:b3:7f:b6:61:c1:18:bf:
                    44:12:ad:6b:51:d6:bb:58:00:9a:04:c4:25:98:2a:
                    eb:0f:81:e1:a0:a4:7b:38:34:05:b5:c0:61:2b:28:
                    69:fa:3a:99:9d:a9:3c:04:7d:27:e9:01:9b:e9:bd:
                    2d:43:4f:2d:84:8d:c4:63:f0:f3:49:37:0f:77:67:
                    3d:48:66:25:ab:a0:eb:c0:fe:29:ab:eb:52:90:10:
                    77:36:f0:ac:69:34:e0:8b:d6:dc:a7:69:84:e2:3b:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:17:96:F1:AE:72:ED:A2:4F:0A:3E:76:FC:89:EB:53:A9:E9:32:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17fd9cc3-0e05-3882-8d2f-2ff30d308d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.111.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:d6:c8:49:b8:f3:87:2d:49:d4:db:87:9a:73:85:7e:4c:
         30:77:90:53:15:1d:d7:35:77:59:fc:1c:4a:4e:db:df:b7:12:
         58:78:3d:e5:95:56:5f:85:35:4c:ea:14:69:bc:e3:41:35:6e:
         76:0c:75:9d:fb:0e:c8:39:d6:4a:da:74:0d:67:9a:80:20:84:
         28:54:af:0d:68:4f:65:db:f9:ce:71:0c:24:10:18:30:f4:b0:
         30:d9:45:dd:d4:ed:24:29:32:e8:05:32:96:bd:f3:95:92:49:
         f3:4b:20:c4:25:f6:a4:d2:30:0d:28:d5:b7:ec:b2:22:71:c2:
         b4:e3:52:e1:aa:d0:a7:be:67:e2:63:40:d2:d6:9b:9c:33:74:
         73:3e:d2:de:31:35:cb:6c:71:e1:d8:82:d7:13:53:53:b0:1d:
         ea:10:b7:32:a1:c9:39:0e:6c:73:e5:a5:a2:71:17:04:a8:50:
         54:4a:d3:0b:a6:38:fa:bc:3c:6c:99:a0:62:f7:af:21:56:f3:
         cc:70:ac:90:6f:f9:e0:15:12:f8:41:c3:56:46:e2:ef:01:28:
         4d:b7:05:4b:28:c0:fc:ac:7d:e3:b9:1e:0a:4f:0f:8f:16:9c:
         42:b5:28:08:aa:c5:7f:b8:26:81:7f:95:a3:85:05:b7:96:c8:
         89:a5:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:14:18 2024 by rpki-client on console-ams.rpki-client.org