Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa
File:                     19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa (raw, json)
Hash identifier:          HoPteiiyGZeEpUXMQUUPbGjgbQMg/7Dh2MWx0SmPhSw=
Subject key identifier:   16:88:11:DF:FE:AB:C7:89:00:64:4A:90:B7:9B:0F:26:AA:76:9F:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847766119E806B760068F97D100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.85.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:19:e8:06:b7:60:06:8f:97:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=3cfecddc-9534-40c9-a161-38715b58e645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:26:fc:c0:62:ae:3d:db:d1:7c:47:37:1a:
                    42:c6:75:98:b5:0e:6d:ef:5f:25:b9:9a:5d:b9:84:
                    36:89:b0:31:06:f1:e4:2a:5b:ad:ac:f1:8c:b6:19:
                    17:7b:98:46:61:6b:85:d5:1f:0d:a6:78:89:39:51:
                    58:6a:d4:ac:ba:9b:eb:ad:1c:af:d9:1d:ff:82:59:
                    51:b7:49:dc:07:c4:e0:60:87:72:58:4b:3b:64:ea:
                    21:fc:f2:1d:5f:7c:1c:ba:20:f4:3b:14:1b:78:01:
                    62:4a:90:f7:8f:ce:e0:f8:72:fd:f9:70:aa:26:8d:
                    70:d2:6b:7f:ee:c0:88:ee:53:c6:a6:5b:8d:7d:f2:
                    91:2a:84:1d:5a:a3:0d:bd:9b:33:ea:ae:9a:8c:4d:
                    c4:33:a5:22:8f:63:2c:35:02:2c:d6:ba:14:c8:83:
                    f1:9a:99:a0:9f:cd:76:07:7d:58:cd:1e:9c:03:56:
                    bd:5e:98:4d:27:c9:90:34:0e:70:8f:98:d9:36:56:
                    c5:38:01:95:0a:8c:d0:a4:8d:e2:d4:cb:25:1b:ec:
                    ef:e4:94:eb:9e:b6:ff:c9:03:5e:81:a9:9e:ba:c8:
                    90:40:1c:f0:11:18:0d:32:4b:c7:3a:03:73:fe:22:
                    cc:ba:7d:f4:74:06:97:58:81:4d:65:74:85:8c:14:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:88:11:DF:FE:AB:C7:89:00:64:4A:90:B7:9B:0F:26:AA:76:9F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19c2b9f2-a24e-3f63-a00a-b6d5ffc00d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:c9:65:81:aa:44:7f:59:e8:10:67:89:ef:62:ab:fb:c0:
         26:62:2c:4e:71:e9:f8:ef:04:81:fc:5a:b4:25:b5:a9:1c:97:
         8f:8e:c6:0d:c0:88:b2:61:34:97:9a:67:41:da:93:7e:03:2e:
         60:3d:29:d3:21:76:a3:81:2d:d6:df:ed:04:d5:0a:08:90:5b:
         3f:98:5b:96:bb:8c:ea:c2:24:0f:11:00:4f:bc:c8:31:7a:09:
         ab:20:40:ea:eb:5e:69:ee:6d:a2:5c:9b:63:52:4f:d3:ee:02:
         32:fb:aa:9c:3d:eb:72:e6:11:6b:e9:b3:fd:61:ff:5d:15:b7:
         03:bc:e6:9e:e9:af:d4:37:00:0d:f0:a2:1a:57:09:44:2e:36:
         de:96:68:f6:02:3f:03:1f:ba:b6:51:f3:58:2b:40:05:7f:8a:
         38:09:38:ab:a0:2a:c8:9f:4d:56:99:e6:f0:53:07:40:ff:b3:
         a0:4f:75:98:d8:83:dc:c7:15:cd:51:69:59:4e:c2:ff:bf:2d:
         2d:e1:73:6d:f0:a5:d0:1f:22:a6:9d:b3:c4:0e:2f:09:f9:5d:
         fb:05:de:e8:5f:fe:fe:a7:7e:ce:58:79:bb:7d:5b:ee:31:27:
         23:e2:42:1e:3d:6e:cc:7a:69:3c:09:75:87:0d:a4:d0:6e:e0:
         ea:c8:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:03 2024 by rpki-client on console-ams.rpki-client.org