Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a02601e-f935-3531-b1ee-47627e7669dc.roa
File:                     2a02601e-f935-3531-b1ee-47627e7669dc.roa (raw, json)
Hash identifier:          HSFdKk6NkLpU0gisKP/KYGB3Ucxc3kAWMtUGhByI6Vg=
Subject key identifier:   3C:61:DE:5F:71:E8:A2:FF:05:76:53:4E:6F:0F:05:09:3D:3B:D7:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B7B361D2FE299D69D054E980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a02601e-f935-3531-b1ee-47627e7669dc.roa
Signing time:             Tue 30 Apr 2024 13:00:26 +0000
ROA not before:           Tue 30 Apr 2024 13:00:26 +0000
ROA not after:            Mon 29 Jul 2024 13:00:26 +0000
asID:                     16625
IP address blocks:        104.106.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:61:d2:fe:29:9d:69:d0:54:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 13:00:26 2024 GMT
            Not After : Jul 29 13:00:26 2024 GMT
        Subject: CN=25006d45-c4c3-4a8a-a459-67e19874a622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:f4:c0:9b:54:de:f6:d7:f3:6a:e2:2e:e3:
                    cb:65:80:0a:5b:5d:c7:30:d8:4e:78:93:71:24:b4:
                    b3:a0:56:8c:02:1a:f5:ca:f3:db:8b:0a:b7:fc:d3:
                    b3:2a:ed:57:03:ce:ae:f2:b8:5d:ff:b8:77:3b:c9:
                    c7:8e:89:f6:43:f9:ed:21:e2:b7:7b:19:e3:4c:fd:
                    aa:28:e7:6b:b0:da:be:b9:c7:90:76:71:56:78:34:
                    dc:a2:b1:ae:35:c9:e2:f1:da:ed:3f:b2:a0:52:1c:
                    6d:96:fb:6e:a0:fe:b0:06:51:88:03:80:2e:d3:19:
                    91:fa:0f:8b:1e:f7:0c:59:62:74:58:60:9a:8a:cd:
                    d6:c6:5d:7c:5e:0e:f6:4c:f9:75:39:18:5a:0b:90:
                    9b:83:41:21:d6:cd:4a:94:8f:0f:43:3e:e4:f2:87:
                    91:ec:3b:aa:3f:84:0f:f5:f6:e6:da:8e:a2:76:b2:
                    ae:d0:20:c6:0e:c6:44:45:32:0a:02:ef:77:6f:c6:
                    2b:94:0d:bf:3a:33:97:e8:9c:26:ca:c0:57:28:31:
                    90:61:5f:48:48:60:a1:b7:c9:b8:15:99:38:23:42:
                    38:ed:3b:99:12:6d:5b:52:ca:30:05:57:e6:05:05:
                    8b:2e:2c:07:9a:91:9d:cb:b2:0c:15:72:67:0f:2a:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:DE:5F:71:E8:A2:FF:05:76:53:4E:6F:0F:05:09:3D:3B:D7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a02601e-f935-3531-b1ee-47627e7669dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.106.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a6:90:fd:24:04:7d:92:bf:bc:2c:33:9a:1c:2a:11:ba:91:
         d1:19:24:b8:a4:81:4d:0c:ed:3c:83:19:55:fd:86:35:6b:33:
         a0:a9:45:46:35:55:83:d9:ed:dc:32:b3:20:77:7f:b7:82:e3:
         de:fd:58:f5:a5:9b:c9:bf:52:7b:fa:93:f9:82:22:59:57:9e:
         62:cd:fa:31:06:9f:a8:8e:d1:c6:95:68:0e:4c:f5:8b:4b:4a:
         7c:d5:44:c5:3d:b8:ef:ca:f9:7d:e1:92:1e:2f:3b:8e:c4:67:
         0a:8d:bb:97:b5:5c:47:10:ab:bc:b2:c6:10:00:86:10:3e:c6:
         c3:1e:d7:8d:07:b3:10:71:b3:e9:44:93:74:5c:24:11:52:ce:
         b3:3e:85:c8:fe:2c:6a:61:19:45:57:45:8b:54:87:d1:b2:1d:
         91:33:a1:70:57:a3:85:77:db:0b:a6:d8:08:be:b8:6f:ae:e4:
         e4:dc:4f:73:42:a6:75:79:dc:99:bd:94:77:f2:6e:9c:a3:5d:
         d1:06:84:ef:64:b0:4b:f7:2d:6b:9f:b4:af:3f:e3:26:24:15:
         7c:2f:71:ff:c5:ca:74:82:2e:de:32:b0:ed:8a:b5:13:7f:00:
         f2:6f:9c:aa:d5:f9:23:bb:e1:f5:ca:53:58:af:77:c8:c3:93:
         f0:de:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:10:41 2024 by rpki-client on console-fra.rpki-client.org