Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31d32ce4-ee70-3f91-b448-310600acfa4e.roa
File:                     31d32ce4-ee70-3f91-b448-310600acfa4e.roa (raw, json)
Hash identifier:          1FuVuA+5c6w+UN7c6iUyjTpscUR+PIUHbB042+bZQ1Y=
Subject key identifier:   78:C0:31:DF:4C:3F:99:2C:49:FB:08:36:B6:4D:C3:35:9C:AC:2D:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858451E459B9EBBFA798D86833C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31d32ce4-ee70-3f91-b448-310600acfa4e.roa
Signing time:             Wed 06 Mar 2024 14:00:31 +0000
ROA not before:           Wed 06 Mar 2024 14:00:31 +0000
ROA not after:            Tue 04 Jun 2024 13:00:31 +0000
asID:                     63949
IP address blocks:        172.104.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:45:9b:9e:bb:fa:79:8d:86:83:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  6 14:00:31 2024 GMT
            Not After : Jun  4 13:00:31 2024 GMT
        Subject: CN=734964fb-fa16-4935-8e3b-1e0e0ec98b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:6d:66:4f:3e:89:34:56:97:da:31:35:04:
                    e1:85:8d:cc:5e:da:ae:99:47:6b:92:b7:a4:09:19:
                    9a:50:f8:31:4d:cc:f8:73:65:87:50:a2:5c:54:6d:
                    ce:f6:b4:ae:2f:aa:9c:e2:23:51:e3:13:9d:ba:92:
                    93:a7:43:fd:05:1e:17:16:3d:f5:ea:43:82:20:91:
                    fe:7c:e9:b2:0e:75:e1:ce:9f:9b:3d:c8:47:e6:8c:
                    d7:04:03:17:9a:f5:9c:e8:71:90:eb:6f:3f:cb:a6:
                    70:1e:f5:85:ca:68:80:99:25:1c:c7:2e:f9:9d:6d:
                    fc:9b:6d:8a:20:fb:be:78:b6:10:84:a1:b7:f6:60:
                    c1:35:ef:e4:11:9b:81:e1:02:f3:fc:12:d1:f3:77:
                    79:b7:de:96:98:68:ae:ed:64:46:02:57:04:57:ea:
                    5a:d1:cf:f3:a4:f6:1b:41:92:ee:af:81:70:11:9f:
                    a5:0e:6c:d5:73:8b:ad:3d:24:b8:f3:6a:f6:2e:2b:
                    c7:e9:e3:8d:e5:c2:76:b7:dd:eb:48:11:fb:2f:a3:
                    94:88:26:7f:47:57:7e:d5:9b:7e:b4:74:42:a1:d8:
                    fa:c6:1b:2e:91:00:3d:1d:bc:58:e6:53:2f:17:83:
                    86:23:27:fa:76:8b:df:e3:1d:3b:bc:4f:71:c4:d9:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:31:DF:4C:3F:99:2C:49:FB:08:36:B6:4D:C3:35:9C:AC:2D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31d32ce4-ee70-3f91-b448-310600acfa4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.104.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d7:24:f1:a0:34:5d:c1:29:a2:05:14:c2:47:e4:a8:59:3c:
         7f:8f:06:d6:a8:de:22:8c:d2:37:1e:12:f5:51:03:15:54:f2:
         36:9a:78:fb:c3:91:b6:93:e2:f9:73:c7:2e:fa:35:5f:d8:81:
         16:72:3f:4e:22:b8:e8:d4:eb:fe:6b:a4:0b:57:96:98:bd:78:
         bf:6e:1c:1b:2b:4d:d9:a1:00:8e:76:31:67:73:3c:25:a2:43:
         ec:ac:d9:f5:66:e4:1c:56:45:c8:56:2a:ea:b8:af:5f:bb:89:
         32:4a:cb:8a:fd:43:95:db:12:be:39:23:7a:79:82:a7:28:ad:
         a7:44:d4:3b:70:5e:c1:1e:a9:3b:80:95:4a:a9:70:bd:76:76:
         5d:1e:31:bd:43:58:8b:e8:ab:fc:19:9b:61:2c:05:99:3e:2a:
         25:0b:8c:5c:e9:16:11:c8:44:f5:bf:93:54:3a:55:d6:75:e8:
         01:e1:10:5e:5a:04:d7:b1:53:09:26:86:cf:f0:d5:bb:bf:cd:
         b4:27:21:46:58:ab:da:74:92:b7:d2:b0:15:06:47:a5:3a:53:
         18:fd:d6:3b:a0:3a:63:08:1a:53:fd:ee:51:14:e5:d3:4b:18:
         ac:26:e1:39:36:59:a7:f1:fc:fd:35:2c:a8:c2:17:18:6a:7b:
         d4:0b:a6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:20 2024 by rpki-client on console-ams.rpki-client.org