Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342534f8-7c08-39c8-91b8-51b8f2a86253.roa
File:                     342534f8-7c08-39c8-91b8-51b8f2a86253.roa (raw, json)
Hash identifier:          mFB8WaNLBiPV+0gX8xiRNoToLsq6O7qoe/uyxZKRgBU=
Subject key identifier:   0A:C5:6E:AF:9C:78:AF:F5:4A:CE:45:10:36:D5:6A:E1:3A:F5:2B:6A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B73240E3B875F2C061C3CF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342534f8-7c08-39c8-91b8-51b8f2a86253.roa
Signing time:             Tue 30 Apr 2024 08:40:15 +0000
ROA not before:           Tue 30 Apr 2024 08:40:15 +0000
ROA not after:            Mon 29 Jul 2024 08:40:15 +0000
asID:                     16625
IP address blocks:        104.85.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:32:40:e3:b8:75:f2:c0:61:c3:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 08:40:15 2024 GMT
            Not After : Jul 29 08:40:15 2024 GMT
        Subject: CN=8100da55-b77e-4abe-9bf5-cba522484ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:53:b7:18:04:dd:40:fd:8a:6b:a8:91:bb:c3:
                    f0:12:74:5c:ed:58:6c:30:e8:76:8e:8e:19:ff:35:
                    87:b8:72:29:b7:85:be:b8:ed:7c:39:51:2a:80:03:
                    0b:da:2b:ab:1d:a0:63:8c:e6:77:09:40:22:14:8b:
                    2e:4a:11:37:2c:53:db:d4:21:5d:aa:cc:d5:6a:c9:
                    41:f7:8b:1d:9b:56:51:36:c5:1e:50:e7:1c:93:e5:
                    b1:c6:8a:7a:98:65:1c:2c:54:1b:4f:3c:9c:45:4a:
                    f0:ac:59:85:bf:ef:68:a0:58:05:7a:65:c8:6d:90:
                    ab:f5:74:5a:cc:f1:26:ca:24:20:94:69:90:a2:a1:
                    12:5b:c8:2b:78:74:f7:2b:9e:d0:c7:34:71:b5:92:
                    d2:5e:b3:aa:5f:6b:ad:f3:8f:b2:24:74:aa:ad:2a:
                    ce:2b:29:4d:03:36:cc:f1:bc:cc:b1:5f:bc:3f:e3:
                    c0:03:df:db:6f:98:0a:dc:79:b1:1d:97:22:ec:87:
                    cf:2e:79:72:0c:ca:39:58:74:1c:89:ac:ee:4d:92:
                    46:6d:84:92:6c:7d:30:96:a3:31:d4:a1:30:4d:55:
                    2f:24:31:39:dc:f3:f4:0a:8c:4a:4d:c3:9b:82:e9:
                    ba:9b:1b:ab:4a:c3:4e:7c:40:04:e3:78:21:4d:0f:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:6E:AF:9C:78:AF:F5:4A:CE:45:10:36:D5:6A:E1:3A:F5:2B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342534f8-7c08-39c8-91b8-51b8f2a86253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.85.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:ee:58:b0:f0:7c:b2:e6:98:04:9c:f9:2e:17:4f:cb:9e:
         cf:0e:74:77:ec:34:9d:65:b7:f3:ac:d7:9f:17:d5:77:2d:fd:
         99:ae:0d:e0:ab:de:37:7c:db:9f:9d:5d:09:f4:1f:9c:6c:ae:
         18:12:d9:1f:7f:b1:26:7b:72:d6:91:31:90:5f:14:96:7e:20:
         e7:f2:5d:b2:e3:00:fa:e2:e6:d4:eb:47:23:49:01:0f:95:c2:
         30:40:55:35:a4:6e:8a:21:f7:a2:0a:1b:b8:ff:fa:15:eb:b5:
         44:e7:60:db:95:36:f3:1f:25:e8:b5:32:05:7f:14:15:c8:ec:
         31:d4:fc:ae:d3:2f:8f:a0:99:7d:27:a1:ea:f1:36:9e:de:22:
         b9:af:ad:70:15:4e:fd:81:9f:e0:68:61:8f:33:62:d8:75:96:
         6b:de:39:3d:ba:60:b1:8f:16:d7:94:eb:a9:4b:1f:6a:26:00:
         1f:d4:30:69:87:18:fd:6a:c0:1e:59:d8:5b:f5:18:ca:13:dc:
         f9:46:f4:12:88:ca:f7:5e:6f:9f:26:91:4c:14:15:96:ce:2b:
         26:60:bf:75:71:94:cf:28:e1:4c:29:f3:3c:ac:5e:1b:6b:9e:
         cb:88:02:63:9c:8c:0d:1a:18:7d:0f:6e:6c:04:94:fd:10:f2:
         bd:86:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:49 2024 by rpki-client on console-fra.rpki-client.org