Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b9e3cb-4492-371f-834c-731e0f4a5b4a.roa
File:                     45b9e3cb-4492-371f-834c-731e0f4a5b4a.roa (raw, json)
Hash identifier:          +CUlfNu0mjh+5+3H5fpz2OpxdUY7tjKhOltgJBBt3Vo=
Subject key identifier:   E4:A5:FE:A7:84:BF:49:12:E3:AB:D1:5C:B2:2B:33:36:A8:B1:82:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B4D43116626D20132B8EE040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b9e3cb-4492-371f-834c-731e0f4a5b4a.roa
Signing time:             Mon 29 Apr 2024 12:19:07 +0000
ROA not before:           Mon 29 Apr 2024 12:19:07 +0000
ROA not after:            Sun 28 Jul 2024 12:19:07 +0000
asID:                     20940
IP address blocks:        104.75.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:d4:31:16:62:6d:20:13:2b:8e:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 29 12:19:07 2024 GMT
            Not After : Jul 28 12:19:07 2024 GMT
        Subject: CN=b95e55fc-95e6-4476-aa32-f1c8cfe265af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:ff:0e:4b:4f:88:4c:d2:97:ff:ad:57:96:
                    7e:94:7a:f5:25:83:e0:d8:04:3c:5b:57:ac:b9:ae:
                    ee:c5:de:c5:8c:28:47:a0:31:71:e2:1c:b1:d0:5c:
                    77:7c:a8:ae:59:55:ee:b3:45:20:e7:42:11:b1:21:
                    23:be:2a:7b:ce:de:17:05:0c:24:23:4f:7d:32:b3:
                    2c:c1:c8:5e:54:e2:44:44:30:3e:f3:21:5d:7e:7d:
                    85:b2:66:c2:a7:9d:0b:bd:75:15:7f:1d:0e:96:13:
                    a8:d2:2b:0a:6a:52:1f:24:1d:cb:63:ba:1e:2b:8a:
                    8f:cb:35:f5:3c:40:88:ac:c2:6e:50:69:23:5e:b0:
                    26:73:f6:bd:a1:b0:86:8c:ad:65:a2:aa:e8:95:b2:
                    36:3d:69:a0:ff:15:6a:54:b9:88:67:dc:19:20:57:
                    dc:e1:ef:63:1c:9c:b5:2c:5b:70:c6:1f:a5:94:fc:
                    1e:b9:eb:d0:41:ec:88:03:f2:7b:36:e3:7f:5a:49:
                    46:c1:28:bc:70:e8:a9:c4:df:55:6d:c9:7a:ac:64:
                    e5:18:22:c8:19:8f:23:75:df:fe:71:4d:00:6d:a3:
                    f3:a5:05:3b:ff:e8:79:a9:e6:bd:95:4d:07:0c:54:
                    93:f9:56:b4:e6:68:04:5a:8d:98:10:0d:69:58:06:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:FE:A7:84:BF:49:12:E3:AB:D1:5C:B2:2B:33:36:A8:B1:82:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b9e3cb-4492-371f-834c-731e0f4a5b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.75.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:43:83:6d:ec:32:7b:87:4b:9d:ce:95:c7:e9:a7:6b:40:21:
         6d:8b:41:92:72:50:6d:55:a9:7b:bf:bd:a1:1c:06:82:48:cc:
         2c:55:5e:a7:c7:58:46:aa:9d:68:26:73:55:0b:e6:ac:31:f6:
         7c:dc:a8:4b:78:90:79:d2:91:e7:97:bd:d2:22:8e:33:16:03:
         90:57:35:87:6a:ed:f9:3d:e9:56:d4:75:27:33:79:b7:ff:4c:
         6d:36:3d:76:ed:bd:56:cd:a4:d3:b6:a1:78:40:71:4c:22:47:
         58:9b:98:a6:0f:08:05:5a:b9:77:c1:d1:9d:ed:79:fb:55:73:
         28:bc:d2:ba:e5:f2:77:08:ed:88:51:25:cf:12:ce:c6:27:7a:
         1d:1e:c9:41:72:78:c8:40:b7:9f:1a:1e:18:76:b8:a1:28:cf:
         b8:c3:49:91:e1:c8:bb:1b:64:5c:1c:74:3e:a6:31:92:66:80:
         29:f5:a8:15:d4:13:52:1f:39:05:65:4c:19:2d:dd:da:d1:a5:
         0a:ed:a3:be:18:04:2e:21:5b:a4:e6:06:c4:8f:0a:37:56:35:
         0d:74:20:fa:36:79:13:d3:96:14:13:35:f5:cd:6d:d6:32:74:
         8a:35:3d:4c:23:eb:fa:a0:ce:45:19:29:dd:5a:9b:87:cd:2e:
         aa:ca:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:22 2024 by rpki-client on console-ams.rpki-client.org