Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47af7825-7173-39d1-8a20-59ce9e12ec97.roa
File:                     47af7825-7173-39d1-8a20-59ce9e12ec97.roa (raw, json)
Hash identifier:          xiFeWzRcLH9sbiAEb2piOzpTnuugLrA2v4E9qUjSWJ4=
Subject key identifier:   EC:9C:7B:4A:70:AE:7C:A4:D5:18:3B:7A:82:30:71:68:32:E9:33:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BA27D88EE84F916BA8852A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47af7825-7173-39d1-8a20-59ce9e12ec97.roa
Signing time:             Wed 01 May 2024 10:06:43 +0000
ROA not before:           Wed 01 May 2024 10:06:43 +0000
ROA not after:            Tue 30 Jul 2024 10:06:43 +0000
asID:                     16625
IP address blocks:        104.123.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:27:d8:8e:e8:4f:91:6b:a8:85:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 10:06:43 2024 GMT
            Not After : Jul 30 10:06:43 2024 GMT
        Subject: CN=46daef64-db41-4272-b185-41cb8552d23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:33:33:a2:bd:e1:b5:3e:bc:b6:b6:c8:46:
                    89:67:eb:32:81:11:c0:74:4f:05:ea:e0:34:58:b5:
                    7d:4e:8e:d7:3c:50:ad:70:65:0b:af:59:e9:44:6d:
                    32:a5:4d:55:c6:7b:88:0c:73:04:cb:e4:96:6c:3b:
                    b7:e3:a3:e1:e6:2f:b0:a4:0c:45:d6:9a:b9:c6:f4:
                    9d:40:10:43:f9:47:66:d5:f3:de:f2:46:90:89:32:
                    d4:7e:d8:3a:6f:3c:20:f8:85:3d:d4:2c:ae:41:7f:
                    dc:ca:42:7c:89:cc:fc:6c:2f:cf:c0:7d:77:2c:77:
                    d2:3b:20:66:68:bb:53:a9:e3:cc:7a:88:f2:79:96:
                    e8:da:2f:53:8a:b5:07:d3:f2:3e:92:66:24:76:59:
                    c8:35:6e:4f:97:fd:ec:1e:3d:a7:11:b5:12:39:c0:
                    ec:f0:15:a1:43:70:df:66:ce:ea:09:d4:02:b2:22:
                    75:77:6d:36:b4:e6:c1:bc:aa:f8:7d:ba:13:fe:73:
                    4c:1f:d9:b7:b2:88:c1:69:f1:7e:d8:5d:dd:16:a5:
                    ac:6b:9a:39:4f:9f:51:85:8d:73:86:f7:9d:b5:21:
                    e6:4e:2f:86:33:e3:82:4d:70:c3:86:a9:d3:01:8f:
                    b4:00:8c:14:f2:73:8c:f3:47:9d:b4:90:d1:15:39:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:7B:4A:70:AE:7C:A4:D5:18:3B:7A:82:30:71:68:32:E9:33:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47af7825-7173-39d1-8a20-59ce9e12ec97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:00:4c:08:f3:94:29:17:a0:1c:ea:0d:81:76:a1:96:82:74:
         db:0e:25:71:96:e6:5f:65:c1:13:41:8f:dc:cc:5b:c6:90:c3:
         11:3b:8c:75:7a:ac:92:58:5e:a5:b0:90:c6:49:b2:a5:c7:34:
         54:f6:78:fd:4c:53:bf:96:7f:7b:42:1a:96:83:f3:d9:32:c2:
         ca:f9:f2:e4:0c:3a:d5:75:d9:0a:55:99:54:6d:92:ec:6c:8a:
         d6:60:b2:90:c1:42:a2:1a:0a:85:3d:51:df:ce:83:06:38:42:
         13:23:d1:e5:e1:76:46:44:1d:51:d6:d9:8c:f4:0a:a9:5f:a4:
         b4:12:ed:f3:4d:91:27:40:97:57:de:4c:b0:27:a6:af:d2:46:
         df:a3:a0:1c:d2:1d:7b:ec:aa:d0:45:ce:04:7a:26:9e:30:ab:
         3a:68:83:fd:4a:68:10:c3:ae:e3:cc:63:df:dd:85:e2:cd:4e:
         03:fe:79:4f:13:70:fe:5b:a7:f0:86:cc:dd:e7:d5:0f:8f:da:
         61:28:44:8d:bb:c8:1b:00:85:71:43:3f:db:87:0c:c2:5d:f6:
         e2:c8:8e:78:7b:cb:62:6f:28:3b:8f:95:81:d1:cc:85:13:d3:
         3d:69:4d:30:13:98:5a:d4:c9:83:04:b3:01:6e:99:8d:c1:c9:
         81:eb:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:55 2024 by rpki-client on console-fra.rpki-client.org