Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a800c84-b866-341a-adf4-c68997041133.roa
File:                     4a800c84-b866-341a-adf4-c68997041133.roa (raw, json)
Hash identifier:          KaicjDTSvVnUYC6jXjFQwfRyX3qg36telQaYB10h5TQ=
Subject key identifier:   75:06:22:C4:DD:BC:55:2F:EF:5A:3C:49:67:18:2B:38:B6:01:7E:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584776610D2F0FCC30460C3BD2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a800c84-b866-341a-adf4-c68997041133.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     9500
IP address blocks:        104.84.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:0d:2f:0f:cc:30:46:0c:3b:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=80ef1566-f19f-496b-bf78-80b10c411043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:23:98:42:a5:aa:3d:d4:33:c9:f9:0e:ab:
                    01:f0:05:c2:50:91:01:3e:4a:7a:dd:e2:b4:5a:bf:
                    eb:9c:0f:6d:61:d3:5f:6f:1b:4c:5c:a6:ff:87:2d:
                    64:e9:10:5c:5c:fe:6c:7e:c4:6d:d1:1f:01:c4:b1:
                    c0:92:d4:dc:5a:5b:ec:e8:d9:ac:7e:7b:5d:d4:98:
                    1e:1a:3b:60:ad:49:b4:9c:6f:49:ed:f5:cd:22:9d:
                    df:46:cc:e3:ba:3f:84:03:31:d5:2a:a5:23:91:24:
                    2c:5c:cb:08:f6:b5:8d:bc:f1:8d:e1:73:e7:f3:5e:
                    3e:de:b8:2b:47:18:03:70:93:33:6c:50:38:07:8b:
                    90:fa:81:e2:a6:46:cf:e8:07:8d:83:77:94:8f:df:
                    c5:b8:c7:20:e5:bf:be:3c:41:ea:7b:85:15:02:b7:
                    24:8d:b5:52:75:82:cd:2a:2e:d6:0c:66:08:b5:51:
                    29:95:e9:c5:40:fe:a5:8c:33:83:74:98:b8:7b:e3:
                    e4:21:50:a6:3e:de:ea:3c:a4:02:71:6b:c3:c1:0d:
                    d6:93:1a:33:bd:20:54:57:71:da:87:2e:f2:58:c5:
                    59:e1:96:cf:52:35:54:7b:7c:d2:b9:08:30:cb:08:
                    2d:20:27:91:64:ba:29:f2:ab:35:b6:bf:62:a4:fa:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:22:C4:DD:BC:55:2F:EF:5A:3C:49:67:18:2B:38:B6:01:7E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a800c84-b866-341a-adf4-c68997041133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.84.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:dc:73:fb:67:06:a1:50:96:88:f3:84:c8:9b:9e:77:9c:
         c8:09:5c:89:50:67:9c:88:56:e9:5f:48:ca:42:52:24:92:f3:
         e8:4c:34:98:71:bf:4a:e1:09:5a:56:3a:7e:77:35:c4:73:22:
         96:42:2f:22:63:5b:bc:29:c0:9c:4b:56:d8:c8:ae:37:39:5a:
         a9:3a:c7:1b:c3:58:b0:cc:32:c2:7f:11:f8:8b:3b:a3:f1:5b:
         f7:64:4c:2f:15:0f:4d:85:50:00:3b:1f:c6:7f:c2:03:42:72:
         74:ba:fb:77:f6:b1:8f:e1:f5:76:e5:da:52:14:04:9d:1d:45:
         12:dc:08:d8:25:98:c4:86:7b:0b:0a:a8:e0:c7:74:4d:d4:ab:
         67:d4:05:31:24:a0:35:df:a6:df:55:a5:c2:6c:68:2a:7f:f8:
         41:fa:5f:1c:88:ed:39:c2:4e:41:40:78:66:47:bd:31:02:79:
         85:ff:9c:74:43:52:e5:1c:4b:db:14:ee:e0:a2:48:38:f4:5d:
         21:9d:ce:67:a2:20:5d:18:9e:44:36:ca:db:80:4e:bf:24:b5:
         60:4f:f7:25:86:64:6e:be:1c:ae:79:bf:f3:96:70:18:e7:d7:
         5a:5e:2c:13:e1:ba:a2:e3:4f:c4:c9:0e:47:4f:c4:f0:bd:87:
         2a:20:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:48 2024 by rpki-client on console-fra.rpki-client.org