Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54f943df-6bb8-3a51-adaf-98e5449f5f25.roa
File:                     54f943df-6bb8-3a51-adaf-98e5449f5f25.roa (raw, json)
Hash identifier:          eFwZVorJTkk7BGgUB/Z5mTn8xZmFMaAkdvCd6TVqAlc=
Subject key identifier:   F6:25:83:A5:1B:96:7A:71:B0:3E:04:0A:F5:28:ED:4C:2E:0E:CF:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BBE7ABA23006F4F8F3500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54f943df-6bb8-3a51-adaf-98e5449f5f25.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        104.112.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:be:7a:ba:23:00:6f:4f:8f:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=261cc4f7-001a-4503-b200-c419e90fe822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:ae:81:75:bd:4a:03:0a:74:2b:e2:29:e2:
                    5b:fe:97:9c:04:a4:9a:53:39:f9:7b:d7:d9:32:a1:
                    97:52:1a:0f:de:65:1b:31:e8:07:bc:d2:d0:93:78:
                    94:7c:49:e2:58:bc:b1:3e:4a:27:0f:45:ad:4f:44:
                    5e:d9:4f:9c:28:13:71:a8:9a:c3:6f:7a:f2:e9:10:
                    41:76:e8:a8:7d:41:ed:92:89:8f:3f:b6:2e:97:8c:
                    e5:6b:27:e6:db:e7:39:5d:28:2f:5d:95:bc:bb:88:
                    11:d4:95:c5:15:16:53:0f:b3:cf:df:05:9b:1f:ce:
                    e0:32:ad:a1:a7:d5:30:5c:14:d3:70:14:d5:ef:4f:
                    2b:d2:62:8b:72:93:7d:07:8c:3c:48:d4:b2:d2:35:
                    a9:44:13:07:7f:14:04:02:32:c1:49:3e:a5:31:b2:
                    54:c9:9c:c6:4a:9d:2c:15:04:8e:d2:9e:16:7f:ad:
                    2c:d9:54:12:48:b1:70:49:7b:e7:65:78:95:4f:e7:
                    5b:ef:ff:1d:0a:e6:af:1d:83:40:c4:04:12:75:ff:
                    21:2f:39:c0:5b:26:02:73:30:2a:11:dd:15:64:b3:
                    67:87:2c:9f:61:2c:17:95:96:6b:70:2a:3a:eb:34:
                    b0:5e:a0:20:c6:71:cb:37:4e:25:0c:6a:84:43:e5:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:83:A5:1B:96:7A:71:B0:3E:04:0A:F5:28:ED:4C:2E:0E:CF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54f943df-6bb8-3a51-adaf-98e5449f5f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.112.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:51:76:09:ae:78:a4:4c:8f:08:24:be:54:73:ae:7d:0c:51:
         2b:80:a2:d5:3f:83:39:ef:25:57:15:09:66:b8:1b:15:f3:ee:
         23:61:b8:98:94:72:e9:8d:11:e3:ee:bd:a5:f0:8e:af:6b:11:
         3d:94:0b:1e:43:cd:66:23:6a:75:0a:71:91:b6:02:e3:4d:c4:
         9e:96:14:7a:9a:41:a3:97:74:15:7b:17:d1:d3:bc:5a:12:cc:
         ac:29:3f:22:04:21:0b:ff:19:f4:76:97:28:a7:ef:2d:dc:ca:
         82:89:3c:a3:58:74:77:0b:a0:4f:f0:0d:79:b4:44:82:e3:d2:
         96:58:dd:03:50:96:fa:9c:67:b0:5f:7b:2b:ef:e4:7a:46:bd:
         f8:f0:4f:f8:6f:3b:d2:60:9e:48:16:74:26:2a:79:6e:ed:30:
         ae:97:b6:50:d1:09:45:bf:47:c3:d5:fb:5d:eb:97:91:14:bc:
         e6:cb:cd:3a:5c:3a:01:01:18:08:65:48:85:08:eb:06:bb:f6:
         9e:1e:24:e6:03:95:0e:b6:f7:39:aa:3c:b2:ca:8d:03:dc:75:
         b0:2c:b8:a7:2b:c8:b8:dc:c9:0b:5f:85:76:fb:e4:c5:b9:ae:
         ad:da:13:b6:99:9a:b8:64:8f:69:a8:c6:79:3f:0a:2c:5b:c4:
         c2:cf:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:20:35 2024 by rpki-client on console-fra.rpki-client.org