Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5aaf747a-ad2b-325f-8cc5-31a604c85d30.roa
File:                     5aaf747a-ad2b-325f-8cc5-31a604c85d30.roa (raw, json)
Hash identifier:          zeIjyEGgXdMqxq5VQ2DqvBYx1R4GpfNe95R3kGjVCdU=
Subject key identifier:   C9:4D:13:81:8E:0B:8B:1A:D9:5A:BA:A4:0C:C3:A0:88:06:8F:A7:3A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B755CE2B729D3E3594AC8640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5aaf747a-ad2b-325f-8cc5-31a604c85d30.roa
Signing time:             Tue 30 Apr 2024 09:51:53 +0000
ROA not before:           Tue 30 Apr 2024 09:51:53 +0000
ROA not after:            Mon 29 Jul 2024 09:51:53 +0000
asID:                     16625
IP address blocks:        104.92.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:55:ce:2b:72:9d:3e:35:94:ac:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 09:51:53 2024 GMT
            Not After : Jul 29 09:51:53 2024 GMT
        Subject: CN=7f26daa9-4e63-48ec-9e60-e74a2b1a1579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:83:53:ab:ee:40:5b:f9:1b:89:f3:f0:cd:
                    39:4a:47:b9:18:14:41:08:26:4d:de:98:30:4e:53:
                    08:30:24:40:d0:ed:d2:59:57:d9:bc:2d:27:dc:b9:
                    7e:cc:8a:c9:8f:47:77:90:7c:bc:c4:67:6f:6b:f4:
                    a5:86:c3:b1:ff:c4:64:27:5b:4a:3c:f8:bf:9f:5c:
                    8d:68:24:9e:9e:7f:09:42:ab:34:7c:7d:21:ef:07:
                    cf:c3:8a:87:b2:37:80:6d:ae:5b:48:e8:76:b5:be:
                    6c:48:b1:c9:30:4d:b4:8a:c1:cb:42:fd:59:91:af:
                    6b:41:1b:e1:33:1e:ce:72:a9:0d:28:b7:e3:df:c7:
                    4c:05:a3:c0:ed:69:75:b8:11:50:51:13:52:76:48:
                    f4:5b:b7:33:b3:86:32:bd:d0:88:52:c4:0b:1b:25:
                    88:55:3a:30:b9:e1:09:b4:c2:f0:9c:6a:a3:cf:23:
                    ff:5f:98:13:40:62:bc:ed:b2:94:3d:e3:dd:58:2b:
                    83:4c:4b:96:43:65:88:f0:03:e6:63:be:fc:d6:7c:
                    dc:da:c4:f4:c1:e5:cd:24:0f:6d:bd:ac:5f:0b:70:
                    ac:d6:e8:be:f5:34:4f:71:70:9a:02:2f:88:61:a4:
                    00:2d:11:6e:ea:a9:c6:74:90:c5:a7:eb:d7:5b:4a:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4D:13:81:8E:0B:8B:1A:D9:5A:BA:A4:0C:C3:A0:88:06:8F:A7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5aaf747a-ad2b-325f-8cc5-31a604c85d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.92.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:99:a4:d3:76:93:7d:d9:6c:e3:48:45:52:d4:ad:8a:c9:ba:
         21:87:fd:e3:9f:36:94:7b:05:89:9e:36:a1:2e:09:5f:4b:b6:
         d5:ba:2e:72:4c:b8:98:66:50:fe:91:29:fd:02:07:10:7d:2c:
         7d:01:0b:81:bf:64:69:87:8a:87:f9:6d:52:69:bd:49:60:1e:
         89:f7:90:83:20:9a:c7:31:75:a0:e6:ae:a4:ff:b2:47:f7:52:
         9e:b0:2c:38:1a:e5:5d:70:2f:ae:c7:37:32:c4:7d:d3:a8:81:
         a5:cc:83:55:14:2f:c9:fc:ae:2a:d6:58:f8:a3:db:45:60:91:
         5a:29:2c:8e:70:49:e3:65:94:00:ae:9f:87:bf:eb:12:97:48:
         95:76:7f:6b:36:7d:bb:43:62:ef:d3:af:f9:bd:18:53:5b:3b:
         f1:0a:53:5b:83:4a:a4:65:e1:c5:31:75:4a:32:ca:79:05:b3:
         62:ed:7b:bf:d6:ba:27:01:36:3b:5a:f8:3c:be:e0:0b:4c:b1:
         dd:51:8b:73:90:99:d8:21:4d:81:20:28:78:f5:53:25:a9:6d:
         dd:fa:14:b4:0d:6c:8d:85:de:b6:c4:37:3f:d5:da:e2:06:cc:
         90:41:16:6d:8d:39:1e:6d:05:e6:81:38:f2:2a:07:3d:74:0b:
         a5:ea:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:52 2024 by rpki-client on console-fra.rpki-client.org