Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/673affd0-aaf8-380d-b72b-e659be8cc540.roa
File:                     673affd0-aaf8-380d-b72b-e659be8cc540.roa (raw, json)
Hash identifier:          zinrrEaeXNRVax5I+QMVdVlsTE2zKN6gy3csLk+/85s=
Subject key identifier:   C3:C7:6A:83:9E:CB:2F:20:0E:18:0F:D6:68:44:50:75:36:D5:8B:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584777C6476953ABE6D8B3101730
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/673affd0-aaf8-380d-b72b-e659be8cc540.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     16625
IP address blocks:        104.107.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:47:69:53:ab:e6:d8:b3:10:17:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=f0ab6eb0-b2cc-4328-8f3b-8992788c36fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:24:e1:fa:95:03:71:ee:5e:ce:91:8e:14:
                    6e:9d:ce:56:cf:74:ee:b3:5a:49:96:9c:bb:27:01:
                    f7:96:26:5f:17:b7:1a:26:f4:37:0a:ec:d1:36:3d:
                    e3:a9:91:ad:10:21:63:f7:37:51:b1:63:c6:fb:a9:
                    79:d6:69:32:f3:d3:dc:40:9a:2f:3c:94:37:ec:53:
                    1d:1d:53:4f:35:5d:6f:cb:65:08:b0:6a:30:0a:82:
                    25:b9:86:5b:a0:0f:cd:13:2b:00:cd:cb:cb:4e:0e:
                    99:4b:b6:63:5f:ff:47:d1:38:ad:9f:ff:c6:4e:fe:
                    f2:a7:be:9e:4f:e2:21:d6:38:3f:16:38:53:76:1d:
                    e9:98:a2:c1:f9:2d:f1:1e:d7:dc:e0:09:8b:06:21:
                    89:9e:3c:0c:8f:8c:8f:0b:16:b0:aa:78:29:08:b5:
                    14:21:e2:ec:6a:45:9c:c7:b5:28:31:db:3e:41:89:
                    4e:c2:19:64:93:3c:50:2f:d4:00:ad:e2:47:46:b2:
                    49:de:15:47:5e:64:86:f1:7e:14:6b:5c:f2:b8:f1:
                    44:7e:4b:2c:78:ef:b3:26:ab:e2:f1:94:01:aa:89:
                    bd:34:e1:d2:6d:92:2b:d7:e1:6e:3f:ce:10:97:c5:
                    65:81:36:3e:f3:1e:61:f5:87:ef:33:29:94:12:3c:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C7:6A:83:9E:CB:2F:20:0E:18:0F:D6:68:44:50:75:36:D5:8B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/673affd0-aaf8-380d-b72b-e659be8cc540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.107.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:15:2d:36:5e:26:cc:cb:44:ef:df:56:b9:36:4d:3c:0f:50:
         5a:ce:97:7d:13:7d:37:3e:2f:0e:e2:f7:fc:53:da:c4:cd:b1:
         51:10:f5:17:19:94:04:ff:76:96:15:a5:5b:e6:cf:79:d5:b2:
         25:22:bc:39:da:b7:d8:3d:8d:ea:68:06:0d:cf:94:c0:72:8a:
         5f:06:60:35:a2:b1:a8:56:35:1d:f7:da:05:37:71:47:1a:b4:
         51:73:76:e4:e0:8a:c6:45:15:ce:77:46:78:51:b7:12:58:17:
         1b:72:e9:df:6e:83:fb:84:66:3a:7e:c7:ca:51:82:3f:d3:ed:
         4e:e8:05:e3:ef:45:c0:5a:55:40:a3:ad:70:d4:19:e8:28:b2:
         d8:b1:4c:94:9c:00:c3:ff:92:a7:ff:8a:ab:d2:ba:f2:35:80:
         be:5d:57:05:91:30:4d:b6:29:4c:ca:b8:36:8b:df:cc:83:f2:
         db:b4:3a:12:fb:be:80:54:14:04:b3:64:71:ca:e2:af:af:35:
         13:7d:2d:97:89:96:60:f0:54:0d:14:3c:fa:4e:71:85:4e:c8:
         a2:a9:d7:cf:a5:49:f6:96:36:61:5d:77:c2:ec:2b:fd:b0:e3:
         36:a7:26:40:5c:53:00:1e:7d:98:52:25:51:12:91:92:9c:c0:
         1a:f6:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:13 2024 by rpki-client on console-ams.rpki-client.org