Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa
File:                     78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa (raw, json)
Hash identifier:          wpQiWnJCw7HBFQ73TQR64BA1bMQS2yIn4IbMGDXzM88=
Subject key identifier:   72:90:02:E4:32:FA:8E:0D:9C:10:60:9F:C2:CE:93:44:64:71:0D:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B7A1ABDCBA32736A256443A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa
Signing time:             Tue 30 Apr 2024 12:24:45 +0000
ROA not before:           Tue 30 Apr 2024 12:24:45 +0000
ROA not after:            Mon 29 Jul 2024 12:24:45 +0000
asID:                     16625
IP address blocks:        104.101.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:a1:ab:dc:ba:32:73:6a:25:64:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 12:24:45 2024 GMT
            Not After : Jul 29 12:24:45 2024 GMT
        Subject: CN=b055c529-e116-47c7-ab93-b2241e3cdb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:27:98:20:e6:f5:07:1a:64:ef:c1:58:e0:
                    be:b6:d1:17:1a:bd:bd:09:c6:11:7e:72:ef:1f:12:
                    34:f1:6d:3b:e1:9d:1d:01:4c:be:8b:83:ba:a3:32:
                    ee:3a:93:72:64:b2:4a:c0:ed:fa:70:62:04:42:69:
                    94:cf:17:68:42:18:55:0f:23:02:69:d8:1f:08:41:
                    48:9d:17:e9:22:14:61:8b:d1:42:9b:f3:6e:9a:11:
                    ac:fb:fc:8c:92:43:cd:50:da:5c:fe:ec:c9:1f:88:
                    79:c2:5f:c8:8f:43:79:a1:bf:fe:d0:1f:43:4d:e2:
                    bc:5b:63:f9:6c:cf:9a:44:8d:72:0c:cf:68:c1:25:
                    87:b2:8f:bf:a7:f5:34:f3:13:8c:b3:56:6d:e3:32:
                    ba:86:3f:1f:8c:16:dd:de:01:a3:8c:8f:88:e1:4a:
                    59:25:b6:ca:01:57:90:88:19:b8:7b:67:70:61:5a:
                    22:81:3a:f3:dc:b3:06:2f:ea:40:34:b1:a3:f8:bf:
                    80:91:7f:db:d0:1c:64:62:c4:b5:a4:5e:ef:11:ca:
                    c7:9f:fc:15:a3:71:3a:2a:38:b9:35:ba:65:c7:ee:
                    5f:54:bc:77:a5:68:e3:fc:f9:07:99:76:88:47:c8:
                    d3:13:dc:77:15:bf:41:5e:5a:a8:83:30:69:87:70:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:90:02:E4:32:FA:8E:0D:9C:10:60:9F:C2:CE:93:44:64:71:0D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78e18e11-ff20-374e-bdc2-e1bb7807a20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.101.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7f:bc:bb:37:a7:9f:2a:7e:23:55:48:7d:6a:fa:4b:ff:3a:
         4d:42:ce:07:86:44:3e:5a:19:82:90:69:79:7c:82:70:ed:70:
         7a:0a:b8:1d:53:de:22:a1:a1:f9:15:27:68:d9:7d:e0:97:24:
         f0:3c:4b:b3:dc:36:9f:ac:63:5c:f9:ec:f5:7a:75:aa:b5:f3:
         8f:67:ee:b8:09:fb:76:c4:5e:cb:de:ae:d4:8b:1c:57:9c:fb:
         08:69:3c:a0:3d:f9:26:35:c4:8d:19:84:65:af:58:52:dd:33:
         54:c0:db:d5:60:00:78:17:0c:d5:c1:21:4b:9f:b9:32:d4:d8:
         bd:50:3a:96:3c:f1:74:37:4b:53:87:ad:b8:aa:d1:d7:f9:73:
         1f:63:34:b4:59:f3:db:4d:49:8a:2f:b5:63:77:ea:a4:2b:13:
         ee:a5:71:b3:5c:c6:ff:93:cc:b1:77:08:c1:71:31:26:b8:c3:
         ad:85:2e:a8:cc:e5:f6:1d:94:7f:32:5b:05:d3:1b:d4:ce:fd:
         53:3f:46:b3:dd:0e:7f:4b:84:fe:68:57:71:3f:92:16:1c:3c:
         32:b7:e7:c6:89:2a:5d:03:0b:39:50:8e:7e:c5:02:a8:97:ac:
         63:d0:05:34:03:1a:85:f6:f7:25:84:a8:d1:4f:81:a3:89:dd:
         af:58:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:14 2024 by rpki-client on console-fra.rpki-client.org