Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dce555a-58cb-3527-ae36-42f40f14ff8d.roa
File:                     7dce555a-58cb-3527-ae36-42f40f14ff8d.roa (raw, json)
Hash identifier:          ynix+uyNoFfWHFMU//0zGwipZ416kMkjMN4ES7XUE2Y=
Subject key identifier:   DA:52:82:F5:23:73:AF:22:9D:20:B4:95:54:CA:BA:03:AA:FA:5A:08
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B7563913FBEEF48FDD1B6980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dce555a-58cb-3527-ae36-42f40f14ff8d.roa
Signing time:             Tue 30 Apr 2024 09:52:44 +0000
ROA not before:           Tue 30 Apr 2024 09:52:44 +0000
ROA not after:            Mon 29 Jul 2024 09:52:44 +0000
asID:                     20940
IP address blocks:        104.97.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:56:39:13:fb:ee:f4:8f:dd:1b:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 09:52:44 2024 GMT
            Not After : Jul 29 09:52:44 2024 GMT
        Subject: CN=ec32da33-55ee-4c2f-8716-233af8d9390f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:33:25:6c:87:8b:5f:9b:77:85:f3:e9:7a:
                    fb:b5:44:d8:dd:4a:6c:18:39:27:5d:e8:c9:72:a4:
                    a4:b5:f0:c3:be:32:96:25:b7:32:20:13:e7:b9:8c:
                    05:e7:4b:1a:89:a9:64:c3:77:29:76:14:99:44:22:
                    5d:c9:05:67:15:c4:c1:db:70:5f:eb:10:7a:b2:d6:
                    8b:d7:ee:ff:36:a9:c3:2f:1b:3f:54:fc:64:e1:50:
                    44:a0:21:f0:b6:e5:93:e7:94:09:f8:09:32:ef:8d:
                    cd:35:b5:4c:9a:33:a1:2e:1c:45:68:74:59:b8:67:
                    8d:23:a0:88:17:06:a0:25:de:be:2e:9f:72:61:88:
                    36:b1:00:8c:d8:90:c0:bf:8c:8a:29:ef:c9:3c:bb:
                    73:ae:8c:6b:fe:bb:9e:cc:89:b3:f1:05:7c:7f:d4:
                    42:01:2b:05:bd:69:91:cf:5f:d5:c4:59:dd:76:33:
                    a0:40:57:a9:af:9f:37:de:03:c2:69:e5:9d:17:e4:
                    ef:a4:4e:76:a1:06:6e:56:58:9d:3a:54:db:d8:04:
                    cb:85:ab:95:f0:16:cb:83:ba:c2:31:58:52:18:d9:
                    65:34:d4:73:ce:51:74:57:86:c1:4a:7e:1b:de:d0:
                    63:f0:38:8f:41:aa:e3:f7:93:0a:15:6e:b8:c2:49:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:52:82:F5:23:73:AF:22:9D:20:B4:95:54:CA:BA:03:AA:FA:5A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dce555a-58cb-3527-ae36-42f40f14ff8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.97.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:26:ef:5a:bb:2f:e9:df:55:5f:fb:7e:88:45:89:e1:04:
         93:ae:f4:f4:5f:d1:d0:0c:9d:2a:bb:89:52:76:51:18:1e:f9:
         f5:93:28:62:2e:4e:aa:62:c2:01:4b:0a:2c:05:cf:73:17:46:
         c9:5b:5c:98:4c:38:86:bb:1b:58:a6:17:41:7f:f8:24:83:e5:
         4d:6e:b5:22:fa:0e:dc:45:4e:55:a4:a8:1a:6d:11:f5:14:e0:
         02:84:18:c7:c7:6d:5a:b1:31:9e:0c:5d:f2:7f:c9:f9:0b:c7:
         ae:97:87:f3:12:21:6d:1c:dc:12:3e:ba:e4:03:39:bc:f1:09:
         4c:2d:3c:16:ab:80:f3:5e:1d:65:95:98:7c:8d:ef:9b:7a:9a:
         48:cd:55:9d:be:2e:6f:cf:80:8a:0a:4a:df:0f:f3:2f:58:92:
         07:ca:40:de:17:d3:0d:18:52:a0:1e:fa:a3:43:43:9c:71:32:
         a9:52:c8:8a:d9:f6:d8:b7:c8:a8:98:94:33:03:f3:66:b3:99:
         e0:f6:4f:14:28:77:af:90:6b:2e:7d:51:73:71:98:b4:9f:a7:
         4d:b8:02:70:70:c5:0c:13:c3:7e:b4:24:c9:51:4f:27:57:d3:
         c9:3c:ae:2d:da:05:5e:4d:3c:21:b4:36:ec:06:8d:83:60:6d:
         0a:86:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:55 2024 by rpki-client on console-fra.rpki-client.org