Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa
File:                     85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa (raw, json)
Hash identifier:          x2qXgrRQsFvoIqoFni7M9MlzRCWNX08liWmxsaCcS/s=
Subject key identifier:   BD:CB:91:98:30:26:A7:54:44:2A:3D:2E:5C:BB:9A:CE:09:EB:32:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DBCE73173F4A53D6B0055300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa
Signing time:             Mon 13 May 2024 11:24:04 +0000
ROA not before:           Mon 13 May 2024 11:24:04 +0000
ROA not after:            Sun 11 Aug 2024 11:24:04 +0000
asID:                     16625
IP address blocks:        23.39.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:ce:73:17:3f:4a:53:d6:b0:05:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 11:24:04 2024 GMT
            Not After : Aug 11 11:24:04 2024 GMT
        Subject: CN=54b1b21e-00be-4d6a-b6f2-e04c167155c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5d:66:f7:d3:cc:84:a4:ef:1d:cd:d6:f7:24:
                    d1:71:70:22:16:f1:ae:12:52:61:08:7f:ae:48:85:
                    ef:cb:1a:b4:d2:fc:68:7f:dd:41:38:9d:4e:c5:73:
                    97:7c:27:20:20:e0:12:1a:fe:35:c3:2c:5a:1a:8f:
                    f3:a8:76:84:83:56:8b:29:ae:cf:8d:d2:35:8d:73:
                    fe:97:94:54:f9:27:b6:39:f8:50:e1:d7:41:4c:6c:
                    07:db:43:53:5a:be:e0:f4:19:91:76:c0:36:87:7b:
                    20:08:16:a9:06:ae:8c:d9:1b:5d:99:fc:6c:4e:3f:
                    86:7b:6e:91:e6:44:dc:92:5b:de:2c:d3:1a:1d:65:
                    46:98:55:3c:a9:b4:11:e6:c4:fc:b1:32:87:7b:90:
                    ee:cc:90:ba:07:f0:01:d0:38:fc:e0:72:29:e8:e2:
                    66:da:21:14:77:40:53:9a:df:ac:43:0a:77:12:7f:
                    d4:9d:45:7d:65:76:45:32:27:0f:6c:47:1a:d9:f3:
                    53:ac:a5:ea:56:a0:fc:34:83:23:a6:b7:69:a5:ef:
                    1d:9d:29:26:00:ba:d9:93:3c:90:9d:65:80:ac:e1:
                    34:c4:cc:c2:e0:05:91:e0:10:7e:68:cc:f0:a0:e9:
                    a6:3b:09:64:ed:1a:4d:85:f6:bc:4d:c5:22:5f:8d:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CB:91:98:30:26:A7:54:44:2A:3D:2E:5C:BB:9A:CE:09:EB:32:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dfce11-36ca-3a7a-90b9-547a70fc3c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.39.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:7a:9f:d6:ed:49:ad:63:92:b1:48:60:05:36:00:94:82:
         a8:a6:44:f3:43:da:e3:7b:72:dd:76:3d:27:ed:6b:cf:a1:de:
         7a:9c:50:c4:e3:f9:15:8d:b1:f5:5b:ed:7f:4b:7d:64:de:b2:
         a6:b8:e0:86:9f:1b:0d:a5:c6:ad:6e:46:97:58:b1:07:2c:5a:
         a5:aa:6f:60:5a:c9:72:fc:64:bc:ce:7c:73:49:55:b6:1e:90:
         fe:76:12:a8:11:73:75:84:87:8f:ab:39:55:81:18:7f:2d:3c:
         df:a5:77:d1:1c:fe:53:65:d6:b7:87:a5:b3:61:db:3e:78:f6:
         88:c9:f8:ae:3e:e7:ef:99:0c:f5:8e:48:a8:49:ad:23:07:c3:
         3a:2e:ca:10:81:e8:d7:89:d2:95:c6:2a:d8:46:d5:b0:32:55:
         22:88:07:d4:3d:f2:b9:57:0e:7c:fd:61:ec:1a:e1:6f:37:f2:
         2c:50:61:85:bf:60:14:e0:eb:f0:a7:c9:c1:b1:f1:94:3b:24:
         ec:f0:12:6d:19:eb:1d:6c:ec:57:54:29:eb:30:36:cd:45:37:
         48:2b:55:53:99:e6:aa:30:4c:48:89:4b:7b:b3:27:d6:c9:b1:
         d1:37:43:1c:c0:27:f2:fa:22:2d:be:7e:c9:b4:b4:d7:f9:76:
         75:d1:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:33:01 2024 by rpki-client on console-ams.rpki-client.org