Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c324551-70b3-3b77-9c9e-5eb591671dcb.roa
File:                     8c324551-70b3-3b77-9c9e-5eb591671dcb.roa (raw, json)
Hash identifier:          G3sz+l8nVYx+Z1vhFNNf+QJuVQ8pomxxyjL7DDmSMCE=
Subject key identifier:   80:8E:8B:D4:6B:45:EA:0F:07:EC:FD:BE:90:40:9A:50:2C:ED:47:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BBCA06A29E63B2CA18600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c324551-70b3-3b77-9c9e-5eb591671dcb.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        104.123.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:bc:a0:6a:29:e6:3b:2c:a1:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=9278aec7-4298-4aad-b360-37565765e7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:f0:55:7d:6c:1d:2b:cf:38:0c:c6:c8:f9:
                    fc:b8:58:a7:5e:0b:fd:f0:67:92:50:7b:9e:a8:15:
                    13:83:ad:d5:4b:0f:50:4f:75:fe:b3:ed:f9:54:c6:
                    ac:ff:e8:bb:99:80:e0:62:7b:48:82:40:d7:38:20:
                    74:ee:4e:ed:8d:2d:5f:0a:d5:82:12:fa:84:e7:8a:
                    11:c3:15:31:01:ce:13:79:89:c7:18:d4:b0:4f:0b:
                    53:80:d6:c9:9f:3d:d0:be:03:80:dc:9b:60:17:b0:
                    c8:f6:89:fd:00:90:f3:63:32:4a:0e:5c:0f:2f:e2:
                    09:0e:30:b0:ba:41:a1:0c:b7:ac:76:57:2a:d0:68:
                    18:97:78:83:96:a7:f9:ec:67:6e:a8:73:73:28:35:
                    75:46:42:19:19:ec:73:e8:b8:21:54:58:d8:2c:36:
                    d8:d0:ec:dc:8a:16:2a:85:8c:f4:74:ff:df:3d:7f:
                    f6:7b:4a:50:75:3b:46:96:ae:57:71:aa:76:bb:cd:
                    18:0d:5f:6b:ab:66:da:96:8e:a5:5b:08:f8:68:e7:
                    7c:21:71:f4:4f:3c:1a:b6:b0:cf:5e:2b:2d:83:1b:
                    df:fd:65:89:0d:6d:8d:4d:03:6e:8f:5b:a7:3f:e9:
                    42:56:53:3b:0e:de:29:dc:11:3f:0a:e1:6e:19:69:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:8B:D4:6B:45:EA:0F:07:EC:FD:BE:90:40:9A:50:2C:ED:47:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c324551-70b3-3b77-9c9e-5eb591671dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:98:c1:ce:12:b5:69:e1:11:44:d3:69:ac:eb:90:50:7a:fe:
         45:f7:c7:e8:8a:8e:8b:c5:2a:90:2b:5e:be:48:da:12:73:14:
         f0:cc:59:83:9f:c0:d1:9b:1d:dc:28:14:5b:13:6a:a3:9e:71:
         60:f1:07:37:26:d3:32:ba:44:aa:d3:aa:ff:8f:8d:1e:d2:92:
         71:80:0a:7f:eb:cf:bc:d1:ec:dd:47:03:3f:81:6a:12:58:1f:
         2e:38:46:87:c3:69:22:14:60:dd:0b:80:6f:92:0b:c1:39:ab:
         fe:32:23:28:bc:b8:ad:90:a6:eb:15:3c:db:76:2d:46:e6:17:
         79:09:0d:7a:34:7b:b2:95:3d:f7:ba:58:f1:d0:cd:b8:40:d0:
         9b:1a:d7:2d:3d:3f:fe:ed:41:54:4b:2d:3e:76:fe:4b:14:6a:
         d6:2f:5b:5e:e0:a0:b1:cf:98:d3:c3:fb:47:be:61:96:31:37:
         66:2e:52:1b:23:5b:51:c5:00:18:86:9e:c2:89:48:e8:e9:f7:
         19:69:2d:64:24:cc:af:06:9c:ed:4c:c9:79:0e:05:8b:5e:a5:
         b9:63:29:65:60:4d:75:2f:45:c8:60:cb:ac:60:12:5e:ec:be:
         ac:05:24:df:54:48:6e:fa:a5:c6:43:4d:4e:69:1b:8f:3f:71:
         2b:73:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:21:21 2024 by rpki-client on console-fra.rpki-client.org