Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9029eab3-d62c-3f21-83dc-4518fb3eef3b.roa
File:                     9029eab3-d62c-3f21-83dc-4518fb3eef3b.roa (raw, json)
Hash identifier:          EiiFzwMsW2F7mzLB99xHUybrriUS7QxXVpZp9SHvLA0=
Subject key identifier:   81:2F:3A:D4:A6:84:F1:F1:65:9B:48:1B:8A:AC:E7:95:BA:3D:A0:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B4D450E80ADD235A576D4B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9029eab3-d62c-3f21-83dc-4518fb3eef3b.roa
Signing time:             Mon 29 Apr 2024 12:19:22 +0000
ROA not before:           Mon 29 Apr 2024 12:19:22 +0000
ROA not after:            Sun 28 Jul 2024 12:19:22 +0000
asID:                     20940
IP address blocks:        104.76.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:d4:50:e8:0a:dd:23:5a:57:6d:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 29 12:19:22 2024 GMT
            Not After : Jul 28 12:19:22 2024 GMT
        Subject: CN=c07b1dbb-a184-4fa2-a6ee-65b6050ce81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:3f:f5:1a:a3:31:1e:c6:1f:45:f0:b9:45:
                    0c:93:d7:38:38:cf:53:a3:8b:7a:24:be:63:1d:91:
                    29:6c:aa:db:a1:2d:c7:01:90:8b:33:4a:5a:ab:44:
                    13:14:52:66:03:e5:df:8c:23:39:8e:f8:dd:8b:80:
                    f9:d3:fa:ec:93:75:ee:71:8a:82:ab:b9:8e:e2:ae:
                    d6:d5:a2:46:04:b0:67:20:dd:5d:55:10:a6:83:bd:
                    20:a8:38:00:ff:e5:bb:1e:5b:3d:04:23:ff:27:51:
                    b6:33:bc:af:d9:33:1c:4c:82:f5:0c:92:be:18:f6:
                    e4:38:70:9f:ba:ee:69:b1:e3:e0:89:b6:c8:4b:62:
                    27:d2:c4:f7:58:2c:f5:3a:03:7a:0d:c3:3f:b1:ac:
                    94:aa:ec:66:6e:33:1d:b9:ba:f4:fa:27:d2:fe:7a:
                    42:c0:f7:dd:b9:a4:6f:26:05:c3:8e:b6:b0:12:7c:
                    28:77:39:ac:41:50:01:39:db:39:9f:62:d5:f5:b7:
                    05:db:54:cd:1c:66:bd:16:37:42:86:e2:00:7d:83:
                    ea:9f:6b:35:49:91:cd:59:75:3a:99:83:15:d3:6f:
                    af:10:5a:a1:8d:74:e2:7a:b1:06:b4:24:60:1c:66:
                    3f:88:9f:ca:25:f4:53:77:4e:59:a9:07:5f:67:35:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2F:3A:D4:A6:84:F1:F1:65:9B:48:1B:8A:AC:E7:95:BA:3D:A0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9029eab3-d62c-3f21-83dc-4518fb3eef3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.76.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:57:77:39:5b:55:b7:31:3e:38:0a:02:3d:59:9f:58:95:ec:
         f7:5f:16:6f:39:a2:9c:45:b9:53:cc:7b:6e:31:22:c9:e5:9b:
         dd:93:73:e1:8f:43:01:b8:40:ea:3b:4b:77:d2:41:80:ca:3a:
         b7:82:d1:a4:e8:fc:b0:91:7e:06:47:2a:3a:4f:7a:9b:26:ab:
         04:1c:85:d6:26:cd:50:2c:6d:78:95:2c:bd:71:98:90:d0:65:
         24:b2:e7:59:47:5c:fc:e8:cd:6c:c7:53:3c:cc:1f:86:de:41:
         49:07:df:1b:d8:e9:a4:7e:8d:3f:5a:1a:08:c3:3a:6d:8d:99:
         3c:7e:37:30:ce:e4:66:a7:97:1d:31:0b:e7:84:36:42:e9:21:
         71:b0:1e:d9:53:ad:92:77:2a:44:bb:f8:38:8f:7c:42:1e:bd:
         bd:40:9a:03:d8:53:2e:87:74:24:52:e8:d0:85:21:9c:7d:07:
         ef:7c:f9:a5:03:fc:62:8b:34:d8:82:ce:78:39:28:6a:2f:0e:
         66:44:34:d5:a4:27:aa:be:22:8e:2d:af:74:ea:51:f7:04:43:
         4e:ad:af:8e:40:68:79:6a:36:85:ae:1d:c0:7f:37:88:4d:01:
         ba:b5:99:33:e1:89:0b:4c:ff:80:f9:ac:59:92:21:17:af:e1:
         3d:31:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:16 2024 by rpki-client on console-fra.rpki-client.org