Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa
File:                     9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa (raw, json)
Hash identifier:          lMGegH0O9ylTzhUfNrxdCulhFBkDqIHPTY1LmRWBRu4=
Subject key identifier:   91:A2:B4:6B:76:68:29:17:CF:C0:73:27:A0:F7:92:46:03:0B:3F:14
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584776611F5AD2BD17F44556F880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.101.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:1f:5a:d2:bd:17:f4:45:56:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=790ea52f-592c-4837-9e71-48a2280d99c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:69:fa:3c:99:26:bb:0c:68:6e:b7:50:c5:
                    a9:79:b0:28:0e:09:b8:f4:5e:8e:d8:b6:6b:76:b5:
                    e0:ed:59:08:5c:7f:18:e5:cb:42:14:a7:6a:44:16:
                    7f:9b:bb:ad:a2:f2:ce:75:e7:9d:18:00:06:d5:b3:
                    06:c5:68:c3:40:9b:02:31:3a:83:c2:dd:a0:9d:22:
                    2b:9c:5e:02:b7:f9:4f:6b:dd:d3:78:5e:c8:12:77:
                    52:de:7e:f3:4f:51:ad:25:c9:42:3a:cc:a6:cb:a9:
                    f8:d3:a5:4b:16:38:c1:56:85:5b:92:71:bd:41:3b:
                    ba:d6:84:65:fa:60:f3:34:0e:b0:69:6c:c3:35:7a:
                    96:16:b8:42:95:a3:88:41:da:2a:e4:8e:36:0c:f7:
                    d9:b8:1b:ad:0c:66:00:cb:40:f8:50:ef:49:7e:69:
                    4e:3a:4e:5d:e6:1d:46:20:58:08:97:8a:66:b2:49:
                    10:6b:84:97:a7:df:1f:2e:7b:c2:21:22:7b:16:42:
                    52:c5:32:72:df:b4:c6:c4:e8:70:69:5c:3e:7b:e5:
                    33:a8:e1:28:bb:53:d5:9e:44:0b:6b:5b:fd:a6:20:
                    4c:be:5e:96:2d:03:c9:e5:a3:ae:6b:a9:5e:48:0f:
                    76:7d:7b:70:6e:1c:ef:70:0d:5c:e8:84:b5:dc:b4:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:B4:6B:76:68:29:17:CF:C0:73:27:A0:F7:92:46:03:0B:3F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.101.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:74:1e:22:21:ca:d6:25:3a:6d:7d:59:10:65:47:ea:e8:8a:
         5a:b7:59:32:01:6c:40:a0:33:80:7c:4b:7c:28:3f:01:c3:ae:
         af:d3:ad:af:1c:af:30:fa:7e:a2:71:fe:ea:ef:3b:86:f0:f8:
         56:55:2d:5b:00:9c:d9:61:4c:71:6e:24:a9:3c:0f:08:f8:e3:
         85:7a:80:e0:d0:ce:ee:85:b9:a0:1a:ce:e1:b9:d1:1b:88:33:
         d0:82:61:b3:bf:9b:56:b8:d5:6b:39:06:01:09:71:3a:8d:91:
         66:85:6c:56:18:97:18:07:f1:6f:f0:ee:6c:2f:8d:dc:df:29:
         1d:1f:e9:dd:18:a2:b3:0f:77:64:5d:34:ee:5f:ea:3b:cf:78:
         c6:b6:29:05:e6:53:82:9a:58:76:5c:2c:64:0f:46:fe:37:d0:
         c4:fa:9e:c7:2b:38:5a:61:8d:6d:ad:2e:8c:14:3c:de:f6:aa:
         e0:9d:7b:e0:f5:5b:70:ab:55:bf:88:f8:98:17:66:55:2c:5e:
         07:42:d9:5a:cc:d4:f1:f4:af:97:91:de:75:13:39:90:4e:f7:
         88:b7:0c:eb:9c:aa:72:5e:2e:96:3f:42:32:b8:bb:51:09:83:
         88:9d:ed:e2:e3:c6:f7:1d:2f:c3:cc:96:23:0f:c1:72:66:8c:
         81:31:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:07 2024 by rpki-client on console-ams.rpki-client.org