Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a767b406-f42c-3a22-be2b-7831caf339cf.roa
File:                     a767b406-f42c-3a22-be2b-7831caf339cf.roa (raw, json)
Hash identifier:          0eAFUK4F+XBlQTAuvnS2sirPfVgCH6iY0PqiPAPWpIg=
Subject key identifier:   FD:04:26:42:3D:AD:17:DB:65:AA:03:44:4E:5C:5B:1E:FD:8E:80:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B7320C1E962A74DB93557D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a767b406-f42c-3a22-be2b-7831caf339cf.roa
Signing time:             Tue 30 Apr 2024 08:39:51 +0000
ROA not before:           Tue 30 Apr 2024 08:39:51 +0000
ROA not after:            Mon 29 Jul 2024 08:39:51 +0000
asID:                     16625
IP address blocks:        104.82.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:32:0c:1e:96:2a:74:db:93:55:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 08:39:51 2024 GMT
            Not After : Jul 29 08:39:51 2024 GMT
        Subject: CN=f1f26fd8-bce3-4b8e-a16e-585c9248153d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:f2:68:a4:48:4c:1f:75:38:fa:0c:84:42:
                    99:20:5f:54:87:36:e5:a1:5e:9f:13:ee:b5:ee:38:
                    1e:32:2a:e7:ef:ae:c8:a0:e0:07:21:c7:dc:6a:30:
                    7e:f3:47:76:df:d9:a2:22:28:1e:f9:68:2e:8a:f2:
                    0b:7d:2e:58:c8:9f:07:02:9c:15:91:5c:f1:dc:a6:
                    c6:a9:b1:c0:bd:ea:07:31:2b:31:f2:68:b8:dc:77:
                    3c:a6:2e:44:c7:95:ec:51:e1:14:69:07:02:ac:20:
                    d4:df:39:b1:0b:52:8e:47:21:b6:46:7a:0b:db:1d:
                    7e:63:09:1c:64:a0:03:67:b6:5a:59:74:58:0d:9a:
                    bf:3f:cc:ef:62:25:5b:05:09:6d:32:e2:a0:5e:90:
                    aa:fb:43:35:a2:ed:7a:14:fa:fa:90:d2:75:25:7b:
                    b9:47:0e:35:48:49:c2:09:5b:c5:2d:a7:ff:59:b2:
                    e9:51:89:77:56:71:d1:86:d3:66:57:ac:96:38:ad:
                    12:fc:58:9d:4c:d2:2b:56:fb:13:1b:9a:05:f9:48:
                    34:d4:da:6e:d7:a5:cf:6f:8c:40:24:b6:2c:ab:90:
                    e2:d0:af:bf:d7:a5:29:00:78:87:b1:f3:08:d6:53:
                    0f:6e:1c:6b:35:3e:01:b1:76:8b:bb:ff:94:2d:87:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:26:42:3D:AD:17:DB:65:AA:03:44:4E:5C:5B:1E:FD:8E:80:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a767b406-f42c-3a22-be2b-7831caf339cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.82.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:42:d1:70:7b:82:37:b4:a5:cb:d8:2c:dd:a3:61:c4:be:
         e5:74:ea:47:2d:aa:d3:90:3b:6e:23:66:24:4d:3e:01:b8:1c:
         73:af:14:67:5e:f1:e5:c5:c6:9d:f1:86:6f:58:9c:4f:41:d2:
         cf:63:a3:eb:dd:63:48:95:cb:25:88:7b:23:5c:17:bd:40:8c:
         40:4f:e3:f7:bb:17:f9:65:d2:7f:49:f5:a0:d2:91:7c:f6:68:
         3a:99:9d:c2:88:2c:b6:79:95:0b:bc:32:2b:c6:dd:ec:1a:9c:
         ae:c6:17:fb:3a:91:04:e9:8a:ed:12:2e:cd:c1:ff:19:51:ad:
         ea:cf:74:41:d9:9f:62:21:3b:2b:6a:0d:b0:e6:31:c0:37:09:
         20:2f:06:98:88:98:c6:19:32:a2:7e:1c:69:43:81:c6:d9:ac:
         ed:16:ef:c2:9c:b6:db:26:76:73:72:57:39:62:38:0c:25:f6:
         ec:62:3d:9c:e2:4d:8a:4c:28:8b:2c:08:59:10:3a:2c:f4:10:
         72:32:b5:dc:82:b0:b3:6e:17:10:b8:ac:34:09:b6:b7:e1:66:
         71:fb:7a:fb:96:54:16:ef:00:e5:87:91:6e:50:fd:8e:25:ba:
         7b:52:64:bb:7b:9c:a4:d4:8e:06:9b:2f:0e:9b:6d:9a:14:55:
         73:75:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:13:11 2024 by rpki-client on console-fra.rpki-client.org