Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa73d8f2-82f5-3e0b-b978-8e2ff87f1c26.roa
File:                     aa73d8f2-82f5-3e0b-b978-8e2ff87f1c26.roa (raw, json)
Hash identifier:          3YDkJ5jo4rUJ3M3WV72V5o1GsG792Oi0H403egWvgZY=
Subject key identifier:   96:09:C2:A5:DA:84:29:76:AE:AA:91:EA:D5:15:D0:5A:DA:73:C2:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BC13E272DE2837241F000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa73d8f2-82f5-3e0b-b978-8e2ff87f1c26.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.117.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:c1:3e:27:2d:e2:83:72:41:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=d0cf878e-0232-4a10-bde9-7780684b7f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:74:1a:8a:39:72:f2:25:74:82:53:af:64:
                    a5:ff:ab:b4:26:71:0a:a6:63:c8:22:85:41:d3:6f:
                    19:33:18:89:7b:40:2f:61:92:db:e1:24:e8:90:e6:
                    d4:9a:e3:8f:a6:27:b4:8e:d2:f3:bf:ac:f7:08:a1:
                    c8:5b:01:a9:cc:84:8e:f4:e7:31:86:08:f4:35:ba:
                    c5:80:c2:6a:cb:4f:40:19:14:a2:db:5e:15:39:d0:
                    f7:50:73:35:fc:f4:29:f7:44:49:f3:0c:0c:41:f5:
                    d9:5a:ff:2e:ff:73:15:06:13:b5:cb:2f:24:c7:ee:
                    02:fd:28:75:c9:fe:d0:66:eb:b7:32:12:7c:a6:1c:
                    3e:15:85:e9:87:86:4c:9b:52:80:0b:f3:ba:7b:c7:
                    82:fc:76:76:0c:b4:65:49:40:67:df:c2:c2:14:44:
                    33:bd:38:79:7d:db:82:05:b6:47:84:67:81:ce:8b:
                    11:7a:9c:fa:cc:cb:eb:8a:b0:74:dc:d6:4f:e6:f8:
                    90:36:bc:92:49:e3:20:94:d3:cd:ce:b3:a2:52:a1:
                    94:64:f8:a7:f4:22:a3:da:36:9d:b1:db:06:98:92:
                    e1:b9:1a:cd:ec:66:24:89:12:af:0f:19:dd:ff:24:
                    18:ca:8b:4e:50:a0:b5:9c:87:4f:ba:ee:dd:23:ac:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:C2:A5:DA:84:29:76:AE:AA:91:EA:D5:15:D0:5A:DA:73:C2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa73d8f2-82f5-3e0b-b978-8e2ff87f1c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.117.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:88:7f:f4:5b:d0:fd:60:9f:d5:de:2a:18:67:fb:23:b3:
         14:99:bd:e2:80:c5:cf:41:2c:1d:af:b6:cb:1b:cd:33:fd:05:
         81:0e:1e:c3:f9:37:48:d6:cc:8c:a4:d4:75:0e:db:14:7d:b0:
         1c:c3:02:e8:7e:51:11:1c:cb:e7:d0:a9:89:01:d1:71:24:49:
         71:06:27:6f:25:87:7b:74:e1:c5:a4:f9:87:a9:6e:7a:df:14:
         c0:40:0c:4f:8c:1d:14:b0:48:47:37:71:74:49:63:e4:81:74:
         d8:7d:ca:8e:91:9e:b1:48:c7:8c:fa:4f:3d:d4:22:14:c8:7a:
         ff:20:73:86:03:ac:0a:e5:cf:1a:35:4b:23:32:0f:3b:33:f4:
         dc:cd:20:ae:28:50:79:74:a8:62:da:25:d8:e6:d6:b9:97:06:
         c9:ec:be:90:c0:1f:1d:5e:0e:fa:d2:1d:e8:16:8d:14:d6:95:
         bb:85:f6:19:35:cf:e2:b2:48:db:7e:e0:7e:ab:14:53:2a:7c:
         74:11:9a:b1:6d:37:07:91:40:14:f3:ff:f5:25:d5:7d:0f:fa:
         eb:c1:e2:86:6e:ec:d9:cf:80:29:12:d8:3f:af:a5:72:9a:4b:
         ed:d8:77:3f:a6:e1:16:81:6d:e4:23:1b:d3:5d:e4:d2:44:04:
         50:f6:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:13 2024 by rpki-client on console-ams.rpki-client.org