Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf3b4960-4c80-3e00-9b74-ccd1710dfa3f.roa
File:                     bf3b4960-4c80-3e00-9b74-ccd1710dfa3f.roa (raw, json)
Hash identifier:          vlv9xSNY4pyW5SogFavAxaBSS00RxDBwnh5Ad3oT32o=
Subject key identifier:   DB:21:DE:80:0D:AB:33:8D:AB:E0:93:B4:BE:BB:F3:6A:03:79:3F:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B755B6F7AB3D038D54319200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf3b4960-4c80-3e00-9b74-ccd1710dfa3f.roa
Signing time:             Tue 30 Apr 2024 09:51:42 +0000
ROA not before:           Tue 30 Apr 2024 09:51:42 +0000
ROA not after:            Mon 29 Jul 2024 09:51:42 +0000
asID:                     16625
IP address blocks:        104.91.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:55:b6:f7:ab:3d:03:8d:54:31:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 09:51:42 2024 GMT
            Not After : Jul 29 09:51:42 2024 GMT
        Subject: CN=39357154-f133-4526-b33b-f0c294ed3efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b3:a9:a5:72:14:5a:a8:ce:48:a0:82:54:b9:
                    8e:9b:de:44:8d:9b:14:aa:67:a1:d4:43:c7:45:69:
                    eb:a8:69:f1:bf:9b:fa:74:e8:95:d9:86:14:15:b2:
                    a0:cf:9b:37:11:eb:11:ea:fc:bd:52:e5:1a:c8:f4:
                    1b:41:71:26:bf:e7:51:9e:84:4d:b8:5e:88:a8:ed:
                    58:4b:cd:32:1c:7a:14:e7:04:7b:81:b2:6f:24:3e:
                    64:86:e7:28:ce:eb:ec:c1:9b:81:d8:70:a8:82:cf:
                    f3:8d:4b:df:ba:b7:c6:8a:24:34:55:f2:85:7f:1b:
                    28:8f:a2:35:21:fb:7e:9b:58:eb:b0:c3:66:84:16:
                    45:b7:b1:85:45:44:34:14:c2:5d:79:9e:c2:34:80:
                    85:a3:3b:64:55:07:83:b2:1a:0c:6b:bc:62:25:56:
                    81:8a:f7:d5:c1:79:30:b0:35:a0:c0:ed:72:e4:0f:
                    e8:06:d9:9a:11:0d:bf:11:9c:5f:71:2a:24:28:58:
                    3e:6c:1b:3e:c1:36:b4:49:8e:4e:dc:0e:58:1d:dc:
                    e8:0f:cd:6a:9d:c7:bc:a1:f3:98:03:72:f1:1d:97:
                    76:89:b6:4c:2f:93:2c:29:6c:56:bc:e2:c2:35:a2:
                    cc:5f:f1:df:5a:4d:03:af:1c:fd:99:d5:3a:17:7e:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:21:DE:80:0D:AB:33:8D:AB:E0:93:B4:BE:BB:F3:6A:03:79:3F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf3b4960-4c80-3e00-9b74-ccd1710dfa3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.91.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:66:8b:65:b8:3c:17:96:ec:f6:1c:fe:e5:45:68:6b:0e:30:
         c8:e2:55:5c:2d:d0:d0:04:31:e7:3b:c8:d4:46:ac:70:5a:2b:
         a7:ac:f3:8c:20:2d:72:ea:5f:28:d8:50:e5:3b:bb:00:29:88:
         e4:0a:fc:48:97:04:32:ba:66:5b:ec:8e:f9:c3:15:71:64:69:
         19:57:46:88:5d:64:09:a1:e6:00:4a:b7:40:41:fb:32:28:f7:
         f2:18:b7:6d:1c:33:46:ba:68:4e:5b:95:af:6b:62:f8:5d:ad:
         8d:4b:56:be:50:86:b4:73:fb:8b:3c:41:8a:6b:55:16:77:a1:
         36:da:b6:b8:4f:a4:03:a2:0e:8a:95:32:47:98:ac:d1:94:d3:
         82:bb:30:71:e3:83:4b:92:ff:6a:cc:97:f6:08:4c:ba:1c:f9:
         69:70:30:1e:44:eb:86:46:45:2b:8d:66:3e:18:f7:a4:34:ab:
         50:c1:e1:b8:15:8f:40:da:6e:53:1b:ca:a9:b5:f6:9d:72:ea:
         f5:5b:91:f7:4d:f9:81:3a:45:75:51:37:c1:ec:4f:40:7a:b1:
         12:ab:b2:bf:44:67:7f:22:6f:85:03:7f:96:09:3a:01:dc:40:
         bd:1e:55:eb:0a:9d:c6:5a:c0:ab:f9:8c:f1:1c:0d:27:5e:a5:
         f7:e0:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:01 2024 by rpki-client on console-fra.rpki-client.org