Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c570819d-66cf-37fa-97fd-995e15639ec6.roa
File:                     c570819d-66cf-37fa-97fd-995e15639ec6.roa (raw, json)
Hash identifier:          m5+ZNC+ppXWYVCyHR3HJGAxHR3w+FYLw72P4sRkaXeA=
Subject key identifier:   91:4C:F1:2B:54:CD:E3:05:9C:DB:53:E1:D1:3A:7C:71:B8:1D:60:6C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BC2FDF719E49252D6DA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c570819d-66cf-37fa-97fd-995e15639ec6.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.121.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:c2:fd:f7:19:e4:92:52:d6:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=1b51d08b-02d1-43eb-9b12-20a147ad91bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:6a:b3:fa:3f:a1:4c:76:08:40:81:14:e9:
                    8a:f1:af:1d:99:e5:09:62:68:d6:7e:5f:65:7c:b2:
                    df:29:56:0a:d5:bd:a2:c0:67:ac:76:7f:31:6c:7c:
                    6f:77:e9:3f:ce:99:59:b0:c9:f8:5a:02:d9:4c:34:
                    43:6f:78:4a:d4:84:1f:54:f6:47:a4:17:3a:ec:ca:
                    76:79:72:11:26:36:9a:d1:de:e1:55:df:00:ac:f9:
                    f3:28:1d:f7:29:de:6e:b3:85:ca:0c:36:8e:64:ff:
                    a4:4c:98:e6:fa:c3:d0:e4:f2:30:d2:bd:3e:85:41:
                    f3:08:84:e5:2f:89:70:e8:c0:07:21:4c:4a:58:f4:
                    80:f3:e3:97:92:70:24:57:77:35:f8:f1:9e:c9:da:
                    18:f3:c2:65:48:0b:45:ae:e4:2f:5c:3f:65:fe:16:
                    48:70:64:36:b1:7c:cf:85:68:3d:a2:7a:9c:db:35:
                    16:f7:be:72:eb:9f:a3:ca:a5:db:4f:c4:8e:4b:43:
                    46:5c:84:29:b3:de:fe:56:88:94:49:23:0c:72:55:
                    3c:28:9f:02:5b:ff:f4:cd:d8:41:e3:07:6d:3c:ae:
                    76:e7:de:6b:05:09:96:cd:2f:97:9c:48:71:c0:21:
                    a5:5c:62:ad:3c:7e:42:81:53:7a:1a:53:55:d1:12:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4C:F1:2B:54:CD:E3:05:9C:DB:53:E1:D1:3A:7C:71:B8:1D:60:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c570819d-66cf-37fa-97fd-995e15639ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.121.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:c9:0d:32:fa:b5:72:32:5c:40:66:e0:49:86:21:41:5b:
         0e:32:a3:a7:32:66:cd:bf:4b:87:05:f5:8d:65:d1:50:f9:a9:
         fe:5e:74:9c:f8:54:8b:b1:28:47:c1:70:06:ad:e6:a1:2c:5e:
         da:fc:f9:b9:36:fd:2f:34:30:ce:27:25:f4:aa:fa:69:cf:cf:
         ec:30:e6:12:c0:1f:d5:11:bf:7b:0a:35:38:79:fe:93:ac:16:
         95:6c:1a:d9:90:7e:40:a3:bb:70:8f:34:e3:21:dc:78:a0:fd:
         46:fe:a7:a9:66:0f:44:eb:6a:64:2e:f4:5f:1b:76:70:09:30:
         c0:a9:77:cb:81:86:c2:10:9e:7f:50:fb:9d:93:3e:b8:5c:ad:
         35:de:91:69:94:b1:05:74:07:5a:92:93:e2:82:0e:1e:2b:8a:
         05:e9:0b:7d:85:25:2c:25:2a:af:ba:8a:f5:f3:98:95:e7:06:
         29:17:f5:d9:6b:e0:8c:ea:7e:c9:ce:f9:20:30:ba:58:d6:e5:
         77:a6:0d:45:ee:1f:e7:5e:fc:c6:70:8c:13:99:d4:34:a8:f7:
         3b:bc:9a:37:e6:4f:bf:33:c5:1b:e9:64:d2:79:70:cf:42:5e:
         69:09:79:9b:78:61:59:84:c1:7e:8d:a1:80:2a:6a:73:13:ca:
         56:dc:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:23 2024 by rpki-client on console-ams.rpki-client.org