Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa
File:                     c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa (raw, json)
Hash identifier:          uGaxAc6GJePvZuQPsZwahZB4jPvl22ctY756nLF56s0=
Subject key identifier:   6B:56:F6:F9:6C:B4:59:0C:BF:46:4D:64:FF:BA:3A:16:14:87:5D:F9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B7B37E6480CAFDFDF4A89A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa
Signing time:             Tue 30 Apr 2024 13:00:40 +0000
ROA not before:           Tue 30 Apr 2024 13:00:40 +0000
ROA not after:            Mon 29 Jul 2024 13:00:40 +0000
asID:                     4761
IP address blocks:        104.106.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7e:64:80:ca:fd:fd:f4:a8:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 13:00:40 2024 GMT
            Not After : Jul 29 13:00:40 2024 GMT
        Subject: CN=7c3895f7-62b1-4310-ac66-5c96b04ff5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:3b:9f:f1:c9:9a:13:5e:91:ed:53:c9:8a:
                    d1:a1:da:4e:ea:0e:9a:98:0e:38:da:4b:dc:ea:b7:
                    40:67:77:0f:5f:38:08:15:ac:7c:b1:5d:48:12:95:
                    2c:43:0f:24:f2:38:9a:de:95:f2:b0:10:d1:8c:ab:
                    89:94:5d:0d:f6:f8:81:8a:54:4f:70:fa:af:54:05:
                    78:cc:7d:ad:17:b4:7c:f9:5f:ea:ca:5c:2f:ef:96:
                    35:2d:31:80:d9:4f:0c:48:9c:f2:a5:96:86:b4:b4:
                    e5:8b:03:a0:73:34:46:eb:cf:05:55:36:1c:c9:38:
                    13:80:94:ef:4a:4d:d4:d7:4d:b1:c7:3b:92:d2:da:
                    e3:28:14:04:93:22:da:b6:d1:74:f7:bb:6c:fd:ca:
                    b0:cf:61:ea:0f:25:40:1e:11:69:95:20:38:d9:ff:
                    e9:e9:4e:db:24:38:65:f0:f2:28:2b:8b:bf:bf:08:
                    14:f2:15:14:a4:5c:8d:66:e4:a8:e0:b3:c7:26:aa:
                    82:15:66:b4:a1:a2:07:79:b8:c5:83:01:78:e0:85:
                    f3:c1:5e:3d:60:05:08:df:19:ba:d3:af:57:08:86:
                    c1:ac:d8:79:24:85:7c:8d:7e:49:0a:76:50:b6:89:
                    0b:1b:fd:2b:a6:98:6f:e7:59:ec:8b:b1:6d:91:92:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:56:F6:F9:6C:B4:59:0C:BF:46:4D:64:FF:BA:3A:16:14:87:5D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.106.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:00:69:59:1e:d2:fd:97:28:1c:98:1f:f4:6a:bb:bd:59:07:
         51:f7:ed:2c:ff:e6:d9:25:fc:8a:0d:f0:84:92:93:c6:f7:ae:
         f6:19:b7:da:f9:14:9a:96:e5:14:cb:02:04:81:b3:03:f8:86:
         71:2d:1e:f3:5f:ed:ac:3a:19:f4:0e:c2:e6:ad:16:df:26:b7:
         21:a7:77:37:ac:07:a8:16:42:5d:16:98:04:c7:1e:2d:c1:d1:
         a4:52:39:f9:ad:f4:c1:90:7f:9f:1f:18:cb:60:16:b2:92:b5:
         61:63:6f:4d:aa:6c:d5:69:d4:46:ce:4d:64:85:78:70:de:cd:
         c0:e5:c7:b5:69:81:1b:23:32:37:46:cd:69:6f:97:ba:1a:40:
         79:19:58:d3:20:b2:52:ba:92:3c:ba:e3:d0:72:2e:dc:95:c0:
         4e:ee:84:fa:62:18:41:c1:69:f2:e5:8b:a3:c9:fd:bd:23:a3:
         19:3a:78:25:55:f6:b6:40:82:49:6e:33:c6:55:30:d8:67:8f:
         e9:ff:b1:16:8b:d8:8f:f7:4a:3f:fa:f9:7d:50:66:c2:99:8a:
         b5:c8:83:72:df:9d:b6:62:40:c7:00:3e:1c:b6:f4:f2:4a:fb:
         cf:fc:79:e7:53:1c:8f:23:5f:e5:ff:de:b1:ad:79:a3:5d:8e:
         cf:af:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:01 2024 by rpki-client on console-fra.rpki-client.org