Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa
File:                     cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa (raw, json)
Hash identifier:          nxq9SlAHVUEXbuPTDjp6U7jz0lmr7O4vi/sS4+vRtkw=
Subject key identifier:   94:B4:63:A7:9E:32:5A:D9:5C:46:C4:4A:D5:CE:48:C7:40:22:10:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BBA8EBEFEC7DC86F617C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.114.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ba:8e:be:fe:c7:dc:86:f6:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=1a96af53-83d5-495c-98ee-8cf904288cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:1d:e0:4d:ea:9e:50:c9:eb:ef:40:7c:c8:
                    35:a0:ca:99:3b:ba:e3:c6:cd:2d:f4:eb:ab:70:4f:
                    35:88:e0:80:2e:57:e1:7c:36:8d:11:07:9c:91:6a:
                    98:94:a2:69:23:b6:ea:5a:4b:f5:db:cb:f3:f7:01:
                    88:e1:41:fd:5b:86:46:43:eb:ea:67:11:de:28:d4:
                    1d:f8:6f:3e:7d:86:03:d0:dc:8b:64:b7:76:40:81:
                    3a:49:22:03:43:5e:55:dd:88:42:15:35:94:47:ed:
                    66:22:95:2f:b2:2a:96:11:34:e1:ab:84:b8:25:a6:
                    17:49:5b:09:12:38:82:86:56:0d:ec:4b:75:d1:bf:
                    81:43:c2:00:c6:e0:2d:a2:a1:24:8a:32:6c:a0:93:
                    e6:6c:88:17:cd:87:f9:f6:5c:68:c0:7a:ac:1b:30:
                    95:2d:c3:c0:98:1a:82:73:7d:e2:c1:f3:1c:3c:f6:
                    9b:c9:c5:41:e1:d1:ad:9f:6b:4c:d8:a9:46:55:3b:
                    18:9c:01:de:3c:13:5f:e6:a5:b7:a2:40:53:03:de:
                    c0:91:7c:4a:3a:20:81:bf:22:c0:10:e6:8b:66:42:
                    3e:6e:15:d1:9d:7a:29:07:b1:28:83:b5:bf:5d:9a:
                    f1:92:5a:d7:5c:52:81:62:d2:82:79:4d:f4:02:fa:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:63:A7:9E:32:5A:D9:5C:46:C4:4A:D5:CE:48:C7:40:22:10:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf80f3f3-84e5-3c0e-9107-e16595910d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.114.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:8d:79:9a:6d:b1:e7:5a:25:ed:38:f5:ad:a0:5e:84:bf:
         72:e1:94:c1:32:f7:ba:1c:32:4f:d0:54:05:84:80:c8:36:47:
         16:f0:f1:0e:b6:67:e1:a4:7d:ca:d2:6e:83:0b:dc:c1:59:7c:
         b9:aa:db:32:1b:5b:55:07:01:bf:fe:bf:ff:b1:1a:e2:e6:f3:
         f3:5e:3a:c3:c0:56:b2:fa:f1:a6:12:17:67:4b:c1:02:31:cc:
         e5:dc:5e:1a:16:cc:bb:be:8d:b5:8b:1c:37:da:0e:fb:c6:57:
         5c:f0:90:a5:e0:c6:54:e6:9f:cd:b0:7b:bc:79:76:70:c7:a1:
         14:7e:da:4a:4c:5d:e4:69:da:ea:28:9e:da:ee:43:6b:98:b0:
         b3:42:fa:f3:fb:3e:86:2b:46:c6:58:90:ed:bf:f3:1d:2d:ad:
         c4:7f:0f:84:fc:53:8f:77:77:fc:ab:cc:2c:75:fb:6b:a8:23:
         9a:a4:5b:60:87:fe:f8:6f:05:fb:a7:49:f4:68:ca:bd:70:92:
         ab:41:6c:83:5e:c6:20:1d:dd:ef:63:7c:92:f1:13:88:64:e4:
         bf:6a:e3:54:4c:11:71:bd:d4:3d:58:c5:a5:39:79:b9:11:5e:
         ad:ad:14:d4:91:55:4e:f1:4e:35:84:37:d9:e9:c7:07:65:55:
         f1:a8:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:28 2024 by rpki-client on console-ams.rpki-client.org