Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa
File:                     d17fe32e-8697-3d88-942e-551251da617e.roa (raw, json)
Hash identifier:          JWibZ/HKgbM5SwBleSu8VWVPbB1B9jlEStm8S1PTcVE=
Subject key identifier:   BD:24:08:E9:45:E2:C4:8F:3B:B7:C4:6C:B6:41:28:EC:67:85:6A:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BA279E57FAC4FF1D8341A0E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa
Signing time:             Wed 01 May 2024 10:06:15 +0000
ROA not before:           Wed 01 May 2024 10:06:15 +0000
ROA not after:            Tue 30 Jul 2024 10:06:15 +0000
asID:                     9002
IP address blocks:        104.121.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:27:9e:57:fa:c4:ff:1d:83:41:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 10:06:15 2024 GMT
            Not After : Jul 30 10:06:15 2024 GMT
        Subject: CN=30d540c5-e9e6-43fa-b81d-9e1bf9917548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:3d:40:54:22:c9:90:f7:aa:95:b3:df:7e:
                    e3:12:9c:85:ac:7c:3e:61:0f:2c:60:bb:b8:37:a5:
                    5f:36:91:56:2e:02:fa:9c:c3:5e:a4:e0:b5:40:29:
                    09:bf:ea:cc:15:c4:b6:75:8a:e5:32:5f:90:39:58:
                    20:25:79:84:48:18:f5:b8:48:ef:14:e6:75:89:6f:
                    3b:9b:e8:a4:bf:89:0a:2a:e9:94:00:4f:b6:1f:99:
                    c5:48:50:db:bb:64:be:ee:55:75:85:f9:cb:ad:76:
                    c2:8e:9c:1c:63:b5:90:2d:2d:2b:b1:cb:70:cc:af:
                    76:40:24:6d:ce:5a:b0:cb:0d:d2:4e:75:dc:cf:de:
                    74:94:04:48:bc:44:a0:d7:96:99:f4:de:02:ad:cc:
                    2d:c6:b6:12:25:71:30:e6:72:24:f3:ec:eb:20:91:
                    48:ca:1a:19:48:d7:65:e3:e6:8c:7f:39:ed:e9:24:
                    cb:37:02:cd:f3:ec:89:42:44:d1:57:a0:35:e8:3a:
                    25:4f:cc:51:6c:0f:63:76:6e:59:ef:d5:47:69:fd:
                    29:ee:34:38:28:4c:44:9d:75:88:a1:19:11:fb:05:
                    ec:70:30:aa:57:07:9a:9e:b7:71:a7:f2:32:98:56:
                    13:4e:94:ea:d8:79:1e:88:fd:2d:ea:4f:6c:1d:f1:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:08:E9:45:E2:C4:8F:3B:B7:C4:6C:B6:41:28:EC:67:85:6A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.121.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:0a:bf:76:05:62:99:1c:5c:4c:4d:32:2a:9c:5f:fd:24:
         4a:0c:23:92:5a:7e:ab:c5:2d:bb:72:94:25:9f:0d:2b:ac:2a:
         6b:20:53:96:a9:e1:7d:84:bb:a5:39:7d:9c:18:b4:76:96:49:
         bf:b2:2a:bb:a7:9e:90:5e:74:2a:58:46:fc:91:24:13:ab:f3:
         f7:e3:24:20:63:ae:d3:15:52:0c:7e:3f:7a:78:62:d8:e9:ee:
         85:96:b8:b4:75:64:1d:f3:93:fa:58:9a:9f:de:d9:18:83:61:
         c3:75:e3:c8:4c:4b:3a:d0:e2:d3:47:74:47:11:16:3f:18:27:
         df:3f:0d:48:7b:0f:d1:11:fe:c3:e3:20:30:cc:c8:bb:d8:e9:
         87:68:f2:59:0c:16:ed:00:33:7b:b3:3a:a6:98:95:14:d2:64:
         06:c8:92:b0:99:c9:62:94:3e:92:69:50:8d:d1:b5:21:f6:da:
         43:79:b8:6c:14:43:c4:9d:3a:a9:ee:b2:63:9f:d5:af:3d:b0:
         77:cd:5b:8b:44:b0:7c:83:ab:d1:75:03:99:3a:8f:e5:3d:fe:
         fd:4b:47:4d:75:5a:13:45:9d:69:ad:ee:6c:ac:9d:78:74:be:
         9d:4f:7f:9f:19:bb:ac:dd:c4:89:b5:3d:79:96:0f:50:b3:d0:
         b3:4e:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:58:02 2024 by rpki-client on console-fra.rpki-client.org