Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db7fff15-3143-3f3b-aa64-3646a4c6d59f.roa
File:                     db7fff15-3143-3f3b-aa64-3646a4c6d59f.roa (raw, json)
Hash identifier:          JMnGFNJ836ReqLUQR0dGTqihAfKkwarhxWLBGX8AxMc=
Subject key identifier:   54:DE:CD:31:5C:EB:09:63:5C:73:C0:A3:F9:01:24:85:49:D7:B5:78
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847766115E2005B6B130C8E9AA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db7fff15-3143-3f3b-aa64-3646a4c6d59f.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        104.103.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:15:e2:00:5b:6b:13:0c:8e:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=6ac155c5-035a-40a2-b6f0-7a60b55e7d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:ed:74:49:4a:cc:f9:fd:2c:a2:91:1f:f9:
                    96:c2:01:4b:a2:15:c2:c8:39:c9:59:78:63:6a:d8:
                    ca:eb:0e:e1:e5:66:2f:b8:9c:bf:21:1d:5f:29:99:
                    d4:e7:16:16:61:d5:44:d1:69:fc:0a:67:9b:0f:40:
                    5b:db:c2:d3:f8:cc:f1:f8:83:ed:81:25:34:19:bd:
                    d7:d1:bd:b6:26:ac:c6:c2:75:1b:e2:be:d3:de:ad:
                    05:1a:8d:52:f9:99:2e:05:8f:3c:05:3a:ca:b1:d7:
                    7a:b8:84:bc:a1:83:e3:77:c2:e1:d0:ae:7b:a8:65:
                    01:2b:8e:c3:bf:c0:b1:19:9c:4a:7a:f0:70:21:b9:
                    29:55:91:f8:8e:a9:40:39:b2:b1:b8:77:0d:51:3a:
                    3b:88:cb:51:41:f6:fb:a7:03:52:a3:4a:ee:92:09:
                    fb:62:d9:1b:88:2c:3b:00:1b:2f:eb:24:bc:96:f2:
                    15:35:60:27:bf:80:12:87:24:1a:1c:81:d7:58:d5:
                    f2:37:bc:3c:95:2f:f3:3b:21:cc:78:7e:40:4c:dd:
                    c4:82:3e:67:8b:9e:7e:9a:75:2c:25:15:7e:84:06:
                    07:a7:0f:86:3a:a4:b4:17:66:90:e4:76:6a:ca:86:
                    92:28:25:fc:5f:0c:77:b3:f6:ee:6d:c6:be:ee:12:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DE:CD:31:5C:EB:09:63:5C:73:C0:A3:F9:01:24:85:49:D7:B5:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db7fff15-3143-3f3b-aa64-3646a4c6d59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.103.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:9e:9b:ec:3e:aa:b8:3e:25:6c:78:fe:21:7d:2a:65:04:
         38:0e:9d:7c:28:c5:93:71:7b:71:1f:53:a8:3c:cb:ea:8f:9e:
         f8:71:c2:81:4a:da:2e:42:34:c4:63:49:08:bd:38:4d:d0:b9:
         1b:ba:54:47:b8:23:96:87:5a:1d:73:87:30:5a:b2:7d:e4:6c:
         a4:00:05:39:a2:bb:0d:63:af:fb:21:49:23:68:4a:ac:08:83:
         f2:e9:51:8b:c3:9f:06:9f:b2:66:fd:4c:a3:7a:ac:b0:6c:09:
         da:ab:ac:cd:71:95:db:cf:8f:43:5f:27:f5:1c:b1:1f:b6:ca:
         06:6e:d8:77:97:e9:ac:59:2d:14:c5:d9:23:da:b9:58:12:ec:
         c5:b4:83:8e:10:4a:59:96:3c:c2:79:9d:d0:e8:42:88:6e:e8:
         55:e4:12:9e:f4:2f:7f:d0:1b:31:a9:b4:9c:26:74:29:be:bd:
         77:7f:67:d7:c6:ef:62:3e:c1:7c:1d:d0:ab:75:d7:35:03:fa:
         59:e3:27:4c:2b:9c:5f:0e:f4:1d:ed:a8:11:c1:29:fc:77:20:
         2d:43:85:9c:ff:51:41:7a:66:92:39:5a:02:1e:17:c3:c2:fd:
         50:41:88:fb:7f:64:73:08:b3:39:eb:dc:29:8d:d1:3e:5d:0a:
         ea:c0:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:59 2024 by rpki-client on console-ams.rpki-client.org