Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecfd1951-e01a-30de-bf22-e1d774146963.roa
File:                     ecfd1951-e01a-30de-bf22-e1d774146963.roa (raw, json)
Hash identifier:          KmEqgZnRhhQf3xOmyIhGqN0STUJrSLkPezQkhdlwU3c=
Subject key identifier:   0E:3B:4A:EC:75:2E:24:C0:45:95:28:FC:59:A3:88:E9:72:81:06:AB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584773967311C7E68A3F0AF2EA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecfd1951-e01a-30de-bf22-e1d774146963.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        104.75.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:73:11:c7:e6:8a:3f:0a:f2:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=158f2e86-89fe-4af3-adc8-6fa742ae6cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:4b:d9:21:07:bd:42:b8:c7:1d:a7:41:a6:
                    16:1f:34:5d:92:52:e9:2b:d5:22:8b:f4:b9:0b:f1:
                    c3:bc:b3:1f:0f:0b:0d:88:85:8d:7a:60:17:ac:26:
                    64:d7:08:1b:f7:82:77:f2:4d:11:87:a6:c9:24:91:
                    15:39:79:7e:73:27:f6:d5:aa:ef:a0:d8:39:9f:b8:
                    7c:5d:66:be:c4:ca:38:86:b2:0f:d0:58:19:63:6f:
                    61:e2:88:1a:cf:70:b6:d7:51:71:6f:47:b7:e5:ac:
                    b8:59:ae:51:58:86:81:00:a2:e5:86:ae:0a:cc:7a:
                    c8:4e:e7:e5:eb:ec:4a:89:63:b6:dc:a1:d5:63:92:
                    2b:44:6c:a1:8f:8d:b6:14:fe:97:36:fa:4d:26:c1:
                    11:ad:2c:93:ce:0e:08:4d:1c:bd:71:2e:e4:71:1d:
                    1f:64:8b:8d:f3:8b:cc:d5:c5:ae:99:51:93:c4:6f:
                    8e:a2:8a:f0:9a:aa:4b:b4:af:64:53:86:c9:ec:e6:
                    61:c8:38:02:94:4c:f7:f5:14:12:c8:d1:2c:e1:c6:
                    cb:20:40:9a:4d:8c:6d:db:7e:a1:58:2f:57:cc:3d:
                    0a:d9:66:67:e0:6f:4e:5d:0c:d5:4e:83:34:6d:06:
                    78:b6:c8:23:4a:af:21:c1:10:64:5a:9a:d6:69:22:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:4A:EC:75:2E:24:C0:45:95:28:FC:59:A3:88:E9:72:81:06:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecfd1951-e01a-30de-bf22-e1d774146963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.75.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:0d:3f:98:e8:77:90:65:1b:36:34:18:a1:7a:cf:a9:70:
         d1:c7:7c:1a:91:ff:a3:31:71:70:bb:ec:ab:46:5a:05:d1:c1:
         8e:08:a2:2e:50:36:46:61:29:02:77:eb:0a:6b:4a:96:4b:78:
         f6:45:f0:85:31:e4:57:b4:1f:a7:e9:f8:52:83:f6:0f:eb:4c:
         43:1c:10:8d:0c:7d:bd:99:ac:87:fa:01:a6:47:d8:97:c6:cf:
         5b:71:35:ac:ef:ec:4c:0c:53:2c:7f:d5:ac:06:83:f4:8d:b4:
         e9:fe:a8:3b:d7:a5:b5:64:d3:69:17:71:df:18:8d:0b:92:d3:
         dd:4e:e9:77:6a:ba:61:40:6e:3b:82:5a:2c:07:d6:68:5b:c1:
         59:f7:0a:2d:00:96:3a:d4:b8:d5:d6:0a:28:5a:7f:ae:67:7a:
         e0:65:65:29:cb:c3:5a:a4:63:1a:d4:c3:4d:4e:98:21:c6:b0:
         64:13:0a:fc:2d:82:c5:2a:64:fc:b5:8a:cc:0b:bf:ec:17:e8:
         ec:69:41:c6:58:3f:e4:8a:31:40:e5:3a:bf:aa:26:b7:19:11:
         b4:04:bc:00:4a:10:96:99:2f:05:f2:dd:c7:80:9d:c7:99:86:
         d8:9e:c8:6a:cc:a3:39:0a:6d:8b:18:21:6b:38:db:b9:12:1d:
         7e:93:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:40 2024 by rpki-client on console-ams.rpki-client.org