Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72d2702-2a40-3976-866a-f169a04fd72f.roa
File:                     f72d2702-2a40-3976-866a-f169a04fd72f.roa (raw, json)
Hash identifier:          3gyeK/mCgpbC8qvhoID7XS0N7k53sdxK+RJ7BEVi3mY=
Subject key identifier:   1B:D1:B5:22:D2:AA:BB:1B:3A:91:87:B9:A8:D0:89:AE:73:8F:91:3A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BA27CCE2DC12A3E364665080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72d2702-2a40-3976-866a-f169a04fd72f.roa
Signing time:             Wed 01 May 2024 10:06:37 +0000
ROA not before:           Wed 01 May 2024 10:06:37 +0000
ROA not after:            Tue 30 Jul 2024 10:06:37 +0000
asID:                     55836
IP address blocks:        104.123.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:27:cc:e2:dc:12:a3:e3:64:66:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 10:06:37 2024 GMT
            Not After : Jul 30 10:06:37 2024 GMT
        Subject: CN=7bde6796-321b-4ec6-b459-1eb5c8c37aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:54:1f:ec:c6:a0:82:64:80:ea:a9:be:5b:
                    c0:1f:58:e2:e2:04:ef:fc:b3:a8:b1:2e:f2:8d:3c:
                    13:67:2c:78:5b:3a:41:e8:a8:b8:06:72:a2:2a:d9:
                    ad:5a:c5:eb:52:07:46:e6:63:8b:39:9a:68:58:ba:
                    05:de:63:97:19:9d:a7:30:15:65:76:ff:d3:0c:7f:
                    9b:1b:f6:41:91:fa:62:72:94:03:dc:f4:28:d4:29:
                    df:95:84:fe:3a:04:1b:5a:62:c1:2b:f8:df:28:30:
                    a0:cc:3e:b0:28:81:be:42:3f:21:9c:eb:16:56:94:
                    ad:be:09:54:f3:1a:d5:47:26:b6:66:5c:40:04:03:
                    62:6f:82:d0:39:be:af:7a:92:83:9b:1f:cb:28:00:
                    9f:43:25:3e:45:71:3a:5c:e8:54:f3:94:b5:01:a7:
                    b8:fb:ea:53:81:9f:b4:5c:8c:60:eb:7c:e0:70:da:
                    42:dc:12:06:8d:0e:81:2b:04:dc:61:ba:72:cb:ec:
                    66:e1:4e:c4:8b:fe:53:00:bf:99:ab:41:55:ba:57:
                    1c:08:47:78:d8:c6:45:2c:ca:44:8c:fa:28:6a:f0:
                    d7:dd:7a:81:e9:b8:d8:f1:01:a3:c0:76:61:a2:8f:
                    45:8a:74:27:90:cc:b5:40:02:4c:55:08:ff:47:84:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D1:B5:22:D2:AA:BB:1B:3A:91:87:B9:A8:D0:89:AE:73:8F:91:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72d2702-2a40-3976-866a-f169a04fd72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:9f:87:77:5b:7b:26:bd:54:0b:d6:07:e6:eb:25:a0:5c:
         79:3e:22:0d:72:a9:7a:c9:5b:75:43:27:4d:21:8e:c8:fd:98:
         57:2a:32:a1:8d:7b:8d:aa:3c:1d:22:50:19:fb:3a:0f:d6:28:
         9e:cf:54:cd:a7:d3:61:ef:73:d8:81:69:c2:00:9b:36:1e:27:
         5d:3f:10:2a:da:16:e2:d5:1e:52:6f:0d:bc:f9:b5:d5:9f:56:
         a7:d2:aa:15:4f:a9:0a:ce:5f:82:dd:5f:6c:9d:ca:e1:6f:80:
         42:c3:ba:03:f4:5d:ba:a9:6a:e0:7d:28:27:d7:56:d4:40:db:
         3f:76:d9:4e:da:8c:5c:72:44:d9:b4:16:eb:3f:62:47:e4:80:
         0f:18:bc:78:d9:19:62:b1:45:17:8a:f6:86:42:c5:ae:f5:21:
         f2:c0:3c:44:3a:b7:3f:43:41:80:2c:0f:5f:33:4d:5d:4e:8b:
         3a:34:09:54:14:57:21:a1:4a:20:2e:0f:2f:26:91:8d:e1:fa:
         02:f4:1a:ed:77:c0:c2:04:7a:f3:e3:0c:c3:91:61:10:66:38:
         b8:b3:38:92:bd:ac:d2:86:81:6e:f4:c6:1c:03:df:0e:9c:b7:
         69:f8:1e:9b:57:bd:2c:1d:5a:68:29:03:5d:a3:82:69:cb:ca:
         28:df:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:13:16 2024 by rpki-client on console-fra.rpki-client.org