Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8546004-8be7-3544-a1d9-817ad8311e0f.roa
File:                     f8546004-8be7-3544-a1d9-817ad8311e0f.roa (raw, json)
Hash identifier:          CHjih2AVOiYzKmwkM+KeYBUaXf9gnBiN4ENsv7IFDfI=
Subject key identifier:   5E:02:0F:3E:AA:BC:B5:23:41:47:47:FC:8D:26:01:A9:E6:30:71:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858477EC103AE430579A634C76380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8546004-8be7-3544-a1d9-817ad8311e0f.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        104.76.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:03:ae:43:05:79:a6:34:c7:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=f2bfeb18-3c40-4ffe-8934-e427e538afa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:8d:e1:0e:2f:29:79:44:58:5f:d4:6a:bc:
                    f6:85:d1:c5:32:31:1c:6a:cb:ff:5c:94:ef:08:6c:
                    7d:ef:7f:42:53:1e:d9:7e:06:27:ef:37:56:33:e3:
                    5c:21:02:4b:56:4a:01:dc:eb:9c:0d:5d:70:f4:44:
                    76:ce:8d:a8:e6:dc:49:3c:11:88:ee:b5:7a:86:8a:
                    dc:9e:24:b6:36:1a:06:b5:07:d7:ea:6e:cc:71:a1:
                    97:2d:b6:55:4e:67:7e:d2:35:1c:5f:53:9c:02:fc:
                    8b:da:7f:10:7d:5a:44:5e:e2:b2:71:c0:32:1e:ba:
                    46:76:eb:f5:aa:4b:a4:ca:88:7d:50:28:bb:03:3e:
                    e3:d7:59:54:6c:6b:95:0e:ff:b1:04:c6:5d:aa:e7:
                    57:d0:6b:ba:e6:ed:50:98:2a:6e:19:c9:06:10:d4:
                    3e:d1:d8:24:f8:45:4b:95:9c:29:dc:92:40:bd:93:
                    b9:90:b1:e8:9d:cf:9f:bd:28:d6:52:66:de:f9:1f:
                    57:0f:2d:8c:06:a5:e2:0c:c6:58:eb:b0:2c:c4:be:
                    53:8a:b5:a8:e6:b4:a6:56:d4:01:a1:39:af:ca:58:
                    61:54:0a:29:6e:70:c0:86:30:b8:58:61:53:f1:32:
                    23:f3:c6:31:bb:2e:f6:2c:cc:af:04:0b:d5:d8:56:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:0F:3E:AA:BC:B5:23:41:47:47:FC:8D:26:01:A9:E6:30:71:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8546004-8be7-3544-a1d9-817ad8311e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.76.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:be:8a:d9:3a:76:e5:ff:cd:3e:ce:ac:b5:2e:67:22:35:3f:
         2d:11:14:a5:42:09:16:1a:fa:20:99:93:1e:77:2e:ec:7d:5f:
         64:86:0b:25:f3:39:a6:71:eb:58:64:e5:bd:d7:f6:f5:d8:d4:
         6f:a0:b4:82:78:b4:38:f4:64:a2:89:51:df:e8:85:3f:f0:f8:
         b6:9b:21:99:52:67:63:0e:92:02:34:7e:aa:fb:49:ca:cf:94:
         10:0c:75:cf:8d:66:5e:5a:31:36:b5:84:0f:41:f2:b1:17:92:
         1b:60:5c:e3:b4:d4:10:dc:c5:c1:52:1d:0c:ea:f0:da:b6:c5:
         6f:1e:a3:0a:7e:e4:1c:77:c5:8d:be:11:ae:be:d9:68:ab:6e:
         5a:77:b4:cf:5c:7e:fb:1e:66:4d:31:ac:18:ea:6f:f6:2d:a9:
         34:b2:9a:6d:17:c0:47:04:55:c3:53:de:49:34:19:83:f6:1b:
         8f:c5:44:22:89:7d:4d:c0:12:7e:d3:32:e6:e5:9b:eb:60:bc:
         82:6a:3a:85:81:15:13:b3:fe:10:9b:1a:b9:9c:3b:a0:3b:94:
         ae:a1:c8:05:89:94:fd:fb:c9:9d:b5:00:6a:39:ba:27:91:81:
         70:4d:17:d2:d3:4b:86:4e:99:ae:68:c3:24:01:d7:38:f7:e9:
         f4:b4:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:47 2024 by rpki-client on console-ams.rpki-client.org