Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa438910-26df-3162-8bb8-402ecb48e99e.roa
File:                     fa438910-26df-3162-8bb8-402ecb48e99e.roa (raw, json)
Hash identifier:          dmpqgmrswm8cfMndKtHPv2hI49zXJH7POOTWixPsXS8=
Subject key identifier:   76:9C:F4:2A:40:BC:80:B7:ED:7E:8C:D3:46:D3:97:5A:B1:2C:FC:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BA1417CEBE973FA76F320E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa438910-26df-3162-8bb8-402ecb48e99e.roa
Signing time:             Wed 01 May 2024 09:26:55 +0000
ROA not before:           Wed 01 May 2024 09:26:55 +0000
ROA not after:            Tue 30 Jul 2024 09:26:55 +0000
asID:                     16625
IP address blocks:        104.116.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:14:17:ce:be:97:3f:a7:6f:32:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 09:26:55 2024 GMT
            Not After : Jul 30 09:26:55 2024 GMT
        Subject: CN=81720344-75b8-44fd-bcb1-0a3c436871fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:0c:c6:a2:37:65:05:d9:9a:66:f4:35:bb:
                    2d:81:3b:08:d3:54:d8:6d:75:a3:6a:07:ba:4a:96:
                    6a:d5:20:7a:d0:69:cd:ba:23:35:dd:4a:9f:f3:57:
                    e7:4d:20:19:82:76:8a:29:76:f2:00:eb:93:85:c1:
                    0b:da:a6:17:7b:af:50:66:6c:9c:61:f1:41:50:26:
                    ab:aa:53:fc:a2:2b:af:57:e5:0c:01:26:bd:16:1c:
                    22:f9:1b:5e:0a:b2:ad:63:63:40:69:b0:4d:a3:b7:
                    1c:3e:d6:3d:64:bb:c1:c9:e4:f5:17:41:6a:a7:cf:
                    49:bb:be:d7:cb:2f:1d:40:2a:1a:a4:59:e1:a6:e8:
                    22:56:03:e4:7d:7d:f8:e7:7f:57:78:a4:ac:f5:be:
                    95:a9:a1:64:ce:19:18:ee:a0:ca:b8:f3:fb:39:4f:
                    a0:33:0c:b4:bf:9f:30:df:ba:08:0a:74:52:81:3d:
                    13:b0:f6:26:1e:41:92:0f:17:bd:ef:5b:9e:7f:f8:
                    97:ba:c8:a7:c7:c9:b9:3b:93:d4:3d:4c:b0:9c:ae:
                    14:7d:0c:36:36:8f:08:61:67:bd:9a:d4:7e:0f:62:
                    0b:90:4a:12:fa:b8:77:93:df:8a:2f:da:79:b2:92:
                    ac:ad:ca:37:81:3a:55:a3:35:d3:49:e1:63:47:42:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9C:F4:2A:40:BC:80:B7:ED:7E:8C:D3:46:D3:97:5A:B1:2C:FC:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa438910-26df-3162-8bb8-402ecb48e99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.116.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:36:2b:c8:a0:d3:47:f5:53:4f:e0:91:63:38:9d:fa:69:
         cb:c7:3d:6d:07:7a:00:1c:f8:48:b7:ff:27:2c:c7:50:a8:22:
         ca:df:a9:f9:62:0c:e3:fc:2a:aa:60:14:35:e8:77:bf:59:55:
         b0:10:cb:2a:8c:1f:45:fa:31:3c:5f:a1:b6:04:e6:54:c4:b5:
         a1:9e:22:28:e8:84:ea:43:d5:83:07:34:61:97:99:3d:9d:9f:
         e8:83:95:ad:4a:87:ae:ed:9d:ed:2b:ef:a0:bb:0d:95:a8:e4:
         71:b8:6d:e9:83:bf:2a:0f:f3:db:f5:e8:78:36:e9:4e:b3:67:
         68:bc:5b:88:70:22:19:5d:71:40:1b:6b:4d:c4:bc:01:4a:94:
         1f:8a:13:aa:86:cf:30:98:ed:e3:67:f3:22:8f:77:5c:be:6f:
         e6:22:ea:4c:d9:7d:e3:cb:f4:16:df:87:16:c4:e5:68:78:e7:
         a0:35:0c:2f:f7:4d:01:33:c2:37:37:cd:00:e2:e8:b7:b0:fb:
         cb:6c:72:f7:02:b1:d9:3c:76:18:0a:48:2e:83:df:83:0c:1b:
         c0:8b:d6:f9:0d:a3:44:0e:d9:4f:ae:53:ac:80:70:6a:4c:d6:
         d9:30:3c:cc:60:09:24:ab:a3:b0:94:b0:c7:d0:3d:c8:e4:98:
         17:94:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:47 2024 by rpki-client on console-ams.rpki-client.org