Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa
File:                     fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa (raw, json)
Hash identifier:          6Mj+Pb+lKWQFlx6UIJT71aElm91q5ocVa4zKJsSjSvM=
Subject key identifier:   68:3B:66:53:94:C8:AA:58:CB:28:E7:4F:B2:1B:36:58:14:B5:35:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584762D684412E8852B9EBE92A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     20940
IP address blocks:        184.28.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:84:41:2e:88:52:b9:eb:e9:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=5b50e25a-32b7-4a0b-93a9-2e0f7f84b9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:0d:19:ce:8b:8d:34:c1:06:a4:d3:69:fd:
                    07:01:86:d8:5f:ec:7e:58:c5:b0:d6:8f:bf:1c:07:
                    94:64:a9:43:67:a8:13:22:73:7d:91:c5:60:84:96:
                    46:d4:11:85:31:9f:48:33:8e:ee:0a:82:e1:b7:4b:
                    8a:dc:17:51:45:0a:a6:ba:18:fb:74:b9:45:34:ff:
                    78:27:53:83:0b:9e:2f:a6:9a:c5:0c:31:0c:36:8a:
                    2a:80:20:b3:b2:8d:24:57:fe:b0:5b:be:cc:ca:ac:
                    9a:49:9c:1e:2a:bd:79:34:df:f5:3f:af:06:fe:31:
                    54:37:83:51:34:16:95:3c:60:97:55:9e:38:b4:07:
                    47:c3:e0:68:f6:23:c7:0d:d7:9c:9a:bb:8f:0f:b7:
                    fb:a8:a0:77:fe:83:3d:8c:88:44:4a:ea:09:15:ee:
                    50:f5:9b:df:32:15:9c:0e:db:0e:78:2d:92:78:9d:
                    b2:28:31:1c:37:f7:cc:ad:7e:f7:67:55:b3:89:85:
                    b5:e2:cb:b4:99:b6:8b:ae:6a:7e:3d:32:1b:df:30:
                    0d:13:84:f1:26:c2:5c:9e:08:ec:57:40:c1:e7:b8:
                    9f:0d:2a:b3:f3:a8:a1:a8:dc:d3:5a:b6:0b:32:4f:
                    3a:95:94:3d:4f:6d:45:15:a9:8d:16:94:6a:c3:c1:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:66:53:94:C8:AA:58:CB:28:E7:4F:B2:1B:36:58:14:B5:35:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb23c653-22f7-350d-a7a8-d925bc3d9c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:03:eb:09:1d:f2:c3:be:38:ee:23:1b:8b:7e:7e:b3:7b:c9:
         6a:5d:ae:d0:85:c2:5f:05:b2:9d:0b:8a:bb:54:e3:63:bf:3f:
         d0:a5:d4:a8:74:4a:b1:92:ca:8f:95:a9:7b:b5:da:7e:02:84:
         12:f9:8f:99:de:02:a9:d7:2d:51:ea:3c:8e:9e:0f:51:58:6a:
         23:e2:1e:68:67:cb:80:8a:75:a3:cf:be:f1:d2:d6:1b:25:df:
         cd:45:19:e8:46:5d:69:6a:64:c3:1e:b2:16:9e:de:b1:79:6f:
         05:58:f5:64:fe:76:34:27:a9:3b:8a:42:4a:92:fa:e9:43:7f:
         4e:47:09:fa:49:1d:8a:7e:81:ac:e6:d3:c2:56:c1:93:e7:7c:
         09:fc:e5:4d:0e:49:1c:ca:1d:7b:3c:3a:27:d1:82:90:bc:99:
         11:42:64:b8:1a:cb:ef:fd:ad:4b:ab:04:f8:64:13:fd:9c:34:
         c5:ad:f4:3d:de:f9:3d:f2:82:be:c5:30:e7:6e:c6:04:52:1c:
         fd:7b:7c:49:17:73:a5:b9:f0:fe:25:a4:04:b7:b9:de:40:cb:
         3a:6d:0b:8f:94:9a:7a:62:eb:c1:e2:4a:39:06:c9:f7:e4:b9:
         86:82:73:00:62:ac:09:f7:55:f6:61:93:95:4d:42:60:5b:de:
         dc:17:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:47 2024 by rpki-client on console-ams.rpki-client.org