Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd39bb95-86c0-3b9f-be8c-dc983e03f979.roa
File:                     fd39bb95-86c0-3b9f-be8c-dc983e03f979.roa (raw, json)
Hash identifier:          oKt4coDhmEaLjwg9z8OLGLICshNFbIUZsFrAT/ywXIE=
Subject key identifier:   11:99:7D:D6:0B:0E:D4:CA:D3:60:C8:12:66:27:A8:0D:16:36:B8:6A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858477661115D25793223ABBFE9D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd39bb95-86c0-3b9f-be8c-dc983e03f979.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        104.92.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:11:5d:25:79:32:23:ab:bf:e9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=f3c52a8b-7111-4e7b-b4b0-d04d21e0c58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:3b:8c:12:2f:6a:78:d2:57:b2:c2:89:3f:
                    70:58:4e:37:96:36:c2:b4:8e:58:5d:29:ea:a4:df:
                    ba:cf:99:3b:6e:2c:da:84:d1:12:6b:82:a9:58:8a:
                    f6:52:00:8a:1a:90:95:39:3e:45:67:03:ce:3f:4b:
                    1f:ea:ce:37:ee:d8:86:c4:f9:61:b6:7f:8b:3a:d7:
                    88:de:40:eb:d4:5f:db:4e:f8:f6:00:dd:ce:cc:a6:
                    e5:3f:a5:f4:3f:3d:0a:75:2a:1d:2c:40:99:78:34:
                    3b:c3:08:82:00:1f:52:c3:ae:2a:89:2d:e5:1d:76:
                    e0:6f:55:a5:2f:d4:66:7f:be:17:ac:c0:3a:a2:09:
                    74:e0:fe:4b:bb:0c:ae:7d:0c:81:04:04:0c:1f:63:
                    8e:3c:30:e0:bc:d8:21:bb:8b:af:76:27:11:9d:a5:
                    92:3c:5f:4f:94:68:6a:01:2f:1b:92:e6:d2:ee:a2:
                    b0:9d:2e:dc:83:22:0e:6a:f3:2f:1e:f2:b4:67:c9:
                    39:a8:6a:c1:f6:cd:e8:19:fe:73:a6:ef:2d:05:44:
                    ca:f4:85:4b:2b:06:08:39:3e:a8:fa:f7:3f:26:0b:
                    59:bb:04:80:19:bb:77:aa:0f:8a:e5:fa:50:50:4f:
                    f9:64:55:17:ff:18:b3:90:78:0d:13:bf:9f:da:79:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:7D:D6:0B:0E:D4:CA:D3:60:C8:12:66:27:A8:0D:16:36:B8:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd39bb95-86c0-3b9f-be8c-dc983e03f979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.92.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:59:b3:ba:89:57:e2:f2:42:da:54:10:15:c1:10:25:f5:b5:
         41:44:f9:0b:e9:02:32:9a:27:5a:97:d7:a2:c9:f2:b9:a1:e1:
         af:c1:35:43:bd:0c:ec:0a:bc:73:46:b1:25:ac:ba:1d:85:6a:
         92:a1:0e:de:fb:9f:37:23:58:fa:83:8c:05:ec:a9:58:30:b7:
         ed:0b:54:9e:d6:97:48:aa:ef:06:20:c9:5b:b7:dd:4b:f5:5f:
         44:f5:d0:a3:76:eb:4f:77:92:66:85:3f:cf:5e:6f:05:c2:e6:
         c6:89:30:7b:e6:f5:a8:63:8a:71:50:6e:81:3a:8f:b8:d8:0a:
         ad:c1:f9:00:cc:e1:6e:1d:30:7f:74:ab:87:05:b8:3b:c2:45:
         93:a3:60:b7:39:8b:85:31:8f:d6:37:d0:37:fd:75:1c:32:41:
         c5:cf:cd:d2:06:a6:43:a8:ff:a2:c8:29:2a:75:36:71:f5:c9:
         b9:56:4f:f5:6c:46:6f:31:b3:5f:a5:79:ef:b9:1b:69:63:76:
         aa:8c:6c:d9:e3:2c:fa:92:0a:1a:81:fc:cc:9e:99:e3:1d:76:
         39:59:d6:5e:46:05:41:e6:ac:60:ba:91:ce:72:a6:16:5b:f5:
         9d:c8:79:18:2e:d0:05:b0:2c:e8:3c:c1:47:62:48:96:5b:4c:
         95:b4:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:33:11 2024 by rpki-client on console-ams.rpki-client.org