Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/91827ade-0f73-3c1e-a650-d9eee56d17dd.roa
File:                     91827ade-0f73-3c1e-a650-d9eee56d17dd.roa (raw, json)
Hash identifier:          q5WN0FDFG4d3516u4i4b9yih8GKdRDWTJVlnsq9Famc=
Subject key identifier:   3F:A6:92:7D:01:77:C3:D9:30:16:83:D8:B9:7C:B5:C7:AF:4F:F4:AF
Certificate issuer:       /CN=1d669241-5dfb-43f2-99a8-90b846457b5b
Certificate serial:       010D0C9F432858448D1A15FDACF5B5A8E0DDAC00
Authority key identifier: AF:EA:52:BA:EC:9F:EB:98:25:59:92:63:3B:5A:30:2F:25:7B:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/91827ade-0f73-3c1e-a650-d9eee56d17dd.roa
Signing time:             Sun 14 Jan 2024 14:00:28 +0000
ROA not before:           Sun 14 Jan 2024 14:00:28 +0000
ROA not after:            Sat 13 Apr 2024 13:00:28 +0000
asID:                     14618
IP address blocks:        104.238.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/1d669241-5dfb-43f2-99a8-90b846457b5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/1d669241-5dfb-43f2-99a8-90b846457b5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8d:1a:15:fd:ac:f5:b5:a8:e0:dd:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d669241-5dfb-43f2-99a8-90b846457b5b
        Validity
            Not Before: Jan 14 14:00:28 2024 GMT
            Not After : Apr 13 13:00:28 2024 GMT
        Subject: CN=8b04ea08-830f-4fb8-b774-3a46ea51c9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:64:fc:08:15:cc:6b:1e:a7:c9:d6:a1:a7:
                    84:c8:c7:ff:0b:7f:02:97:2a:7f:b1:12:0b:ae:a1:
                    71:52:d2:58:b1:87:e1:a4:75:30:4a:53:d4:5b:ac:
                    5e:90:6a:14:0c:b9:10:e2:a2:1d:bb:71:f1:c1:b5:
                    da:85:c5:4f:4c:6d:e9:8d:42:f8:30:5d:09:88:97:
                    27:9b:1e:98:a4:3f:91:9e:a4:07:35:07:d5:4a:e1:
                    6c:a6:57:e7:d8:c4:e5:ab:cc:6d:07:7f:5f:71:29:
                    27:23:50:4a:f5:32:3b:61:3a:72:e6:4d:63:3a:4f:
                    41:50:b5:34:98:b7:c5:f7:d0:8d:0a:55:c0:43:ca:
                    e6:d8:f1:e2:10:fb:c8:3d:ef:f8:65:da:61:81:ae:
                    06:2a:85:8d:12:2c:09:2c:37:8c:e7:24:c8:1c:f4:
                    5a:28:5d:2b:b5:de:ff:94:9b:51:ad:b8:ef:06:6a:
                    59:90:0c:05:d8:22:48:4e:32:00:36:06:17:91:40:
                    a3:c3:85:94:0d:50:8c:de:8a:3e:6b:c4:dd:bb:68:
                    b2:38:84:7d:5d:d1:29:44:14:ad:3e:e5:b3:f5:17:
                    66:43:da:df:9b:c1:b3:a3:f9:be:81:37:fb:74:cc:
                    3d:01:69:78:2b:4e:ca:5b:00:50:6a:bc:47:f0:eb:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A6:92:7D:01:77:C3:D9:30:16:83:D8:B9:7C:B5:C7:AF:4F:F4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/91827ade-0f73-3c1e-a650-d9eee56d17dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/1d669241-5dfb-43f2-99a8-90b846457b5b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:EA:52:BA:EC:9F:EB:98:25:59:92:63:3B:5A:30:2F:25:7B:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:80:0e:b8:9e:73:ab:7c:f2:f9:fd:00:28:83:b0:64:03:3f:
         5f:6c:18:4a:bb:76:8e:6c:89:d9:1c:30:1c:8f:1b:cb:d5:84:
         43:4d:ff:65:a3:7a:cb:a7:bd:ad:33:cc:d7:78:c9:21:a6:81:
         44:48:a8:50:83:1f:05:97:48:a5:89:38:f7:c6:74:d0:8e:58:
         f2:3a:d5:6f:d9:10:8a:ab:43:3c:88:a2:38:8f:cf:d5:e5:af:
         e9:6e:68:51:0a:aa:7a:0c:35:85:f4:3c:74:10:e7:ab:e1:14:
         b8:0c:37:5c:2e:21:75:a3:9e:35:00:10:0e:2c:66:3d:61:46:
         0b:68:48:b6:93:c6:3a:cf:d6:b5:34:d7:d4:3e:e7:c4:86:48:
         17:fd:4b:bb:b3:c2:ef:1c:90:8b:8b:68:13:66:ca:c7:a9:16:
         2d:6d:b3:75:8e:95:f9:24:37:a4:be:b6:2d:12:2e:85:2a:e7:
         9b:66:ef:c2:61:6e:05:df:c3:7f:08:ec:57:d1:a5:48:70:b0:
         8c:43:f8:4f:41:b1:52:62:e8:74:e8:b6:0d:c5:09:9f:44:cc:
         61:88:90:17:72:78:44:26:93:8e:67:fa:2c:4e:58:af:86:39:
         81:f8:83:ad:66:1b:9c:fe:a6:09:9d:51:ed:a0:68:ea:5e:75:
         bb:76:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:17:10 2024 by rpki-client on console-ams.rpki-client.org