Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa
File:                     bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa (raw, json)
Hash identifier:          8ii86ZVIkQY9prpvaoa/a5tUW+11M55q5oEDMSdu0L0=
Subject key identifier:   42:59:ED:9A:D6:E6:6D:DC:76:A5:5C:A7:EC:05:DA:C8:A9:10:74:71
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285845C178C80D35FBE0115AAC3B00
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        104.218.207.0/24 maxlen: 24
                          104.218.206.0/24 maxlen: 24
                          104.218.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:78:c8:0d:35:fb:e0:11:5a:ac:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=e3dfb7f4-5016-4f0b-92d1-0fa9e76e0305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:80:d3:80:83:4a:ed:d8:ba:5a:20:04:df:
                    c7:a7:90:33:90:9d:2b:8c:28:81:70:42:bf:32:b7:
                    f5:d6:13:93:ef:de:51:e2:ba:98:03:83:0f:fa:c5:
                    93:73:19:e4:66:fe:90:69:13:9d:5f:82:2f:41:a4:
                    78:86:1b:e6:3c:ae:69:29:ba:4f:c9:55:24:c5:57:
                    bd:58:b6:fe:9c:61:db:13:f6:6b:1e:35:0c:32:dc:
                    57:f6:b4:7c:96:20:df:95:23:64:b9:f3:c6:c3:ad:
                    65:da:8e:dd:5a:0c:3f:12:40:da:ba:82:63:bf:4f:
                    77:a3:df:58:64:06:2c:af:06:3a:a1:3f:7e:1a:a6:
                    5b:72:2d:3f:93:dd:82:05:0e:42:52:3a:1a:a8:a0:
                    09:09:ee:5c:50:cc:fe:08:52:5b:4d:15:44:df:1a:
                    f8:d5:08:02:06:53:b2:b6:52:96:3c:f0:b6:b9:56:
                    11:6a:90:74:c4:19:ae:8a:0a:30:76:1d:88:cd:ca:
                    be:5c:0a:cb:f0:92:e3:68:be:7c:c2:75:6e:4e:19:
                    dc:a3:a9:46:d0:3b:3c:2d:e2:a9:41:11:a5:b6:18:
                    98:2a:a0:83:87:d2:02:5d:87:d3:72:e1:5a:c7:a3:
                    6e:dd:41:2a:9c:91:61:40:1d:59:be:d4:65:ee:44:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:ED:9A:D6:E6:6D:DC:76:A5:5C:A7:EC:05:DA:C8:A9:10:74:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/bf023aaf-dae5-3af9-b654-95e3a44bf1ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.205.0-104.218.207.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:06:c7:f2:80:00:41:09:5f:b3:2d:86:0e:0a:33:f1:16:6f:
         d2:d3:ea:fb:0d:d7:b3:ed:17:3c:af:5a:9a:33:50:91:29:4a:
         81:a0:0e:b6:04:19:aa:a3:7d:3c:c6:06:30:db:9f:bf:15:8b:
         7c:31:e7:bf:a0:7b:1f:fe:80:5b:98:8b:80:b8:6e:59:79:f9:
         06:05:ab:b1:43:a7:a3:85:ad:42:9d:ad:d4:fc:ac:67:87:e8:
         db:86:fb:8a:fa:71:c2:f4:3f:00:3a:8b:0c:0b:f4:0a:88:34:
         98:4b:63:dc:d3:05:bd:b3:e6:b8:c8:34:5e:ca:cb:fc:fd:6f:
         8a:b7:66:4a:d2:0e:b1:a4:20:86:04:73:7d:66:82:18:1e:ef:
         11:b1:44:af:e7:f9:a9:a7:3f:6a:e0:7d:ca:78:9b:ba:e0:2f:
         1d:6a:27:9c:ac:1d:a8:1e:11:90:0b:9b:21:1b:c8:5b:43:b0:
         79:1a:18:1b:62:d2:bc:87:96:98:2a:62:6b:d4:9c:26:e7:56:
         5f:d3:a3:5d:18:82:57:c0:2f:9e:69:d4:36:65:1b:1d:36:81:
         df:45:a3:66:bd:74:5b:a8:15:59:28:a4:8a:98:9b:b2:61:22:
         28:11:4e:bc:15:b0:2b:60:10:87:4d:5f:d7:45:5f:d6:f6:10:
         59:64:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:12:48 2024 by rpki-client on console-fra.rpki-client.org