Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c33b4e8-5379-35bc-829c-e36cc390341c.roa
File:                     3c33b4e8-5379-35bc-829c-e36cc390341c.roa (raw, json)
Hash identifier:          FMjeiyjJd0aa/Gp26J4OZAUc48JwvhoNKl8pkrO4aqw=
Subject key identifier:   AA:C2:1C:3D:D7:E3:06:4C:C2:5E:E3:A6:2F:E2:6C:1C:39:5B:38:38
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858453CDD55FDF5EE04D1F6224680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c33b4e8-5379-35bc-829c-e36cc390341c.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     9009
IP address blocks:        104.250.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:55:fd:f5:ee:04:d1:f6:22:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=4d361329-453e-4526-8939-143af36d3100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:e4:e7:42:65:3e:1e:2c:f4:87:87:6e:e8:
                    9c:94:98:5d:e1:71:2c:0c:c1:61:ad:d8:92:32:d0:
                    d2:53:cb:80:67:3e:35:98:5c:0e:00:87:d3:fe:08:
                    fe:b0:77:a0:f2:34:e5:6d:b1:30:f7:a2:54:7a:79:
                    a5:0b:c6:d2:db:4f:90:6f:f1:16:30:a4:6d:7a:02:
                    1a:75:df:b6:67:ce:ec:d4:c7:fa:73:15:00:51:bb:
                    63:5e:68:37:2b:11:3b:1a:39:19:f9:0e:0e:84:64:
                    ec:d4:a5:f9:14:57:05:25:32:83:53:e2:8a:e1:c1:
                    0a:cc:5e:8c:4d:29:90:d9:fb:9c:bf:5d:65:6a:10:
                    d3:e3:2b:ea:13:f9:c3:8a:b7:41:00:a4:63:6d:2c:
                    0d:2a:d9:f4:7e:8e:9d:61:b8:11:d2:55:ef:45:82:
                    a4:62:43:01:77:c6:c3:c7:7c:7b:14:12:6e:90:64:
                    58:db:1d:53:a9:59:af:4c:58:69:e0:3e:6d:57:c1:
                    0c:fd:5d:9b:1f:15:73:1e:11:1a:f6:f6:bf:fe:f7:
                    8c:a4:36:7e:1e:ad:ac:a8:cc:b6:0f:b4:b5:ab:59:
                    30:ec:66:20:d9:30:e3:4a:15:d6:d5:1f:ec:c6:51:
                    bd:fc:1d:f3:0b:54:1e:8d:2b:ef:1b:94:43:a9:c6:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C2:1C:3D:D7:E3:06:4C:C2:5E:E3:A6:2F:E2:6C:1C:39:5B:38:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c33b4e8-5379-35bc-829c-e36cc390341c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:06:7e:84:ce:3c:25:69:0d:af:09:12:02:60:8d:07:80:b1:
         b2:63:54:d9:fa:22:9d:77:6f:6a:48:a0:9c:1a:fa:00:21:c9:
         6d:8d:63:7e:98:47:2a:05:7c:ca:2e:4a:dd:9d:d4:48:54:92:
         34:35:ac:e3:9b:ff:48:bb:45:a4:6f:f0:57:e6:c1:9c:ed:8d:
         51:c3:3c:1e:e5:40:ee:cf:ea:a3:1f:0f:80:97:2b:71:d7:5d:
         62:4a:43:cf:b3:42:fb:10:67:87:e7:9b:7a:c3:d0:e0:d8:d1:
         83:39:87:c5:fa:3d:73:86:ac:4a:86:f8:e0:91:a9:2d:ca:9a:
         7f:3f:03:a3:b5:16:e1:47:57:b7:4d:46:dc:34:69:2a:70:3a:
         7c:e7:bb:6e:ec:7a:f6:ee:52:ce:06:e6:a7:e9:66:7b:a3:62:
         ce:15:9e:82:45:db:73:b8:47:c8:c3:18:c4:0e:be:a6:92:a9:
         56:ed:df:64:77:58:7c:b8:76:03:0b:61:cb:2c:d5:61:0c:f5:
         cf:19:5f:68:f0:40:f7:57:74:b8:b2:f1:1a:5c:f9:80:16:dc:
         5f:bd:05:fb:26:c7:ab:ef:46:8e:22:4e:b5:b5:43:0f:f3:80:
         f7:9b:4c:1d:77:b5:7c:d5:f0:71:d8:af:ac:49:a8:ce:4c:38:
         bb:33:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org