Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa
File:                     73ca0919-a04c-37ff-94f3-29d436366d7d.roa (raw, json)
Hash identifier:          S1v4Px5cozbNYgYjB/oZatxPg3S/AoUuVhuMDYuxZbM=
Subject key identifier:   02:98:36:40:F6:7A:A3:DD:0E:AA:24:80:59:92:B5:4D:00:0F:B9:28
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845B4E8DB2A84975805A2E898A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     212238
IP address blocks:        104.243.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:db:2a:84:97:58:05:a2:e8:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=266fbbbf-8c44-46a4-b4e8-a951786328ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c6:a4:5e:07:a1:05:2b:b1:12:2a:19:5e:88:
                    3a:d9:51:7e:bd:44:8d:ba:f9:e6:84:85:b7:33:04:
                    94:d2:44:7d:f6:87:43:ce:36:f2:4d:c3:df:5e:b2:
                    07:f5:9f:99:d3:14:7c:61:17:59:5f:4c:ce:1f:28:
                    fe:9f:e9:01:7e:12:15:25:96:54:99:a3:44:e0:b8:
                    ac:03:61:20:e0:ee:cf:fc:af:b0:fc:34:39:d7:d7:
                    3c:0e:b4:2d:da:10:9e:eb:43:86:c8:f3:6d:54:54:
                    22:1e:78:aa:bd:2a:65:d5:ed:89:1b:1c:12:8e:54:
                    7a:fc:54:1c:19:5d:f0:ab:de:2c:b2:d8:bc:ac:0d:
                    c4:c6:6d:fb:68:22:e2:54:5a:41:c5:e6:a4:33:4c:
                    07:db:13:95:b5:8a:b1:b0:54:9b:8b:94:07:79:21:
                    a7:a5:11:d4:15:9b:83:25:99:39:4e:36:d5:c4:b5:
                    f7:71:53:9d:a5:11:8d:4f:9d:89:d1:bf:5f:a4:35:
                    89:5c:3f:64:30:e1:81:be:2b:27:78:a3:6c:68:75:
                    cf:07:14:a3:36:e4:6d:ff:e9:9a:ba:b0:6e:bb:0f:
                    2a:30:56:0a:79:e5:8b:7e:6d:94:07:87:a4:7b:52:
                    fb:c9:99:d0:84:f2:10:85:83:dc:1a:1f:74:f0:15:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:98:36:40:F6:7A:A3:DD:0E:AA:24:80:59:92:B5:4D:00:0F:B9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:ba:08:bd:1a:07:35:4e:88:d3:0f:b8:5e:db:66:3a:c9:
         4f:70:a1:78:9c:f6:84:0f:9b:28:f3:81:cd:47:3e:ec:f1:75:
         64:59:1e:a9:a8:e3:e0:85:31:33:98:c8:05:26:47:a6:ec:3e:
         8b:e2:9a:38:89:e1:a9:4f:89:5e:23:9b:8e:df:5a:45:34:b8:
         dc:9e:f0:cd:48:68:05:58:3b:5a:2d:6e:ed:66:d3:8f:58:df:
         e3:77:18:7e:f9:2c:b7:ec:1d:9e:03:37:90:64:c6:4b:50:3f:
         28:2f:d9:26:c3:f4:1d:17:cf:83:e3:56:55:ab:c4:26:fd:1b:
         30:41:7b:2e:87:bd:ee:d1:c8:65:fe:92:0f:d9:94:0d:08:39:
         77:b5:58:80:d6:9b:e7:19:9d:7e:14:51:31:f8:b0:6f:64:32:
         18:55:e2:6f:a3:ab:ee:1a:37:90:38:69:b9:2b:5b:8c:0c:94:
         92:ed:7a:90:3b:63:bf:7f:b0:63:41:a5:e6:58:b2:5b:a9:d5:
         a7:ee:a9:a8:c5:66:2d:f6:b6:51:e8:9b:3f:a0:89:11:5e:68:
         24:0d:97:e0:f6:2c:28:10:56:ba:cf:8c:99:84:22:ed:95:6a:
         e5:85:f2:df:57:a1:4e:e6:a3:2e:fd:78:ee:c1:7c:8b:48:7c:
         ac:09:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:19:29 2024 by rpki-client on console-ams.rpki-client.org