Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa
File:                     94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa (raw, json)
Hash identifier:          f8eBBqxKqpyoPJzw0pyZNVT5G1kzTxG1040nQ0zShCY=
Subject key identifier:   BB:1B:98:3C:91:1E:2C:AE:F3:F8:E0:67:69:A3:D2:CA:92:09:D2:B5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285844F9FABF458A08A82BF9EBD640
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     9009
IP address blocks:        104.250.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:bf:45:8a:08:a8:2b:f9:eb:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=1e80b831-0953-4768-8dce-3597a1e80fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:1b:f9:ef:d0:7b:36:60:59:88:33:81:02:
                    fd:c1:ab:e7:e6:01:a5:23:e0:eb:18:6f:2e:c6:ef:
                    5a:4d:fc:6e:91:a2:38:86:f3:b2:8f:1d:dd:30:fb:
                    ee:5a:4b:a2:0e:10:2d:7c:18:a4:db:55:b0:41:6a:
                    07:c9:4a:0c:67:a1:9b:78:6f:c7:fd:78:ab:c9:ac:
                    6d:cf:f4:6c:0d:28:fe:cd:e6:53:e6:95:58:0e:5b:
                    54:3b:37:61:1a:4c:a4:8e:a4:c5:dd:b4:a3:49:1d:
                    30:4b:25:86:5f:fe:13:9a:5c:dc:cb:db:d7:60:95:
                    f4:9b:eb:c5:6f:4a:9e:cd:66:67:93:6d:18:aa:46:
                    38:8b:08:16:c4:1b:2a:d6:d5:7b:4c:07:26:57:b6:
                    20:de:06:da:bb:ec:73:f9:5e:53:d6:70:ad:9c:c8:
                    47:35:47:b8:0c:24:63:5a:79:cd:18:45:21:0b:c1:
                    ff:d1:e5:8f:bb:16:77:41:22:33:94:63:49:e0:85:
                    24:8d:b8:ed:69:03:ec:6c:f6:01:21:79:d4:2a:e3:
                    32:53:94:b3:47:65:3d:92:bb:90:91:3e:7c:14:8d:
                    a3:99:bb:1e:a3:bb:1e:20:db:3f:7a:63:1e:2c:c1:
                    b0:31:96:98:ec:ef:25:60:eb:7c:74:85:c7:41:34:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1B:98:3C:91:1E:2C:AE:F3:F8:E0:67:69:A3:D2:CA:92:09:D2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/94367500-4b1e-3e02-a3c5-ce1d8d35b8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:47:fd:c0:49:a7:63:30:47:fe:93:e6:24:05:97:df:4b:9c:
         e2:a3:db:b0:87:16:b2:67:99:d0:3e:c7:94:19:26:97:e8:70:
         5f:4e:26:3f:a4:d0:87:73:a3:2a:c9:0c:ba:69:49:ce:8c:ee:
         6d:c5:66:7c:ef:8e:d1:50:42:3a:72:c7:7e:04:84:a3:37:6d:
         b1:54:f8:24:cd:b3:10:5b:d9:9b:ec:1e:51:8a:1f:ac:71:38:
         b7:6e:21:36:1c:e3:c0:43:44:db:3e:14:6b:1a:0e:28:59:cb:
         1e:c3:6c:fc:10:5b:10:15:9d:75:f1:fa:d4:0f:6a:e8:37:a4:
         0f:dd:c9:af:88:0d:2d:d3:64:ec:89:95:3e:be:56:a3:67:2e:
         f0:74:3f:d3:87:4e:83:95:67:74:f9:4b:65:38:b6:85:b9:98:
         a0:e0:15:c7:e9:d9:bd:b8:e7:a0:a4:aa:0c:d5:0f:c7:9e:f7:
         63:b1:92:48:59:d1:d1:64:45:72:30:55:4c:7f:ee:f8:08:5a:
         2c:0a:ee:6c:9a:3b:4d:fc:f1:9f:5a:54:65:1e:8f:c3:c2:ab:
         92:42:72:af:9a:23:eb:b5:76:1f:11:9b:50:e9:40:0b:a0:dd:
         7d:3f:cf:82:35:30:53:b7:db:9a:d9:44:76:f8:71:28:ae:a1:
         39:a4:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:07:44 2024 by rpki-client on console-ams.rpki-client.org