Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa
File:                     89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa (raw, json)
Hash identifier:          cnNcGVmhxXZ+wQfMQe7/K22413XAUu5cvrcjJY9Glyo=
Subject key identifier:   1B:78:F8:90:91:62:00:C6:E8:29:4A:E0:B9:17:42:5D:00:AD:0F:04
Certificate issuer:       /CN=6c5be2bd-61a2-464a-be54-34e87a4a9584
Certificate serial:       010D0C9F43285845A15E152DB7FE36005A6C4B80
Authority key identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     31851
IP address blocks:        104.219.188.0/22 maxlen: 24
                          167.88.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:15:2d:b7:fe:36:00:5a:6c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5be2bd-61a2-464a-be54-34e87a4a9584
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=98f22259-b29e-4d60-bf71-ef7658ccc22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:50:7e:15:49:39:e0:24:99:82:f7:ce:fe:
                    1c:75:9f:b8:f7:53:ed:f1:ba:07:0f:13:3a:d1:0a:
                    32:11:a7:0c:41:c7:a9:e7:15:ca:ac:2c:2f:c2:3e:
                    bf:66:18:62:0e:c0:da:62:ae:03:44:4c:35:6c:9b:
                    0a:8f:5b:86:69:d1:d9:b0:12:41:72:17:6d:50:55:
                    d1:46:58:1a:85:7b:c8:60:5e:12:13:80:2f:60:73:
                    8d:35:52:f2:1e:2c:05:54:3a:9c:33:77:34:7c:7d:
                    8e:0a:60:76:d1:13:98:7a:53:dc:cc:3b:c7:37:6f:
                    32:76:a8:c3:81:92:70:23:aa:37:1c:3b:14:c0:60:
                    17:57:e6:96:8c:9b:05:8d:7b:06:f9:e8:f2:7a:f8:
                    7f:c2:05:1e:ec:0f:7a:49:b3:4c:8a:f8:29:ed:ef:
                    72:a2:8c:3e:e0:9b:82:80:02:b6:c4:0a:5a:e4:2f:
                    fe:aa:9f:a4:58:37:46:d0:2c:ea:f8:cb:3a:33:c5:
                    2e:8b:8b:f6:cc:ab:d9:7c:e5:8d:37:70:7e:1a:ac:
                    60:e4:48:37:26:6c:78:95:26:51:48:36:1e:f5:94:
                    25:98:62:df:2d:db:ce:d5:13:af:7f:da:a6:48:fa:
                    45:22:75:dc:b1:30:b3:32:a1:58:c5:eb:b5:82:bf:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:F8:90:91:62:00:C6:E8:29:4A:E0:B9:17:42:5D:00:AD:0F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/89cb97ca-7d4a-3637-9cae-6f5745076a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl

            X509v3 Authority Key Identifier:
                keyid:8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.188.0/22
                  167.88.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:61:3d:e6:08:f3:5d:f0:59:ea:67:a5:59:10:5b:cb:44:
         66:2b:a4:26:fe:df:50:d7:2c:da:f5:66:80:ef:c3:01:14:01:
         5d:db:1a:12:15:ab:bb:41:f3:c2:46:b8:39:01:78:f5:2c:03:
         ae:cf:82:91:29:96:55:1e:71:5d:39:31:0a:17:42:20:ea:43:
         ac:b1:a2:52:95:d4:cc:1d:a9:9f:f4:4b:49:c0:c6:86:71:64:
         46:0e:f4:65:a6:53:29:44:3a:8d:d2:ca:eb:70:be:b8:08:87:
         23:75:58:66:a4:be:3d:b8:6b:f0:3e:cb:4a:4a:58:f8:38:bc:
         ad:d0:34:07:8e:a8:ca:e1:16:b7:47:37:3f:13:c3:64:d3:7f:
         ef:42:83:fa:ab:ca:b7:16:89:2b:7b:91:6b:da:bd:79:0e:c3:
         75:65:bd:ee:57:81:9e:ed:38:e6:fd:c1:b8:95:fb:23:60:fd:
         9a:46:22:41:2c:fd:33:6c:57:4f:51:05:87:01:8d:db:e5:11:
         e8:03:a3:8a:33:19:92:2d:47:e5:c7:4b:90:d2:28:87:35:c4:
         7d:82:6c:c7:c3:98:a9:f8:28:91:2a:14:b8:e2:c4:d2:8d:e1:
         ac:b5:fe:db:3b:4f:4b:66:ec:71:c5:6a:8e:aa:50:12:4b:5e:
         38:be:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:23 2024 by rpki-client on console-ams.rpki-client.org