Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eada6c8-9189-3262-b2ac-599737b70a7c.roa
File:                     0eada6c8-9189-3262-b2ac-599737b70a7c.roa (raw, json)
Hash identifier:          pjrtQOWO4A0/4RKPQ4u/ZsVpJqE8SUlDVbyj8FyUCJI=
Subject key identifier:   61:C7:07:35:4A:BE:C5:7E:FB:B1:AB:4C:FD:DD:75:01:BD:96:F0:57
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540BCA20D423CB93CDC86B740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eada6c8-9189-3262-b2ac-599737b70a7c.roa
Signing time:             Mon 18 Mar 2024 22:17:53 +0000
ROA not before:           Mon 18 Mar 2024 22:17:53 +0000
ROA not after:            Sun 16 Jun 2024 22:17:53 +0000
asID:                     396982
IP address blocks:        104.198.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:a2:0d:42:3c:b9:3c:dc:86:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:17:53 2024 GMT
            Not After : Jun 16 22:17:53 2024 GMT
        Subject: CN=ad9d35da-e396-479a-b73e-31f3cc5e24b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0b:90:0e:4e:88:50:4f:98:d2:61:0c:62:fb:
                    f5:0e:77:8c:e4:a0:27:ff:d6:4a:16:81:40:ce:be:
                    77:e9:25:b8:34:8d:7b:b9:97:7a:ba:0a:a2:ac:bf:
                    87:c4:7f:b4:3a:26:91:5b:77:bb:cb:5e:32:e2:c1:
                    2f:f2:e8:62:20:f0:66:85:7b:5f:ce:f3:05:f0:07:
                    da:7a:79:61:06:8f:aa:17:dd:cc:41:64:fd:59:dc:
                    44:27:e4:e6:02:0e:91:e2:6c:5b:84:32:0c:b7:9b:
                    99:1f:29:91:b2:67:4b:c3:a4:cf:b3:ba:64:50:bd:
                    a5:49:6b:63:53:24:4d:36:85:56:8c:65:63:e4:f4:
                    96:fe:cd:8f:ac:33:52:0c:91:f3:ac:6c:7a:33:8b:
                    2b:eb:9a:44:f3:aa:dc:8c:9f:a6:4a:d2:8f:b0:75:
                    b7:51:65:0a:16:ab:2d:a3:26:b1:f9:1d:dc:8b:92:
                    71:71:1f:c8:5b:f1:00:2e:5b:91:68:a3:93:4c:a3:
                    da:3c:ea:c6:e2:b5:ba:b6:3d:24:96:6e:83:d5:1a:
                    1c:fd:aa:f6:39:3b:bb:1c:51:b5:f4:1d:af:9f:a1:
                    ad:4a:f8:04:94:cf:2f:7a:81:0c:9b:4a:73:1c:1f:
                    e2:95:dc:2d:84:6b:4c:02:65:b6:ec:6f:54:be:78:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C7:07:35:4A:BE:C5:7E:FB:B1:AB:4C:FD:DD:75:01:BD:96:F0:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0eada6c8-9189-3262-b2ac-599737b70a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:a0:fb:5f:8e:3a:5a:e3:ed:a6:6c:0a:6e:bd:a7:82:8f:
         a9:c7:a0:71:3d:c9:f0:45:b9:c1:86:43:34:7c:8d:60:bf:60:
         48:7b:5a:1c:ec:3f:52:9a:27:57:7d:31:a6:04:96:65:40:12:
         a5:52:e7:97:76:28:c6:fb:6c:33:20:ca:11:d7:0a:6a:c6:6d:
         64:85:cc:de:41:8c:c7:0b:b9:56:91:f2:cc:4a:7e:35:2b:58:
         ec:ff:7f:78:8c:b4:39:75:c2:66:2a:2d:6b:f3:45:53:e5:2f:
         44:17:81:53:39:83:4a:27:85:9e:f9:d0:47:15:c1:ab:3b:a9:
         b6:8a:c0:48:5f:7e:0d:2c:7b:44:00:77:88:80:0c:cc:84:d2:
         df:d5:e8:97:10:7d:1f:f4:79:35:c7:cf:6a:ee:e2:84:8a:dc:
         04:d2:81:cb:71:06:15:ff:36:0c:13:43:3a:59:c8:f8:4b:98:
         af:72:3b:c7:5b:e2:8c:9c:73:b4:8b:c8:0c:4b:23:29:80:30:
         ea:99:be:91:37:e6:fb:69:00:66:bc:6d:f3:e0:ee:38:32:05:
         8b:90:c4:1b:11:06:ca:ff:b4:9e:a6:ea:a8:9a:3b:45:d8:b8:
         52:11:ec:2d:6e:00:46:16:f0:a0:38:be:49:75:8b:0a:55:7c:
         88:6c:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:51 2024 by rpki-client on console-fra.rpki-client.org