Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/80857a9a-5062-355b-abd4-2e588a7bd2be.roa
File:                     80857a9a-5062-355b-abd4-2e588a7bd2be.roa (raw, json)
Hash identifier:          l1lOuGKOWrzjvLEPKf4gKoh2HGTVfm3m2PnJut7A1Xk=
Subject key identifier:   FC:B4:C1:7D:EE:16:5B:D0:CF:EB:BA:30:A4:44:38:24:81:16:55:FE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540B7490630217A562BE3FF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/80857a9a-5062-355b-abd4-2e588a7bd2be.roa
Signing time:             Mon 18 Mar 2024 22:07:06 +0000
ROA not before:           Mon 18 Mar 2024 22:07:06 +0000
ROA not after:            Sun 16 Jun 2024 22:07:06 +0000
asID:                     396982
IP address blocks:        104.197.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:49:06:30:21:7a:56:2b:e3:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:07:06 2024 GMT
            Not After : Jun 16 22:07:06 2024 GMT
        Subject: CN=15414675-8f51-499d-b8a5-418b734ffeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:0a:b3:51:db:4c:d4:02:c0:e3:5c:a9:7b:
                    f5:bd:80:13:d6:3d:99:05:55:fb:8f:3b:b1:a8:8c:
                    ce:fd:85:c7:94:95:87:03:14:6d:7d:57:32:1c:ac:
                    5f:83:bc:26:e8:3f:a1:d8:a6:13:0a:30:ab:a2:ec:
                    e3:fe:0a:0d:f6:82:15:70:2f:d7:93:53:b8:2c:b8:
                    f0:ad:e8:2b:2b:69:ec:57:da:e9:b1:cb:5e:f8:d7:
                    0d:be:c1:ec:27:55:d3:b4:cb:2e:b8:15:4e:18:41:
                    1e:63:12:b5:22:97:58:b1:49:d4:c0:14:fe:5f:c9:
                    1e:3a:eb:58:96:95:d4:71:09:ba:73:5b:22:08:98:
                    83:90:22:ad:be:7c:01:cc:2f:55:26:58:57:d9:43:
                    df:c6:63:df:82:5f:3e:46:19:3a:ce:b6:77:4a:f4:
                    5e:26:6c:fb:ba:ef:6d:f4:0d:6b:62:7b:40:4d:54:
                    21:3b:7e:b3:86:af:5c:28:10:1c:b9:d9:cd:d2:d4:
                    06:70:74:a4:fd:30:d9:56:5d:4c:1c:2d:6d:1d:64:
                    26:ad:e7:a5:9b:5c:da:5e:11:1d:20:41:f0:09:88:
                    db:72:27:6e:fd:4f:6e:d9:04:b9:ce:0c:90:30:ed:
                    70:c6:5f:61:94:7e:fd:1a:62:81:63:d6:9a:e1:c0:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B4:C1:7D:EE:16:5B:D0:CF:EB:BA:30:A4:44:38:24:81:16:55:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/80857a9a-5062-355b-abd4-2e588a7bd2be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a4:71:68:5b:51:81:9d:84:56:cf:18:c5:45:da:c8:4f:30:
         5b:44:fa:c4:8e:1d:53:e2:4b:de:23:73:93:a5:9b:fd:a1:73:
         08:58:5f:b7:cb:62:e4:dc:d7:ab:77:04:56:75:f4:e1:ab:29:
         64:f2:6b:18:ea:4e:f7:15:10:79:38:b9:48:64:b7:dd:41:fe:
         92:11:85:be:57:f8:4e:08:82:0b:57:2a:2f:e4:01:58:59:76:
         f9:9f:78:c9:69:a8:0d:8e:ff:2a:a5:10:25:31:e1:35:3d:30:
         c0:b9:f5:19:00:b1:08:19:5f:c3:f5:07:c4:d7:17:77:7a:ae:
         da:55:88:d2:97:98:7b:4c:73:d8:a0:5f:29:5a:3a:6f:30:58:
         a5:56:43:6d:d2:d0:70:74:b8:ea:8b:74:ad:19:d3:c0:84:bf:
         2c:30:f9:24:8f:a2:c7:cd:8b:8b:42:4d:74:a8:ac:78:91:02:
         52:92:97:78:b4:84:e8:ff:d6:3f:c6:1e:af:45:f8:d0:51:1f:
         03:85:db:fe:bf:e8:78:d7:e0:c6:20:e8:af:fa:be:ee:bd:b7:
         a7:53:e6:6e:6d:52:b2:df:ea:3a:d8:e0:96:3d:62:a8:bb:58:
         9d:f9:2c:55:d2:f0:98:d6:a6:95:df:e3:d8:d6:a2:f9:1a:51:
         f0:66:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:46 2024 by rpki-client on console-ams.rpki-client.org