Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
File:                     af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa (raw, json)
Hash identifier:          RJA/9bFtYXRQKojLV67WFcO3d/Lr04+K2Y2VsRzVDnA=
Subject key identifier:   B8:A5:B2:AD:56:BF:8A:D6:F6:2E:A4:E3:20:3A:3F:D4:E6:5F:71:E3
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285845D39E6117D92DC23BD1265D00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     395092
IP address blocks:        104.36.228.0/22 maxlen: 24
                          2607:a680:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:61:17:d9:2d:c2:3b:d1:26:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=3b5c4357-0642-48d3-80ee-397d0053f61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:f8:76:91:3a:a9:f5:fa:41:ab:62:56:53:
                    82:4a:94:de:ba:27:b2:c1:93:72:4f:7a:f5:88:d0:
                    a1:fe:27:98:f1:5a:4e:dd:80:bd:44:27:65:70:0c:
                    b0:60:1a:95:46:78:3b:41:7a:de:a4:ac:e2:6c:27:
                    9a:78:dc:9d:8c:01:93:ae:a0:a9:07:35:c1:6c:c5:
                    c2:f9:fc:fc:54:01:b2:8c:00:1a:3f:01:0f:e0:0d:
                    5e:ad:61:2f:10:f7:66:86:d7:f9:fd:f3:d4:14:e1:
                    3e:6b:11:80:99:d2:63:b6:2e:95:01:71:ec:40:9b:
                    51:8e:1e:e4:27:3e:95:5b:24:82:9a:4b:d1:4f:85:
                    44:16:4b:f6:e3:2f:17:43:df:49:ac:2c:ea:2d:26:
                    6d:de:10:f2:fa:1e:96:02:7a:68:48:47:7d:42:79:
                    c9:19:e7:28:4f:08:09:c4:07:76:ab:b2:1d:06:1f:
                    00:37:93:6b:bd:29:d7:fb:8f:a1:7f:c3:f2:15:fb:
                    eb:7b:4e:22:3b:54:40:62:b3:67:34:72:ac:88:e5:
                    89:c6:10:cb:10:8e:0e:cd:67:fa:c4:b5:47:c3:c8:
                    b1:fa:b0:d7:6b:c8:95:ea:ab:db:a0:46:39:80:8d:
                    2c:88:09:8e:c3:10:c2:b6:8d:90:31:82:c9:24:d8:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:B2:AD:56:BF:8A:D6:F6:2E:A4:E3:20:3A:3F:D4:E6:5F:71:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/af73a7a8-3c0b-31d7-89db-4c8eb9b7c7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.228.0/22
                IPv6:
                  2607:a680:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:7d:10:cc:df:0f:5a:3e:26:43:8a:33:42:5f:e0:79:a0:
         d3:5b:b5:c3:eb:0c:74:f9:77:d8:60:05:84:83:a7:fa:42:d8:
         c6:44:67:b8:26:2e:66:cc:e9:9f:a1:92:ec:2a:67:26:49:c6:
         87:54:ac:cf:28:76:06:fc:82:3c:42:63:61:4e:95:9f:96:52:
         c1:e3:3b:86:f6:f7:d7:34:61:46:c9:70:4a:fa:2d:04:e8:b9:
         1b:db:08:82:81:48:b4:79:12:8d:85:ac:a4:0b:a9:d0:d7:bc:
         92:f1:f4:cc:23:a0:fd:9e:07:e6:03:4c:85:80:75:81:8e:d8:
         23:29:ac:de:fd:0e:ee:b8:17:8e:8c:89:03:36:c4:83:89:46:
         3b:55:e1:2a:5b:fd:46:b1:68:e9:bb:ee:c9:cd:7c:c0:ad:f8:
         a0:29:47:77:d1:77:46:49:6f:71:48:b5:d8:12:89:38:ab:4f:
         e4:f4:36:fb:be:e8:7c:13:98:0f:53:66:5f:d9:36:91:e4:fe:
         05:af:99:75:11:1a:db:ef:8c:e3:79:43:1a:e7:a7:1c:d7:19:
         af:c6:9c:60:bd:32:01:08:8a:fc:58:41:36:68:39:f7:2b:7d:
         d3:cc:63:0b:ab:4c:eb:8b:78:1a:9c:34:dc:0f:e1:7d:83:20:
         26:23:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:24 2024 by rpki-client on console-ams.rpki-client.org