Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa
File:                     b4c87209-cc1c-34e0-924a-da969c75af3f.roa (raw, json)
Hash identifier:          UN2+cMFVEkxzHPTyL7b3g5BOCibbpZDJJFV9WJ/8p4Q=
Subject key identifier:   B0:38:AB:C7:4D:CF:AA:B5:44:A8:8E:6F:ED:1D:2A:B5:77:5F:22:1C
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F43285845883DE5B2C8DE31C479AA0FA0
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     399883
IP address blocks:        104.247.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e5:b2:c8:de:31:c4:79:aa:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=ae155a67-ff64-4cd4-a329-f022256d69af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:47:83:b6:a7:63:ac:19:79:56:5f:98:06:
                    d5:48:f8:5a:ec:40:a8:9a:12:65:a5:3e:49:3c:bb:
                    33:f1:d2:d6:86:4a:6e:25:58:e4:54:3b:ae:da:4a:
                    8e:e9:e8:55:0b:ce:eb:b4:37:d7:bd:18:41:57:42:
                    f2:a1:b8:cc:8c:3d:52:cc:45:da:16:76:89:18:13:
                    95:42:c1:4e:56:9e:6f:f2:4c:4b:f4:3a:e8:c3:cc:
                    5d:e7:d5:73:fe:9e:92:84:cf:b1:7a:9c:52:f9:0a:
                    aa:a8:fe:a2:96:23:24:cf:21:e4:fb:4d:2c:88:9f:
                    15:1b:00:7b:27:62:92:89:1d:bd:8c:d2:fd:88:a1:
                    b0:1f:8b:0f:9d:03:22:bc:d6:e6:9e:46:39:04:0a:
                    3a:cc:63:8e:7a:18:3d:7f:06:ce:41:82:cb:72:1e:
                    d5:bf:c5:f0:27:20:df:72:80:06:2f:04:d9:f8:df:
                    e2:39:fc:08:7d:b8:ae:77:f7:5c:29:c6:03:9c:c3:
                    ad:3d:9d:de:17:14:80:00:9a:93:b9:ad:83:69:27:
                    5e:21:b3:5c:10:ea:aa:d6:d5:af:c8:4b:92:4c:6f:
                    05:68:d1:a3:83:cc:3c:eb:5b:5e:a9:67:9f:32:9d:
                    3a:93:12:3a:4e:24:61:be:04:26:fc:7d:a4:60:e2:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:AB:C7:4D:CF:AA:B5:44:A8:8E:6F:ED:1D:2A:B5:77:5F:22:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/b4c87209-cc1c-34e0-924a-da969c75af3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:97:ea:a3:45:86:60:2e:09:49:e1:63:84:0d:bc:83:0e:57:
         ac:ff:a4:6a:8c:5a:cb:c4:fc:cb:1e:92:08:f8:a1:ea:80:92:
         30:e7:75:2d:58:10:c5:49:49:c8:ce:85:70:cd:ee:47:06:2c:
         95:cd:9e:d5:2b:59:0d:83:95:e8:92:43:33:c7:ac:84:70:bb:
         0e:46:fa:82:f9:1a:f8:4a:4f:ca:d7:16:5c:45:74:a6:f0:ef:
         ff:78:23:aa:34:60:b8:97:59:aa:c5:4a:e5:69:3a:52:cf:a8:
         5d:69:67:b5:5c:80:b3:c9:c3:55:36:d1:40:0c:c5:39:80:ec:
         7e:46:5f:14:0a:c4:2e:4e:66:6d:af:9c:e8:ca:1f:36:ff:83:
         4d:5a:75:68:b2:22:be:a9:c4:8e:2d:44:aa:3d:8e:da:ea:d0:
         93:d5:70:ec:c2:e3:57:0a:fd:db:75:2a:54:c3:5c:68:cf:02:
         95:a0:37:4f:12:7a:52:3f:d6:53:58:6d:3a:81:61:c6:b2:96:
         de:65:14:57:79:e4:6f:43:3c:36:82:32:5c:66:e7:30:2d:0a:
         74:f2:33:63:ba:95:c8:fc:0b:0a:5a:ef:0f:d4:55:4b:4e:c9:
         ff:3f:2d:89:ec:a7:21:33:6b:34:c9:f5:ae:0b:f6:cc:ef:7d:
         16:4a:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:59:29 2024 by rpki-client on console-ams.rpki-client.org