Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
File:                     c243a375-2e4b-3391-8643-ce860578a4b0.roa (raw, json)
Hash identifier:          vmWzc92zw0WnjaYdIfI++D0kO2NgRx+SYrPn44+A+y4=
Subject key identifier:   28:BB:7A:47:5D:40:15:EA:8E:03:BD:3C:42:23:9E:65:90:D2:76:B8
Certificate issuer:       /CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
Certificate serial:       010D0C9F43285845C01387EED1BDC18648FFFE80
Authority key identifier: 38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     18632
IP address blocks:        104.200.192.0/20 maxlen: 24
                          170.75.128.0/20 maxlen: 24
                          107.182.32.0/20 maxlen: 24
                          2604:3600::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:87:ee:d1:bd:c1:86:48:ff:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=8abd4594-06f1-4aef-a438-e709e0bef1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:db:6b:ca:f3:4a:b6:ab:d4:2e:25:86:33:ef:
                    97:d1:c1:b5:fd:66:36:93:4b:72:92:69:9f:8d:ec:
                    87:71:96:7c:ae:0a:29:cb:b2:29:c7:96:e9:e3:57:
                    b1:b7:ba:d4:64:6a:e5:c6:fc:b6:53:f2:69:57:53:
                    fa:4a:70:66:8b:88:c1:da:57:66:d5:a6:2d:06:48:
                    56:d3:f1:59:e0:6f:ba:33:06:11:89:d0:7e:04:3c:
                    cd:ff:32:98:bc:46:16:c4:27:a9:59:d4:2f:e3:9e:
                    c1:2a:9f:11:66:9a:cb:f3:71:39:bf:8d:fa:73:71:
                    5e:14:fd:37:e9:9d:fc:67:95:91:b8:6f:3c:4b:26:
                    b0:85:07:07:a5:0b:ed:de:18:c2:86:e0:9e:1e:02:
                    12:ec:29:3a:a9:bd:85:9d:36:15:1c:ff:43:2e:28:
                    38:5e:cf:0f:16:38:c8:fa:9b:5b:77:48:55:cb:20:
                    9a:17:b4:e6:52:36:d9:82:6d:0c:8c:bb:a3:f0:76:
                    a1:d0:e1:06:ac:1c:92:71:65:6a:67:81:fb:a7:1f:
                    78:cc:8f:c8:4a:c9:62:06:f1:1c:ef:28:ec:ab:77:
                    ab:84:3e:72:69:c0:4a:90:32:5f:46:cf:94:7b:43:
                    a4:16:f3:a9:a1:a0:bc:39:b2:93:24:64:54:45:69:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:7A:47:5D:40:15:EA:8E:03:BD:3C:42:23:9E:65:90:D2:76:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.crl

            X509v3 Authority Key Identifier:
                keyid:38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.192.0/20
                  107.182.32.0/20
                  170.75.128.0/20
                IPv6:
                  2604:3600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:75:32:05:da:37:aa:b8:af:36:de:2f:6d:8f:fc:2c:2e:27:
         1e:50:a3:82:00:b3:66:0e:62:4e:2c:a1:ea:9d:b6:91:7a:d0:
         e0:4e:5b:8c:51:41:48:c5:e0:69:f9:a9:84:0f:88:cf:df:0c:
         8f:3d:4a:00:66:1b:a8:be:9c:a9:78:86:b0:81:3b:d2:e6:71:
         98:59:a8:05:64:a0:3e:a8:98:9d:2b:18:b1:09:7a:05:01:ad:
         d2:b3:1e:22:7d:a9:f8:b3:d2:97:12:57:ea:b3:d3:3b:81:6b:
         1d:5c:d3:80:e3:8f:a7:35:e0:27:7e:ce:36:c6:6e:a2:ae:86:
         af:af:a9:e2:38:f8:8e:78:4b:38:6f:d4:ff:cc:d6:6e:7d:58:
         bd:6d:13:2f:a2:a0:15:81:02:f5:9c:17:d5:2b:51:ac:17:83:
         a2:df:d0:3e:c7:f8:4b:05:aa:30:8b:67:eb:db:69:37:c4:72:
         d7:8e:d1:e4:2a:ec:d4:12:49:64:87:fc:bd:c5:de:f5:a9:f8:
         36:56:b5:e5:91:30:29:8d:1d:71:63:91:3b:c4:81:f1:e9:a1:
         2c:93:96:06:2a:ec:9b:b6:b8:d5:e8:34:8b:c6:88:7c:13:86:
         9c:7e:c7:30:8d:f9:81:e2:62:0e:91:b0:cd:ad:c8:8c:97:ef:
         18:54:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:17 2024 by rpki-client on console-fra.rpki-client.org