Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5dfc6fa4-da52-391d-8590-64c7cf5f88ea.roa
File:                     5dfc6fa4-da52-391d-8590-64c7cf5f88ea.roa (raw, json)
Hash identifier:          iewGZKAXruA279kSbsj3NwK6vxAHRDYAkEweYI/+iyc=
Subject key identifier:   BF:71:B1:51:25:28:98:84:38:5C:2A:33:96:BF:50:27:60:A1:BD:A6
Certificate issuer:       /CN=9b8beb75-f017-4d49-9a75-fbabc6a102e6
Certificate serial:       010D0C9F4328584514DFF1594362C73FCCAAD900
Authority key identifier: 3B:B9:62:38:67:E2:E7:BF:77:89:E5:C2:69:02:CC:7E:3B:4E:37:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5dfc6fa4-da52-391d-8590-64c7cf5f88ea.roa
Signing time:             Sun 03 Mar 2024 05:13:28 +0000
ROA not before:           Sun 03 Mar 2024 05:13:28 +0000
ROA not after:            Sat 01 Jun 2024 04:13:28 +0000
asID:                     63213
IP address blocks:        104.194.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:df:f1:59:43:62:c7:3f:cc:aa:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8beb75-f017-4d49-9a75-fbabc6a102e6
        Validity
            Not Before: Mar  3 05:13:28 2024 GMT
            Not After : Jun  1 04:13:28 2024 GMT
        Subject: CN=03e8f781-7fa5-4b82-b937-067acef48dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:f6:87:7a:48:70:5d:06:da:a6:d9:e1:2b:
                    66:ff:2d:32:ad:76:13:3f:0b:82:a5:c5:2b:25:fb:
                    44:74:94:8c:4f:93:50:20:c9:3f:22:bc:dd:19:ce:
                    dc:a0:af:69:ea:35:27:1c:bc:17:8d:b9:d4:63:84:
                    65:39:67:9e:09:eb:24:55:6f:9c:40:fd:52:35:5b:
                    c3:92:aa:ba:61:95:2c:26:b0:23:1d:87:33:1c:5f:
                    0c:0b:81:4f:ef:e8:c5:2a:43:3f:4d:a2:52:92:75:
                    c2:39:db:99:ce:b6:17:50:b1:eb:d0:5c:be:7d:b6:
                    e8:bd:a0:5b:c2:18:ed:2f:81:88:b6:fb:17:5d:a7:
                    0b:42:fc:b9:8b:05:c1:3c:96:12:d0:60:82:47:13:
                    94:d2:c2:06:e7:0b:1a:02:0e:05:08:af:17:8e:df:
                    3d:e9:bc:cd:a6:0b:2d:1b:8f:e5:9a:35:66:04:ed:
                    e7:17:57:27:a8:c3:f3:b6:5e:2a:7c:fd:ee:23:c1:
                    f9:62:43:f0:2d:53:c6:96:5c:c3:a3:d4:d9:59:a5:
                    92:0c:7a:3f:b1:30:6b:9e:43:26:de:4e:d7:2a:03:
                    46:13:0a:f5:af:d0:61:c5:c2:9b:89:60:69:de:cf:
                    5b:d4:9b:b2:0c:20:85:12:89:8f:18:36:ff:a3:d3:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:71:B1:51:25:28:98:84:38:5C:2A:33:96:BF:50:27:60:A1:BD:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/5dfc6fa4-da52-391d-8590-64c7cf5f88ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6/9b8beb75-f017-4d49-9a75-fbabc6a102e6.crl

            X509v3 Authority Key Identifier:
                keyid:3B:B9:62:38:67:E2:E7:BF:77:89:E5:C2:69:02:CC:7E:3B:4E:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b8beb75-f017-4d49-9a75-fbabc6a102e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1d:98:62:c4:96:df:22:ac:a6:0f:d6:92:96:c2:a8:84:82:
         4c:02:81:e8:ed:00:70:3a:e7:cf:56:73:1a:3e:16:93:8c:3d:
         a8:eb:da:b2:f9:d9:65:df:33:15:1b:41:ea:b2:2d:56:bf:17:
         7e:b2:88:c4:21:ea:e4:24:c4:cf:90:f4:bd:c1:5b:46:00:32:
         90:0c:a2:81:80:a6:41:1f:8e:b3:77:69:55:11:bf:d8:ed:ef:
         01:7a:cb:58:8b:57:96:71:8a:29:60:14:3a:dd:40:90:cb:bc:
         19:99:63:df:09:a6:65:c8:9e:13:80:84:9f:95:ed:0f:44:cb:
         70:11:db:bf:c2:a4:d1:65:5f:2a:57:66:3b:90:d8:de:e6:39:
         f8:32:ff:05:41:39:a3:91:22:63:21:c7:d5:a1:04:87:4c:f0:
         50:35:52:22:e4:64:ca:37:f0:00:b6:77:2e:55:d0:77:f7:43:
         d4:d7:cf:be:21:61:33:f8:7d:37:b0:88:62:c2:07:ff:06:e6:
         23:ed:d6:40:3f:aa:d5:2b:07:78:37:5b:9d:d4:14:17:f8:bc:
         b4:58:8d:1a:93:e6:28:be:4a:75:e9:24:60:8d:28:76:87:81:
         cd:8e:ef:dc:0a:a1:b1:39:77:28:be:37:41:69:de:0c:e6:1b:
         c9:d8:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:48 2024 by rpki-client on console-ams.rpki-client.org