Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/bfd429b5-c7b2-323f-a5a4-5d08fb5b5508.roa
File:                     bfd429b5-c7b2-323f-a5a4-5d08fb5b5508.roa (raw, json)
Hash identifier:          rbR7oGLeZgVdeUB9Er5kyPh7IGu8/lAysrfM6KDlgXg=
Subject key identifier:   7B:BD:6E:EA:B1:3B:36:EE:17:F1:0E:6B:83:33:3C:41:E1:54:C5:77
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F432858452EE7E787F6BE28DAAA1C7E40
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/bfd429b5-c7b2-323f-a5a4-5d08fb5b5508.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     11758
IP address blocks:        104.171.212.0/24 maxlen: 24
                          104.171.213.0/24 maxlen: 24
                          104.171.208.0/24 maxlen: 24
                          104.171.209.0/24 maxlen: 24
                          104.171.214.0/24 maxlen: 24
                          104.171.215.0/24 maxlen: 24
                          104.171.210.0/24 maxlen: 24
                          104.171.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e7:87:f6:be:28:da:aa:1c:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=bd4d236a-0cae-4527-ac14-46d76a6c085b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:17:a9:c4:1d:2e:ab:97:fa:74:b6:2a:8d:
                    c5:be:c7:f4:25:ac:3a:2c:ff:12:7f:15:8d:71:e5:
                    2d:df:ec:e8:0f:d8:96:2e:a4:2d:24:ba:93:63:17:
                    06:f3:f2:43:96:20:22:61:11:9e:fd:ac:76:46:35:
                    c8:8a:23:8b:6d:f2:94:ad:52:08:08:85:89:91:ad:
                    e4:1f:d3:86:d7:6a:80:a3:2e:40:39:ad:a0:35:4b:
                    d0:b6:25:55:52:60:1c:57:3e:c5:56:85:07:5e:86:
                    f4:5b:2b:98:1c:18:6b:34:5c:cc:69:be:24:98:47:
                    50:30:64:08:5f:b9:24:b5:62:fd:47:a1:46:a0:ae:
                    e3:0d:7d:b1:30:7c:46:99:05:e9:97:99:32:05:03:
                    3b:de:f5:87:33:7b:af:ce:b5:44:f1:87:a0:c6:4c:
                    0b:8d:07:7c:6b:71:4f:25:4d:0c:d3:4e:a6:93:e5:
                    c4:3c:ce:2c:8b:8b:f7:d5:bc:53:80:c1:9a:fc:85:
                    dd:c4:e1:82:de:e6:d7:5e:c5:0d:73:41:35:8b:bd:
                    f1:6d:11:75:c5:51:63:5f:e3:d5:16:5e:15:90:2b:
                    40:f6:b4:2c:eb:5e:1a:24:4b:37:c6:15:e9:a6:ba:
                    d0:7d:90:8c:f8:a4:14:02:db:6f:e5:8f:64:7e:33:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:6E:EA:B1:3B:36:EE:17:F1:0E:6B:83:33:3C:41:E1:54:C5:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/bfd429b5-c7b2-323f-a5a4-5d08fb5b5508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:90:6c:99:f6:ce:a9:20:c0:64:de:66:dd:e3:12:c9:3a:
         2d:4b:a4:e2:29:09:17:05:92:04:e3:8b:b4:76:f3:30:ab:6a:
         8a:4c:89:6b:16:bb:73:d9:43:e9:f2:8d:87:0d:12:8b:00:9e:
         35:e8:94:87:c1:e8:c8:d3:26:5d:6a:3e:a6:67:0a:3e:81:95:
         41:46:d8:04:5c:b9:99:be:16:fc:3f:96:e6:5a:d9:44:ad:f7:
         8c:2f:59:34:40:15:4f:0b:72:e5:70:5d:71:34:f6:1a:e4:e4:
         cf:67:ad:ee:90:65:f8:a8:60:8d:76:82:2a:45:2e:4d:f3:2e:
         83:a7:0e:b0:90:f1:61:b0:42:98:b0:ff:53:c1:85:e7:db:e4:
         fa:df:da:db:aa:64:83:e6:b3:db:3f:5d:d3:26:75:9a:40:8e:
         db:b1:6a:42:c4:81:c9:78:b1:22:c5:9e:98:92:cf:c4:bd:50:
         0a:b3:92:66:33:d4:a3:98:8a:2e:44:aa:cd:d9:36:7f:7f:07:
         5f:ca:04:16:2b:e5:c7:37:f2:0d:ba:a3:af:aa:19:23:7d:bf:
         e7:c3:e5:83:6d:17:0f:6f:9c:8e:43:4c:75:71:b8:60:f6:19:
         68:7b:cd:a3:5b:61:75:32:eb:d0:9e:f9:5c:72:a8:a1:40:0e:
         87:ec:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:03:51 2024 by rpki-client on console-ams.rpki-client.org