Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
File:                     df61bb8b-6c75-397e-84df-0353bf3e6294.roa (raw, json)
Hash identifier:          v+qNQuXC0jD1qSr6dgBh/mLyEi5AwbCeOtEsaUch5FY=
Subject key identifier:   E4:80:94:2B:07:73:76:BD:EB:39:B5:26:97:23:54:D7:D7:14:6A:07
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F432858452952959F43D94FD0FF4E3228
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     63267
IP address blocks:        104.171.219.0/24 maxlen: 24
                          104.171.216.0/24 maxlen: 24
                          104.171.217.0/24 maxlen: 24
                          104.171.218.0/24 maxlen: 24
                          104.171.220.0/24 maxlen: 24
                          104.171.221.0/24 maxlen: 24
                          104.171.222.0/24 maxlen: 24
                          104.171.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:95:9f:43:d9:4f:d0:ff:4e:32:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=29d382f2-c3c3-47fe-9f0c-11119caff888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:2e:f9:8f:28:92:4f:85:ac:d3:15:67:25:
                    32:66:f7:0c:88:21:63:2e:d0:51:0f:47:7c:7d:35:
                    d3:96:7f:a1:79:27:ae:b2:02:b3:ba:8e:95:84:70:
                    cb:21:9f:fd:ac:1c:ee:0a:31:2d:91:34:07:a9:80:
                    2d:14:b4:3d:2c:74:ca:87:84:31:b2:9d:16:7b:ba:
                    3d:bf:07:7d:ce:5b:f0:a7:78:b9:14:23:0e:c9:df:
                    b6:bc:47:21:a2:76:bd:e6:fe:8a:27:7f:61:b5:85:
                    32:25:70:19:24:a3:3c:cc:a1:2c:57:9f:00:0a:4e:
                    e9:5a:dc:12:41:17:85:6f:3c:c1:4f:a3:f4:08:e8:
                    0b:2b:72:ab:dc:71:26:85:36:71:02:ee:d8:c2:72:
                    b9:3b:6d:58:74:0a:00:7b:89:72:ef:29:6b:4a:63:
                    cf:67:48:54:d8:1c:21:80:06:50:6d:f5:74:33:1c:
                    db:fe:31:8c:87:e2:b1:34:50:e5:2b:f1:79:1a:87:
                    13:35:c6:ab:df:d2:dd:d3:6d:a1:65:72:6c:bb:60:
                    7a:34:43:32:88:0c:ca:bf:fc:f8:f5:62:42:29:93:
                    b0:46:8e:a7:3f:61:d5:e1:05:1b:b2:86:d2:77:7e:
                    7f:8f:84:e0:d9:75:5f:8e:7c:a9:ec:a7:c9:6e:c9:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:80:94:2B:07:73:76:BD:EB:39:B5:26:97:23:54:D7:D7:14:6A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:61:14:19:5f:3d:04:21:79:cc:6f:a0:b8:cb:fb:31:28:1c:
         75:1b:c4:4a:c6:cd:4c:12:79:05:20:8d:18:36:d8:ee:43:90:
         68:29:68:83:61:b8:f6:0a:d4:ce:c1:a2:31:a4:d2:23:a5:19:
         e8:3a:7c:1d:cd:3d:03:4b:50:d2:7e:67:68:cd:0d:dc:00:c1:
         97:83:fa:28:e4:bc:92:39:98:05:fd:61:db:dd:b9:7d:90:bd:
         c0:b3:dc:78:6f:a2:1c:19:3b:28:e8:d9:4a:b8:23:9b:ad:2b:
         7e:75:ec:94:f1:bf:39:06:fc:28:f5:d5:0b:cf:97:3d:a1:ab:
         f3:95:ed:b3:30:36:34:f7:65:ca:3b:17:9c:f4:d6:c1:d3:4b:
         cc:7e:f5:81:31:58:25:9e:6b:b1:4f:05:cc:0e:9e:85:90:ad:
         0e:9f:88:c8:af:ad:e5:08:86:0a:bf:d1:b5:73:fc:44:91:73:
         3b:23:59:8e:f4:c0:61:fb:36:6e:98:4e:89:85:83:bd:4f:89:
         f4:97:e5:f6:c5:13:c7:b7:32:fe:c0:98:cd:5f:ae:24:3a:27:
         b4:de:c6:ec:c1:47:36:35:c8:f5:05:a7:eb:d5:64:9e:08:66:
         88:c7:82:35:dc:0e:af:f4:86:61:11:04:1e:65:06:4c:84:c8:
         ee:99:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:09:33 2024 by rpki-client on console-ams.rpki-client.org