Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa
File:                     03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa (raw, json)
Hash identifier:          nOsjH4VYefdC//8uP9TVnK6Q9psZmlQt4TwzjfgzlUg=
Subject key identifier:   13:95:BA:C7:1A:48:65:56:59:72:A2:03:91:AD:95:B4:B3:37:40:8B
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584742BB449B546E64C8A29DCB00
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        104.218.201.0/24 maxlen: 24
                          104.218.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:44:9b:54:6e:64:c8:a2:9d:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=feefb520-31ec-456b-a75f-7cb39e0278fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:ff:d6:61:18:50:0a:b9:8f:c6:56:a2:a3:
                    8c:94:72:5e:eb:8e:e4:9d:0e:22:47:d8:a8:64:9b:
                    96:0a:64:28:57:d4:39:8c:e7:4e:a0:7c:8d:a0:9f:
                    76:3b:16:a3:1e:c4:57:55:de:a7:70:a4:08:37:5b:
                    b0:c3:9f:2a:9e:81:7a:fd:81:11:9d:d4:f3:49:69:
                    61:26:39:a0:9d:db:5a:34:b1:05:c0:b2:3b:14:4b:
                    b0:bf:2f:4b:4f:67:3e:6e:e0:7c:a2:f7:3d:d0:0b:
                    f2:1e:a3:e4:34:31:3d:51:ce:d3:8f:f3:a8:60:ef:
                    6a:74:d9:6f:19:3c:64:70:32:19:fb:53:15:92:2c:
                    f5:0a:5b:7e:1c:65:51:93:02:f9:81:5e:a8:1e:33:
                    59:ac:ac:bc:a5:5b:a8:8a:d3:bf:ab:e8:28:0f:31:
                    5b:16:fb:72:35:21:20:73:48:36:0a:fb:c9:f7:9b:
                    8d:0b:9a:85:41:7c:b4:6b:9a:0d:0a:b3:db:a4:1c:
                    d0:a8:cf:de:fe:6f:a4:6e:f8:0b:aa:7f:06:b8:77:
                    2b:3c:74:9a:0f:46:2c:4b:79:bd:73:29:dc:fc:c0:
                    24:f0:77:45:56:19:1a:10:f3:c3:a7:27:f5:01:17:
                    22:4d:5b:10:13:dc:47:c4:ef:df:57:8e:35:fb:c9:
                    d3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:BA:C7:1A:48:65:56:59:72:A2:03:91:AD:95:B4:B3:37:40:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.201.0-104.218.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:83:64:be:52:bc:05:4f:10:c0:49:d4:ee:45:8c:91:49:
         ce:e6:4b:b1:10:c3:15:12:7d:47:ff:e1:73:97:b1:38:95:54:
         5a:31:7d:2b:d0:58:bd:e3:d9:0b:74:fe:6c:09:7e:25:88:27:
         c9:ee:ef:93:8b:38:6f:11:fb:27:53:a0:fc:f1:23:19:6a:f4:
         86:ab:1e:fc:e3:b6:a7:10:b2:f1:56:8e:b0:35:8c:eb:b1:48:
         68:2e:44:a0:9e:d4:ec:dc:7b:1a:26:bb:10:06:c4:a5:00:02:
         78:ef:6e:cf:ce:a8:1e:0e:2f:a6:43:39:30:41:9d:16:c5:cf:
         73:8f:77:1c:52:a3:dc:1d:e1:d2:2e:86:15:e1:71:9b:29:bb:
         e9:83:c3:65:90:71:94:4f:28:83:c2:84:21:d3:66:ce:55:20:
         e0:2c:70:d2:e6:15:89:e8:ce:fb:7f:c5:b9:94:cb:9d:1a:5d:
         bb:cb:ed:0c:80:57:00:8a:a5:de:53:f6:f4:a7:86:c9:c8:7e:
         0a:c6:a1:3b:9b:90:85:1e:d0:8a:d3:e5:83:c6:f0:6e:d8:f3:
         6f:2a:d5:51:55:e8:bf:a1:c7:7a:87:38:ea:61:8e:37:28:ee:
         8d:f4:fe:e9:92:71:c0:4e:ca:04:8d:f5:20:88:15:d6:22:ba:
         24:df:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:24 2024 by rpki-client on console-ams.rpki-client.org