Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56df7ff5-02b0-3b41-97de-af7cf2afa32b.roa
File:                     56df7ff5-02b0-3b41-97de-af7cf2afa32b.roa (raw, json)
Hash identifier:          Us9mLwlUy5USxiOvwx3NUsOu2iwa2nZMoTKC3gkwIaQ=
Subject key identifier:   32:E2:F2:AD:3B:4F:12:D4:2F:F2:57:55:DD:5F:D3:E7:81:34:DC:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DDA57ECD3AD72D27F7600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56df7ff5-02b0-3b41-97de-af7cf2afa32b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        107.3.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:da:57:ec:d3:ad:72:d2:7f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=acf9a750-424c-4073-bd0f-a4ee8e15b3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:c9:25:b4:d0:70:a9:bd:84:75:e0:f2:19:
                    bc:34:d8:2c:9e:b5:90:db:60:54:da:3f:e6:b2:d4:
                    81:cd:24:a7:38:26:29:df:a9:fa:9b:a4:82:eb:b8:
                    d7:9e:86:bd:23:8f:57:16:ba:1b:92:d6:58:74:6a:
                    fd:9d:5a:ef:67:ce:b1:d5:e2:77:bc:bd:55:9f:03:
                    a5:dd:ae:ee:ba:68:36:30:13:f5:b4:03:2a:21:9a:
                    f1:75:f2:35:37:67:b4:5f:f4:79:16:39:21:3c:0a:
                    f7:92:14:be:3e:ff:74:bf:65:aa:55:82:67:5f:3b:
                    d2:07:ba:3a:f6:15:10:9f:3a:08:03:2d:7c:3d:1f:
                    ac:b5:eb:f8:6b:93:d1:77:9b:32:24:3e:34:0a:a4:
                    5f:03:b8:be:41:bf:11:68:aa:c1:68:39:b6:fe:b3:
                    08:f2:5e:ef:b6:9e:15:00:9f:fd:a2:65:ae:68:4a:
                    e2:9e:bd:d9:ed:91:b9:de:7f:02:35:76:2d:5a:fb:
                    33:36:18:2c:e1:5b:cb:78:38:02:fe:9c:e4:ea:32:
                    fe:b1:3b:d3:5c:91:eb:45:e8:93:3e:5e:ad:1d:80:
                    d7:0f:13:1a:ed:b1:ee:6a:18:e6:b0:60:4a:57:cb:
                    72:46:43:97:f3:70:ad:48:34:7a:5a:ec:54:c7:ad:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:F2:AD:3B:4F:12:D4:2F:F2:57:55:DD:5F:D3:E7:81:34:DC:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56df7ff5-02b0-3b41-97de-af7cf2afa32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.3.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:29:05:1f:4e:c8:68:29:03:ba:bd:aa:16:88:c9:4f:05:
         9f:52:4e:99:b3:da:2f:af:ca:58:d0:07:0d:f0:bc:d5:17:2c:
         14:d5:c4:0b:25:c9:13:1c:8c:59:a6:b6:17:7f:3b:18:6d:b4:
         05:06:10:ff:0c:3c:d3:56:d5:c2:43:2d:52:69:4b:ba:c5:ff:
         15:bc:b7:56:a2:d0:93:6f:bb:b9:08:0f:b8:ff:f9:84:3a:4f:
         34:72:c7:65:0e:bc:5f:f7:19:a4:51:4a:8c:53:75:2a:10:91:
         96:a6:cd:fa:2d:3f:44:50:a4:0b:35:5e:f5:8b:60:40:9b:b0:
         50:e5:1d:66:19:4d:e2:a5:df:7d:e7:ef:81:e5:b2:80:76:f6:
         39:b9:f9:c3:86:89:15:37:00:13:4f:70:aa:90:fc:55:87:a1:
         04:01:d9:86:bc:b5:aa:00:b3:d9:ea:84:12:10:bd:35:d2:ab:
         75:c9:4c:98:bf:6e:49:6a:db:40:97:d8:af:22:19:ae:db:d3:
         28:79:42:6c:fe:ac:0e:dd:0f:ed:ee:ca:55:a5:dc:4e:f2:5e:
         6e:a2:6b:b7:c8:03:4d:03:c0:dd:58:30:37:62:34:b1:3a:df:
         7a:26:ae:52:81:15:5c:67:37:38:e7:ca:ed:6f:63:7c:d0:93:
         a2:27:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:36:15 2024 by rpki-client on console-fra.rpki-client.org