Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa
File:                     40be57dc-7156-3f97-b77b-4e30e5469063.roa (raw, json)
Hash identifier:          J4c/QjtMdqOpLKX3cKFAuhOYi6KqVGppv2W0uyCQnSI=
Subject key identifier:   59:7D:3B:09:1C:6A:CC:FA:C8:24:99:0F:F0:8C:E9:26:74:9A:9C:A2
Certificate issuer:       /CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9
Certificate serial:       010D0C9F432858455E5DA6D0E9DA6279BBD9AD80
Authority key identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     54911
IP address blocks:        104.171.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a6:d0:e9:da:62:79:bb:d9:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=7a227756-4dfa-4537-ab5b-5835ecd50486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:73:70:b3:c3:b4:1e:c3:a8:df:d0:17:e2:3d:
                    9f:73:3c:d6:f2:65:70:a8:fb:69:ad:ef:9f:5b:c2:
                    3a:15:e7:1b:4c:06:f1:f9:4a:d2:9e:9d:96:8e:20:
                    1d:60:c3:59:c6:c4:44:bc:61:13:e6:5d:0f:09:86:
                    7e:4d:fe:60:3a:fc:99:97:38:a3:1e:d1:b1:71:6d:
                    9a:07:bf:17:31:9a:7e:42:5e:cc:5d:52:04:80:68:
                    f1:35:d6:cc:36:38:eb:d3:cd:ee:3a:d2:d5:5f:64:
                    96:57:6d:be:5c:35:bb:0b:5b:0c:49:63:c5:f4:29:
                    5d:dd:6e:4f:10:4d:4c:7c:dd:c2:ea:11:5e:eb:8f:
                    d3:2f:b9:ee:0c:80:76:74:f5:76:e7:1a:30:73:1e:
                    b4:92:ae:66:9c:c5:36:c6:7f:a0:fe:45:04:4d:55:
                    ba:33:52:fc:5d:b3:fd:14:57:8d:a4:16:5c:fb:75:
                    0a:b1:db:2f:d8:b7:ca:3c:d9:d5:34:5f:65:7d:21:
                    ea:57:5d:f7:c3:d4:d8:09:94:a0:46:24:3a:e3:ce:
                    eb:db:d0:c3:52:36:40:77:da:02:a2:41:59:ca:5a:
                    4a:0a:8c:d1:d9:90:b9:cc:27:71:64:22:02:8d:9a:
                    b4:bc:38:29:5a:94:79:ed:94:e8:a4:04:e0:0a:de:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7D:3B:09:1C:6A:CC:FA:C8:24:99:0F:F0:8C:E9:26:74:9A:9C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl

            X509v3 Authority Key Identifier:
                keyid:CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:3a:db:94:53:f1:e5:43:a9:2f:3b:84:ce:0b:9e:b2:b9:
         62:b0:be:af:b8:be:9b:e0:9e:ab:17:50:af:5e:28:f1:8f:f8:
         76:dd:47:f3:41:0f:11:1a:13:08:81:19:4f:cd:2a:ee:88:f7:
         31:84:d6:62:be:d1:6c:80:79:bf:0e:9c:e1:82:9e:b1:ae:8b:
         5c:ae:2b:db:e5:ab:83:2f:32:d3:a0:e6:a4:e1:58:10:80:d2:
         c1:ee:cf:6c:61:ea:31:13:f3:bc:be:3f:29:51:f6:73:16:b5:
         d7:68:4e:1d:79:53:fc:17:e2:45:5a:f2:b2:ce:0b:9a:d5:b3:
         43:b8:4f:e8:b3:b4:45:b9:15:db:fb:0a:9b:64:3f:96:9f:a4:
         e8:53:c5:b7:b3:ca:6c:d6:b2:4a:0b:cd:e3:dc:35:51:7c:88:
         8b:c2:33:60:c5:83:f5:c1:37:24:9f:4f:b8:84:5d:e5:ce:36:
         da:0f:65:cc:35:8c:eb:9f:4e:c6:62:4f:5f:ff:79:54:fe:79:
         c4:8b:27:15:a4:10:18:c1:8f:d5:48:b1:7c:9e:e6:c8:fd:22:
         ca:8c:83:ba:e4:97:b8:72:9a:81:00:b4:cb:35:a2:12:a3:4b:
         71:90:62:bb:22:27:50:83:d2:be:70:04:a5:3f:10:0c:3c:91:
         18:07:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:56:42 2024 by rpki-client on console-fra.rpki-client.org