Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/ec06da48-9eba-3a74-8791-86a6bee04398.roa
File:                     ec06da48-9eba-3a74-8791-86a6bee04398.roa (raw, json)
Hash identifier:          qTjMI1HBKBihXK+ot63sRSTGNsP9is1IbxWPzbaEJ/o=
Subject key identifier:   FD:D8:B4:FC:40:69:D9:6D:D1:4F:AB:81:ED:A4:C6:E1:FB:EC:2D:8E
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F432858452952960C455CE49DCC078200
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/ec06da48-9eba-3a74-8791-86a6bee04398.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     53334
IP address blocks:        104.153.198.240/32 maxlen: 32
                          104.153.198.241/32 maxlen: 32
                          104.153.198.222/32 maxlen: 32
                          104.153.198.254/32 maxlen: 32
                          104.153.198.230/32 maxlen: 32
                          104.153.198.226/32 maxlen: 32
                          104.153.198.223/32 maxlen: 32
                          104.153.198.250/32 maxlen: 32
                          104.153.198.251/32 maxlen: 32
                          104.153.198.252/32 maxlen: 32
                          104.153.198.253/32 maxlen: 32
                          104.153.198.229/32 maxlen: 32
                          104.153.198.231/32 maxlen: 32
                          104.153.198.232/32 maxlen: 32
                          104.153.198.242/32 maxlen: 32
                          104.153.198.243/32 maxlen: 32
                          104.153.198.244/32 maxlen: 32
                          104.153.198.245/32 maxlen: 32
                          104.153.198.237/32 maxlen: 32
                          104.153.198.238/32 maxlen: 32
                          104.153.198.239/32 maxlen: 32
                          104.153.198.233/32 maxlen: 32
                          104.153.198.234/32 maxlen: 32
                          104.153.198.235/32 maxlen: 32
                          104.153.198.236/32 maxlen: 32
                          104.153.198.246/32 maxlen: 32
                          104.153.198.247/32 maxlen: 32
                          104.153.198.248/32 maxlen: 32
                          104.153.198.249/32 maxlen: 32
                          104.153.198.227/32 maxlen: 32
                          104.153.198.228/32 maxlen: 32
                          104.153.198.221/32 maxlen: 32
                          104.153.198.220/32 maxlen: 32
                          104.153.198.224/32 maxlen: 32
                          104.153.198.225/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:96:0c:45:5c:e4:9d:cc:07:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=952f1bc5-04a4-4cc1-af70-bd31cc7ef9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:e6:2b:09:ab:f2:5b:b4:2a:ac:62:46:2d:
                    10:89:56:5a:a2:2d:0d:58:18:ff:6b:c6:ac:d3:a3:
                    f4:67:90:93:7c:36:2e:3e:33:77:9f:1c:2b:d5:65:
                    f9:0a:7e:4d:06:9c:b5:52:36:88:cd:3b:c2:af:ee:
                    6c:ff:1c:10:f2:67:84:65:13:df:48:fa:b7:dd:ae:
                    de:1b:83:c3:89:1f:3e:2d:c3:45:d2:25:4f:01:5b:
                    2e:26:dd:b3:2f:a7:70:34:87:74:70:a0:35:8c:d0:
                    e9:fb:51:f4:10:55:f8:a4:50:f5:99:cd:89:bb:9d:
                    3c:9f:95:34:e5:c6:86:37:d6:14:d3:02:22:d5:8a:
                    ab:03:e5:fc:27:a5:f8:5b:e7:38:5e:b8:55:3c:42:
                    47:41:c0:0e:66:c3:a9:31:75:cc:e4:d4:ad:3c:6c:
                    3b:cf:c6:b4:b6:87:f4:5f:3b:18:12:45:eb:2e:a2:
                    ff:4d:c1:cd:72:b0:b0:d4:48:94:8b:e3:dd:01:3b:
                    50:af:05:62:42:a1:4e:af:58:d5:73:0e:11:8f:84:
                    ca:5c:0f:5a:a1:66:d1:55:e0:f2:37:96:d7:86:78:
                    9d:22:91:1a:58:b1:ff:be:c9:35:da:87:1a:37:3b:
                    7f:9d:19:19:28:a6:82:74:57:37:24:8e:e8:1d:40:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D8:B4:FC:40:69:D9:6D:D1:4F:AB:81:ED:A4:C6:E1:FB:EC:2D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/ec06da48-9eba-3a74-8791-86a6bee04398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.220-104.153.198.254

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:76:8a:a0:cc:8a:93:5b:2a:a2:2f:98:ba:c2:d7:b5:2c:03:
         4e:22:3d:87:d2:49:3e:7c:19:2c:c7:b1:e8:9d:23:74:b6:e8:
         96:8b:1f:7f:d6:82:8e:35:46:25:09:95:ec:e3:17:f9:8a:c8:
         7d:95:54:73:de:7d:f1:0c:26:94:c5:75:64:c4:42:e9:07:2f:
         2b:e9:2e:a8:b2:c1:4c:20:bc:43:e0:3b:e4:5c:bf:a1:8a:9e:
         e7:45:29:d8:a2:0e:e0:75:58:84:6c:f8:e5:3a:53:a8:52:dc:
         68:02:e6:bc:41:d7:01:5d:c5:96:d8:a4:5b:0c:7f:b0:53:7f:
         53:f4:18:c8:2b:e3:28:f1:0f:f3:7c:b0:96:55:b0:f0:a3:be:
         27:92:b7:1e:f8:15:d1:be:eb:6c:5c:8e:ca:95:84:62:d2:1c:
         22:99:2a:a0:79:a6:56:b0:e8:e8:28:cc:cf:22:4d:89:51:cc:
         a5:0a:9c:a0:b7:8d:a0:78:a6:35:38:24:ba:83:b0:39:69:b6:
         94:ee:38:9a:6a:db:8a:25:bc:55:33:73:3f:fa:f5:6b:46:de:
         0b:52:c7:b7:24:d9:0e:18:81:92:d2:3b:52:07:b7:56:ec:42:
         f3:bf:cd:2b:61:3b:1f:15:22:9c:7c:82:f2:17:c2:6a:3a:08:
         07:27:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:39 2024 by rpki-client on console-fra.rpki-client.org