Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6a69686f-de80-323d-853f-71a22053c5f5.roa
File:                     6a69686f-de80-323d-853f-71a22053c5f5.roa (raw, json)
Hash identifier:          17SVONzBLXlv6vPbSYD2eLMbCnQdlyTfK8SvAnzNK4U=
Subject key identifier:   77:A8:0A:ED:06:F6:6B:C5:34:24:B7:7F:A0:35:5F:E4:93:4B:28:52
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583FD832BA9886C9DBFD57C079C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6a69686f-de80-323d-853f-71a22053c5f5.roa
Signing time:             Mon 07 Nov 2022 12:00:00 +0000
ROA not before:           Mon 07 Nov 2022 12:00:00 +0000
ROA not after:            Sun 30 Apr 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        104.29.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d8:32:ba:98:86:c9:db:fd:57:c0:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  7 12:00:00 2022 GMT
            Not After : Apr 30 04:00:00 2028 GMT
        Subject: CN=d3d0e8ee-b721-4a3a-bf62-55de15b53e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e9:c6:4a:d3:99:95:7a:b2:58:be:78:ff:05:
                    fd:c1:12:5e:6c:50:80:29:d4:8d:87:e5:10:50:c2:
                    f5:93:0a:19:de:04:a3:59:bc:f2:02:04:14:aa:05:
                    6d:21:25:7a:e1:b3:66:52:c1:9c:40:a7:0b:e0:9b:
                    a0:98:f7:46:85:9b:6a:eb:16:46:d2:89:25:8c:d5:
                    01:ed:c8:0e:87:e0:7c:b4:0a:98:55:fc:9c:62:4e:
                    0d:ed:ef:d7:b8:a1:f8:4a:96:37:fe:1b:2a:e3:7e:
                    05:6f:47:ce:90:41:2b:74:2c:7d:2f:d0:83:2a:99:
                    b2:7d:97:a6:87:25:e6:f9:58:35:94:28:62:41:f3:
                    00:64:4a:c2:90:7c:58:dc:ca:b6:48:30:e3:f9:c3:
                    6a:d7:f3:a1:00:a9:5f:30:4c:0f:8b:98:5d:d2:02:
                    d9:bc:28:ed:bd:d6:b3:bc:33:62:9f:8f:a8:a1:d1:
                    69:e3:c4:09:63:60:a0:2a:92:a6:e5:9b:a7:a0:b4:
                    cf:83:4d:7f:85:b4:3f:7e:5b:1b:04:77:2f:3c:6e:
                    1b:19:dc:64:a5:57:28:4d:9b:01:e0:35:f0:3b:84:
                    51:45:6c:40:dc:05:24:8a:e8:a2:17:61:e3:12:89:
                    9f:5e:d2:71:e6:93:ef:4e:15:bb:f5:f4:be:4f:bc:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A8:0A:ED:06:F6:6B:C5:34:24:B7:7F:A0:35:5F:E4:93:4B:28:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6a69686f-de80-323d-853f-71a22053c5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:c1:5e:2b:df:f7:f5:3b:f1:85:3c:4f:eb:56:0b:ad:bd:
         0b:95:35:55:6d:02:d1:14:8c:6f:79:a1:5d:65:b7:cc:53:7b:
         02:44:e3:a4:c5:66:87:c9:cf:04:82:57:78:3c:60:e1:73:4e:
         3d:a2:87:db:7c:9c:12:74:9d:78:4e:aa:f7:67:b6:6b:37:4a:
         57:3a:fb:77:49:26:38:5b:52:74:f2:50:93:15:5a:a3:76:0e:
         84:cf:93:7c:f8:a6:f7:22:3e:68:10:28:c7:de:1f:4c:46:ee:
         05:5e:b7:52:4b:d9:24:48:c2:e1:33:39:ba:a3:6a:6e:84:cd:
         ca:ee:27:25:d2:5a:1d:07:03:23:31:36:bf:e8:21:4a:80:85:
         09:47:f5:43:32:b4:5f:59:6a:2a:3a:53:a9:87:aa:b3:38:7a:
         d3:d2:4c:6d:d1:c8:7c:40:78:ed:75:e5:7d:4f:8b:ce:cd:6c:
         cd:56:9f:f8:15:6d:10:9a:e7:19:20:84:72:fb:ac:50:3c:64:
         39:3f:66:04:92:e0:ba:e7:ff:64:a7:7a:33:67:b2:03:bc:44:
         52:fc:5a:0a:58:d3:22:d5:e4:55:06:0a:1e:9d:43:d6:36:3e:
         72:cc:d3:63:0e:bf:1b:53:16:04:63:c9:f6:9f:5d:80:8f:e4:
         48:d1:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:48:07 2024 by rpki-client on console-fra.rpki-client.org