Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a80e01d-20bb-301b-87c8-efc9a086643a.roa
File:                     7a80e01d-20bb-301b-87c8-efc9a086643a.roa (raw, json)
Hash identifier:          adCTBpE1Bf7rLF2Kr59lqt82lWugtXv9jLOgoNQ2Kgc=
Subject key identifier:   FD:4B:BF:2D:3E:91:13:7A:C3:6E:47:F5:CF:7D:E0:F6:E2:38:6C:83
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583F3DCB3FCE5CA38968A852D240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a80e01d-20bb-301b-87c8-efc9a086643a.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Tue 25 Apr 2028 04:00:00 +0000
asID:                     13335
IP address blocks:        104.29.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3d:cb:3f:ce:5c:a3:89:68:a8:52:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2028 GMT
        Subject: CN=af4ae760-eb30-406f-83ea-681e8264b9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:9c:47:22:3e:15:4e:bd:5c:5b:70:42:ca:
                    4b:99:b2:9e:24:90:57:a6:97:f9:84:ee:6e:df:75:
                    67:2e:7d:4a:cc:63:0f:64:b8:68:0e:4d:bc:cd:a2:
                    a7:de:98:1d:c0:33:49:36:d4:27:d1:03:1e:54:cc:
                    c6:b7:ed:55:08:2c:c9:56:d2:b2:68:bc:ee:94:01:
                    df:5f:10:5b:da:30:8e:a0:80:04:65:1f:31:9e:55:
                    a6:c5:9a:2e:69:8c:ea:11:39:f0:12:86:98:13:00:
                    b0:88:37:bc:5d:78:78:e2:9e:89:3c:6d:87:d0:e6:
                    70:20:37:2a:b7:55:85:bd:8d:88:c8:7a:32:68:90:
                    92:ff:43:ef:ef:09:66:32:99:de:0d:7f:9b:32:2c:
                    09:a7:83:d2:ba:24:c2:07:e6:04:ad:21:51:e9:dc:
                    74:af:d9:20:19:6a:8d:9d:e8:f7:18:b9:e5:ca:bd:
                    d1:1d:6a:b7:96:bc:e9:2e:4d:5f:6a:65:60:f5:b1:
                    1e:63:61:ec:9b:19:10:be:77:8c:32:3b:64:20:e5:
                    28:bc:85:66:0a:2b:4c:d7:f8:be:61:2b:1f:33:16:
                    94:6f:c3:a6:7f:84:fe:db:e9:ff:95:1e:46:1d:3b:
                    14:4f:f5:8f:84:45:e4:e1:f8:89:bb:81:24:86:b9:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4B:BF:2D:3E:91:13:7A:C3:6E:47:F5:CF:7D:E0:F6:E2:38:6C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a80e01d-20bb-301b-87c8-efc9a086643a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:25:fa:d3:cf:53:15:cc:5a:58:f7:14:1a:57:78:8c:2a:36:
         1b:9e:1e:35:ef:d9:9f:ac:50:bd:7b:2c:f5:4b:fe:72:78:dc:
         19:be:ad:d5:db:dc:04:85:1d:ca:99:76:85:61:8b:42:a2:a7:
         a1:d8:45:63:c9:66:f0:5c:a7:39:d9:41:59:24:41:c5:73:11:
         62:2f:84:f5:a3:14:b4:fe:3d:9e:65:f1:b1:b4:91:f4:39:7a:
         a1:71:54:5b:4d:d0:bf:3c:d6:c5:a0:41:81:f0:75:49:e8:d6:
         4a:7b:12:a0:e6:c5:47:c1:3e:39:65:31:a9:6f:c4:4a:1f:76:
         fd:c0:a0:c8:df:68:ba:20:8c:8b:49:46:db:a8:ff:9d:ab:02:
         04:40:5a:09:fa:2c:c2:7d:31:28:a2:54:6b:6f:cd:35:fb:cf:
         86:10:b1:f7:6e:50:c9:cc:ef:0c:9d:1e:eb:37:fc:58:96:4a:
         7a:98:67:c6:e7:ab:dc:ea:de:b0:f6:80:66:e1:1d:a6:19:15:
         66:a3:9c:6f:2f:97:02:4f:1c:d0:8e:97:96:cb:5e:e8:c4:28:
         77:a9:11:18:56:40:70:48:44:40:53:80:fc:02:2b:9d:9b:29:
         17:f0:16:3b:bf:54:ba:2b:84:17:4d:3c:03:d6:54:bb:05:02:
         d0:a2:55:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:30:13 2024 by rpki-client on console-ams.rpki-client.org