Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db2e39e-b19e-3c13-acdb-088e39220e53.roa
File:                     8db2e39e-b19e-3c13-acdb-088e39220e53.roa (raw, json)
Hash identifier:          EIS9z0kTZ4reKZ5heDDdrgnyxbDNc0fptZpNby72VCg=
Subject key identifier:   06:72:C3:A5:9A:6E:CC:B8:5C:4D:91:7C:A9:D1:B9:52:81:D5:4C:C6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583F2F56E326DE448CC28CCB0D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db2e39e-b19e-3c13-acdb-088e39220e53.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Sat 18 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        172.71.188.0/24 maxlen: 24
                          172.71.189.0/24 maxlen: 24
                          172.71.190.0/24 maxlen: 24
                          172.71.191.0/24 maxlen: 24
                          172.71.192.0/24 maxlen: 24
                          172.71.193.0/24 maxlen: 24
                          172.71.194.0/24 maxlen: 24
                          172.71.195.0/24 maxlen: 24
                          104.29.61.0/24 maxlen: 24
                          104.29.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:56:e3:26:de:44:8c:c2:8c:cb:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2027 GMT
        Subject: CN=ad4b990e-69b3-456e-8ea8-7f929287f583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:11:c1:d7:4f:f2:db:f4:67:f5:f9:54:5e:
                    c4:49:b3:af:ea:93:66:8d:96:0c:6d:78:c3:e6:e9:
                    8a:06:91:d2:ca:a6:9a:7f:2b:fe:2a:0f:23:af:30:
                    d5:52:26:c5:37:1c:b7:52:b8:6f:7f:d0:b2:cb:1b:
                    c6:ed:0c:5f:d8:44:46:a4:a9:c6:3d:86:72:52:1e:
                    70:8d:34:07:82:2e:7a:40:46:2c:f2:07:03:02:42:
                    b6:05:6e:6e:78:f8:41:b2:7d:84:83:5f:5c:e9:aa:
                    b6:7f:68:4b:0b:14:17:4b:fd:15:fb:57:9f:1d:6c:
                    cd:3f:49:fa:6e:68:ea:fb:90:4c:92:01:b0:fb:37:
                    37:f9:0a:2f:a1:21:e3:19:c0:fe:8e:14:17:a3:a7:
                    fb:50:9c:5e:48:50:b5:d6:37:51:d8:bc:02:ba:1a:
                    45:37:a6:85:ef:a7:79:2b:5f:d8:bb:64:b1:72:f9:
                    88:46:15:31:b8:04:f5:2e:01:ff:4f:5c:a6:06:71:
                    33:45:be:9d:b4:d6:a1:a7:c3:31:85:78:d8:98:f2:
                    08:8f:ec:d4:27:e2:83:e6:6b:a4:a5:d2:1c:38:c3:
                    14:37:5a:a5:63:32:20:1e:08:b4:67:1e:ab:bf:fc:
                    63:55:0a:79:4e:f5:a4:dc:09:12:d8:1a:05:ab:2d:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:C3:A5:9A:6E:CC:B8:5C:4D:91:7C:A9:D1:B9:52:81:D5:4C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8db2e39e-b19e-3c13-acdb-088e39220e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.61.0-104.29.62.255
                  172.71.188.0-172.71.195.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:20:a5:ec:74:b6:dd:b9:63:f7:36:8d:39:7c:43:2c:b7:30:
         d6:43:b5:b7:86:46:67:97:20:d3:a8:e5:a5:df:43:bd:eb:74:
         44:17:ca:50:07:06:84:34:43:49:df:8d:74:93:6f:57:4f:40:
         42:d6:f7:36:0d:17:21:5b:31:e2:ae:4d:37:20:ec:b4:c7:6e:
         1b:55:5c:eb:70:7d:11:08:51:69:88:62:25:da:c0:81:a4:f0:
         c7:47:4b:e3:dd:32:4c:31:71:79:95:42:a3:ec:ef:6c:32:ca:
         93:00:a8:b6:f8:0c:54:7c:82:e2:92:c0:80:16:36:40:c8:56:
         46:93:df:3d:37:bb:84:6f:2b:30:d2:d1:52:ae:f7:4c:8d:12:
         42:d4:bc:32:9d:82:96:4e:ac:4e:62:b3:1b:56:db:5a:a4:ae:
         f8:2e:f4:3c:82:f2:f8:91:50:bb:96:1f:21:28:d3:bf:3c:3a:
         2b:f4:bb:64:15:aa:fa:01:61:55:41:5f:42:2e:b4:3a:8b:43:
         16:e6:1c:f9:23:a2:2f:6d:51:e2:ec:eb:a1:f3:fb:81:bf:7a:
         2e:a7:7f:49:35:88:c7:52:80:ce:f9:5c:9b:ba:05:1f:9b:14:
         a1:07:6a:97:2a:4c:4e:a2:64:d0:0b:19:e5:a9:25:80:0b:10:
         a3:ba:95:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:26:02 2024 by rpki-client on console-fra.rpki-client.org