Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa
File:                     2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa (raw, json)
Hash identifier:          iIW3n+Tk4/LRTX+4FDJgG9cLlYFSps/RoB+tE1oJC90=
Subject key identifier:   B9:D4:A2:B3:A6:CC:89:18:26:27:F1:54:AB:D9:DB:A3:33:EC:24:AE
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285847ED24B539CED7B5A792A82018
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     396998
IP address blocks:        104.152.140.0/24 maxlen: 24
                          134.195.42.0/24 maxlen: 24
                          172.111.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:b5:39:ce:d7:b5:a7:92:a8:20:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=0037f649-a76d-4316-be63-eaf1bec115ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:74:ff:52:c5:d7:4e:f2:80:cd:9a:a4:9b:
                    f3:30:0a:fb:7f:e5:6f:49:08:08:a4:a0:1d:a4:99:
                    c9:7b:d9:39:33:8d:3f:7b:eb:1b:8a:79:97:58:9f:
                    7e:ed:e4:c8:a3:e2:c8:40:fa:74:9f:56:0c:2e:57:
                    a3:58:17:3a:a4:51:f1:66:1f:22:88:e0:42:6f:65:
                    84:95:a1:8f:48:b4:a6:11:2c:11:a0:7c:00:73:71:
                    ef:cb:82:0c:d3:65:2b:1c:48:fa:b9:69:7a:28:4f:
                    8b:5c:69:9d:06:17:5d:1f:6b:da:85:82:f3:10:ff:
                    af:a5:4f:c5:0e:29:ba:10:65:03:18:33:42:a4:d6:
                    d8:92:8b:bb:79:39:62:58:bd:c8:f7:8d:db:05:c7:
                    68:95:99:c3:3b:92:7b:0d:1d:12:01:0a:af:ae:0b:
                    5d:71:e5:e4:4f:05:da:39:ae:35:62:91:26:2e:e0:
                    47:72:05:cd:37:7a:14:d8:cd:57:92:7b:25:4b:9b:
                    95:38:08:84:49:1b:53:f1:9d:9c:da:a2:45:8a:38:
                    73:de:33:0f:79:10:a9:50:ab:b0:f2:62:e4:3d:91:
                    82:d2:95:70:26:c5:45:43:43:1b:77:ac:89:fa:f6:
                    54:1c:37:98:8a:8a:d7:84:b1:e1:33:f7:46:ce:74:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:A2:B3:A6:CC:89:18:26:27:F1:54:AB:D9:DB:A3:33:EC:24:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.140.0/24
                  134.195.42.0/24
                  172.111.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d5:df:44:01:71:a9:6c:eb:91:b9:f6:d5:ef:b9:fc:96:ff:
         4f:6b:71:ff:6b:fc:52:d2:76:eb:54:43:70:8a:f7:15:d9:9e:
         3d:b0:21:64:15:26:ac:7f:49:8c:01:f3:f9:65:09:52:40:ab:
         5f:a2:c5:ed:2d:a4:d3:c7:bc:fe:e2:2f:3d:6d:0d:c6:27:66:
         ba:d5:7b:a6:e0:07:ce:f0:01:07:e3:26:da:e4:f4:fd:5d:c3:
         60:57:f4:81:54:87:92:c1:bc:0d:24:a4:28:fe:23:ae:d6:1a:
         5b:45:f9:47:a2:3b:40:d2:77:aa:20:fe:8f:c4:cb:24:7e:7d:
         21:09:35:84:a3:82:25:e5:5f:6d:db:94:87:59:5c:c0:eb:14:
         64:50:3d:07:4c:bb:18:40:2d:8f:3a:41:66:31:80:ce:29:0a:
         d1:c5:1f:29:ff:06:f1:e0:ec:2d:4d:5d:d1:20:18:4d:ce:c2:
         53:c2:3f:35:ff:de:ad:89:64:4f:b4:d1:71:cb:07:f2:e9:99:
         c0:6c:77:95:db:00:4c:8d:51:e9:59:1c:2e:53:5e:a7:16:b0:
         41:05:4f:23:51:00:b1:bd:a2:d3:47:73:d0:ae:cc:d5:18:e2:
         3f:0b:e2:84:cd:5d:36:97:7c:f2:46:19:ae:c3:e4:b4:e7:56:
         92:c2:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:38 2024 by rpki-client on console-ams.rpki-client.org