Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa
File:                     e465363d-6fbe-3665-ac6a-c10d319a38ee.roa (raw, json)
Hash identifier:          u0kixgcDcFtd1f1QwMbeFHC46eorrRWnC4uk3yAlgg4=
Subject key identifier:   76:40:13:DC:32:E1:05:D3:CF:67:06:82:F5:B7:31:FB:85:66:64:47
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F43285845628D89B287AA68037F09CC80
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:89:b2:87:aa:68:03:7f:09:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=bd1af88f-5987-462a-a42a-e7c3e75dfd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:58:6b:43:05:f2:3f:c1:02:d0:fb:75:17:96:
                    31:c9:bd:07:6d:41:0d:83:6f:0e:45:13:75:e5:e3:
                    97:07:3d:98:9a:9f:b4:60:06:02:43:d7:0f:36:8f:
                    0c:62:7b:5a:bf:b1:c2:11:fa:aa:2d:55:eb:8a:70:
                    95:03:5d:d6:f9:00:cb:97:c0:7e:ae:32:91:0b:3b:
                    4b:1b:04:33:ef:fd:bd:05:a7:85:9f:ce:91:f6:8b:
                    1f:ed:ac:43:ce:99:27:a2:6a:57:bb:0e:42:81:e2:
                    07:9d:06:b8:17:c9:71:87:fa:de:7f:28:6d:7c:29:
                    26:0e:f0:44:ef:27:77:ec:f1:e1:c9:f7:49:ab:1b:
                    e1:f3:5d:f3:e5:f9:11:44:77:45:12:4a:1c:2d:d1:
                    ea:ed:e2:9f:e4:10:e6:db:71:c0:04:f6:c0:9c:f4:
                    c6:e7:f3:bf:4a:22:58:ce:d8:76:e9:da:58:58:b5:
                    e6:cb:b3:01:51:35:3e:8c:e2:35:0a:b1:da:43:ac:
                    6d:c2:a5:44:b6:cf:dd:a2:ea:d6:ed:47:9d:44:6f:
                    28:dc:7a:57:d0:4e:8f:4d:bb:e0:1d:84:46:c1:67:
                    1c:11:05:da:cf:84:df:d1:44:38:11:d2:fc:14:0e:
                    a2:30:90:21:8a:9f:9e:3c:cd:8e:2c:ba:e3:d1:c7:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:40:13:DC:32:E1:05:D3:CF:67:06:82:F5:B7:31:FB:85:66:64:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:09:ec:aa:95:f7:92:3a:f5:77:d5:07:1f:07:69:bf:e6:d5:
         9c:e7:f0:c6:d1:d2:bf:f8:f4:d8:ad:0a:aa:98:c3:88:ee:c9:
         8c:4d:b2:7a:71:c6:f0:89:9a:5a:2e:0a:1c:3e:84:0e:79:cc:
         12:5f:1b:03:60:c2:23:1c:4d:16:ce:32:b2:85:98:40:ea:f2:
         0c:22:b2:60:2d:6f:1b:90:ac:ad:07:72:f5:bc:1f:67:2c:a4:
         89:e0:2f:d0:34:b0:a2:cd:1c:1e:8b:69:23:c4:ee:e8:fc:9b:
         7c:d4:21:cd:4a:78:0d:f9:dc:82:54:6d:5b:10:1a:30:b1:1a:
         a4:51:12:99:e4:7e:a2:10:ac:a8:3a:e3:4a:7f:d7:80:1d:51:
         df:ce:45:4e:28:bc:a6:2b:d3:dd:41:d7:53:00:7d:a5:c9:17:
         09:3e:e1:bf:f4:fa:7a:05:57:ea:05:a0:66:40:32:11:f4:dd:
         44:5c:4b:5e:be:e2:6d:0f:89:d9:a8:90:8d:76:db:d5:67:4f:
         4c:ea:7d:4f:05:ce:f5:eb:0b:9f:d6:cd:9b:44:da:24:7b:d4:
         26:d0:ff:e8:70:b0:a9:9b:32:dc:f6:0a:07:9c:9d:4b:5f:b8:
         23:1f:59:4c:7c:6e:23:c3:1f:ce:0a:0c:78:f7:bd:6c:72:4e:
         ba:12:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:53:24 2024 by rpki-client on console-fra.rpki-client.org