Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
File:                     5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa (raw, json)
Hash identifier:          3MRca+c1dhE8XTw7ZZkZffuW3yQhPMoRs1OC8QFr9vc=
Subject key identifier:   EC:D6:A1:82:0B:4D:AD:91:EF:A5:AD:70:1F:63:36:FA:76:82:D9:4C
Certificate issuer:       /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial:       010D0C9F43285845ECBE779082A7B5DCD10F3F80
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     63394
IP address blocks:        104.237.112.0/20 maxlen: 24
                          23.184.112.0/24 maxlen: 24
                          172.86.0.0/20 maxlen: 24
                          157.52.48.0/20 maxlen: 24
                          172.86.32.0/19 maxlen: 24
                          172.86.16.0/21 maxlen: 24
                          2605:e4c0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:77:90:82:a7:b5:dc:d1:0f:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=51254cb3-9e6b-4814-ae12-73d42e74a49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:ad:b9:ac:76:22:5c:f2:aa:ad:30:fe:8f:
                    45:0f:f3:30:54:42:2c:cc:2c:f3:51:93:9c:ca:90:
                    22:ec:3b:84:cc:ed:bd:aa:56:19:d0:10:49:fd:4b:
                    6e:ce:73:d9:75:73:2f:07:13:98:32:f6:74:75:b4:
                    c2:8f:f7:6e:9c:a6:b4:11:00:43:71:8b:e6:df:52:
                    d3:ff:4a:68:a9:c1:1a:3e:1e:10:94:ac:74:bb:70:
                    b9:1a:03:98:be:30:0d:21:25:cd:aa:1e:09:15:35:
                    d6:6f:b6:e5:68:fe:76:97:4c:bb:0d:f3:9f:67:fc:
                    9a:3d:99:7b:af:ff:f8:c3:81:ca:64:d6:55:eb:d7:
                    37:e5:1b:05:8e:b9:71:50:a9:2f:e2:62:0c:2f:65:
                    23:52:eb:c4:f6:91:16:da:2f:a8:38:5a:bb:2a:83:
                    bd:86:48:b7:6c:df:ef:74:ae:89:fb:40:a5:a7:61:
                    01:0f:a0:7b:09:42:48:23:e2:dc:27:77:62:ac:35:
                    ce:86:bd:d3:00:54:43:ae:eb:78:66:93:5d:c3:88:
                    bd:49:70:65:13:20:91:12:c9:b8:01:27:ad:d8:8d:
                    00:a4:9d:28:ae:32:97:eb:7f:7b:75:95:3a:eb:b0:
                    66:3b:7f:a7:0f:c1:4a:eb:00:a4:86:f8:41:3b:86:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D6:A1:82:0B:4D:AD:91:EF:A5:AD:70:1F:63:36:FA:76:82:D9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl

            X509v3 Authority Key Identifier:
                keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.112.0/24
                  104.237.112.0/20
                  157.52.48.0/20
                  172.86.0.0-172.86.23.255
                  172.86.32.0/19
                IPv6:
                  2605:e4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:81:0c:3b:81:d0:14:76:c2:b6:61:ad:64:d5:f4:b0:3c:
         13:af:99:86:41:26:69:21:a9:3a:e1:b4:44:15:17:b0:f4:63:
         d2:e8:ad:47:b1:a1:06:27:bc:44:69:75:ea:2b:33:23:99:44:
         ab:4e:16:7d:83:80:fa:bf:f0:4c:8c:5e:a0:c6:1b:17:8d:fd:
         d4:f0:92:b7:8b:35:de:99:e9:8a:46:b5:07:7b:7c:00:b8:87:
         a0:f4:ab:a6:14:a6:9e:f6:c4:e3:27:76:38:af:01:42:4a:e5:
         f7:53:0a:99:e7:1f:e2:52:b8:f9:ad:c1:7f:2f:c4:61:d4:d3:
         24:50:14:53:be:0f:90:45:16:2c:58:e6:b1:9e:af:f2:fd:21:
         0e:41:20:37:77:6e:ee:da:81:f5:ba:80:aa:53:09:46:1f:b6:
         a0:de:91:4c:a5:ba:be:f3:28:69:b0:0b:e5:d3:d6:d8:79:9e:
         08:8c:ce:26:a0:2d:33:41:66:6a:82:54:71:17:0e:b3:90:ae:
         09:cb:f1:31:e0:db:f7:dd:42:df:96:9c:2f:f1:cf:20:d3:c6:
         55:ac:b1:bc:19:ea:d6:2c:78:99:3c:b2:c7:67:8b:d5:00:66:
         87:28:7b:35:f9:19:26:5b:04:9e:3a:fb:51:86:1e:ec:59:01:
         22:9a:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:57:25 2024 by rpki-client on console-fra.rpki-client.org