Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa
File:                     1e5f12cb-e855-3565-b100-bec476c1f053.roa (raw, json)
Hash identifier:          FLdoNfhoUdvJe5MsMDbXLQC/eG1a8DhDERybNtoeuik=
Subject key identifier:   D8:FF:03:0B:F3:8C:CB:2E:5A:E3:DE:72:0A:61:88:98:BD:A0:8C:67
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858458573312BDFBE93C4586559C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     3223
IP address blocks:        104.243.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:31:2b:df:be:93:c4:58:65:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=c0824830-150d-4ae2-af8f-c520951dc378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:f7:06:18:a6:39:29:38:ab:25:5e:da:f5:
                    9b:9f:2e:56:6e:6c:3c:4b:b4:1e:b2:8b:a0:d7:17:
                    64:08:1d:69:9a:36:0a:a2:19:26:b4:f4:09:94:76:
                    06:c6:e9:37:51:31:27:3f:78:65:fb:4b:67:e9:cb:
                    cb:ad:af:f5:34:93:ab:08:13:f2:c8:41:44:57:b7:
                    96:27:7d:95:80:8c:1c:7d:a1:52:2a:60:5e:7f:9c:
                    9a:6d:49:1b:58:27:8a:42:6f:d8:7f:a0:58:68:8a:
                    4c:46:71:81:f6:31:c5:28:9a:54:e1:7d:fb:ed:40:
                    ad:89:df:9e:52:af:6b:aa:b7:ae:28:6b:f1:d8:f1:
                    a5:ab:83:d2:ed:1e:38:c3:25:54:f2:e0:d5:52:33:
                    6d:2d:a1:0e:76:02:9b:e4:20:aa:0c:4b:7b:47:98:
                    93:69:80:0d:32:38:4a:9f:6b:af:88:5c:66:0e:55:
                    06:8a:f0:b3:ed:76:97:1f:c2:84:d8:59:9f:c2:d5:
                    e9:81:f0:37:48:eb:9e:61:54:cc:52:95:d2:71:cd:
                    49:08:5d:10:be:aa:79:3e:a5:17:80:ad:87:dc:a6:
                    c3:cb:92:d2:79:3d:58:6c:40:16:c8:ac:ba:c8:33:
                    73:93:7e:c1:5d:bf:1a:27:38:9f:f2:3b:3a:5b:31:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FF:03:0B:F3:8C:CB:2E:5A:E3:DE:72:0A:61:88:98:BD:A0:8C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:1a:f4:37:5c:55:b4:07:bd:6f:3b:89:41:65:07:95:f8:
         5c:10:bf:e3:18:41:d9:6e:c4:fb:f2:c8:c3:3f:b4:5b:1a:e5:
         90:cc:a5:41:77:ce:96:bc:af:a2:15:d4:4a:64:df:dd:6f:5c:
         73:8e:e2:02:16:0d:6a:ef:23:2e:5c:42:55:af:38:f1:21:33:
         f2:7b:63:31:e3:2d:57:19:fe:dd:79:34:c7:76:af:3d:43:59:
         d9:ee:25:73:a3:22:2c:54:a7:9c:f7:2f:93:49:76:92:cb:a0:
         c8:aa:bd:13:2f:0c:ae:15:e4:4c:46:6d:7f:6e:91:94:cc:c0:
         48:ad:5d:1b:89:4c:87:6b:fe:20:94:c5:c6:d4:13:53:39:73:
         78:4d:06:38:0d:d3:44:79:6c:7d:f9:2b:7c:a8:74:7d:9b:31:
         cf:b9:d4:98:d7:45:5b:b1:57:c9:2a:7c:ad:93:4c:fb:f3:81:
         5a:d7:98:b1:8b:78:30:c8:91:1a:40:b3:ef:8f:1d:1d:36:0f:
         f8:67:c9:eb:e7:af:d1:ba:8a:9d:19:06:a8:a5:72:a7:e6:93:
         0e:e2:3e:ea:05:dd:76:32:e1:09:86:fc:e2:d4:a3:18:6e:d7:
         b3:3f:b4:25:0a:86:94:29:79:84:76:4f:2f:8b:39:ee:13:44:
         60:95:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:55:00 2024 by rpki-client on console-fra.rpki-client.org