Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
File:                     17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa (raw, json)
Hash identifier:          yH4t/MHSCToWbecdzQZL/tYD79sDiNYDZBVkEfle0iU=
Subject key identifier:   F5:C3:82:93:C0:BA:10:4B:FC:9A:AB:54:08:B1:11:2E:D5:A2:8D:44
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F432858476E00EB0E6E6D64EF75379580
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     8796
IP address blocks:        104.143.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:eb:0e:6e:6d:64:ef:75:37:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=970eb533-81c4-4c9d-a40d-2accf5fa4ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:96:21:b0:a8:56:c0:82:a8:43:d5:83:26:
                    10:33:c6:84:22:3b:d2:56:28:4e:d7:bd:45:3d:5f:
                    3b:af:ef:c9:8a:2e:9e:c0:60:d7:f6:05:c0:4e:26:
                    f2:b8:32:bc:a0:18:81:26:2f:65:8b:f9:2f:26:f5:
                    d0:e7:76:0b:60:e4:e4:bc:16:e6:db:35:7a:6a:b9:
                    4f:3e:8c:0e:31:77:86:e5:6a:df:0e:88:8a:48:f3:
                    c6:fe:87:d3:94:87:68:f5:0c:65:92:8c:e2:73:ab:
                    45:92:ab:ba:00:e3:ec:be:92:79:9d:91:ef:da:36:
                    af:6d:78:56:00:74:87:cf:51:29:fa:5d:5a:e8:be:
                    3f:2f:9d:0c:a2:3b:64:ce:69:e2:ea:82:21:ac:f4:
                    98:04:a3:15:10:3c:4b:a0:9c:0b:62:57:73:7b:3f:
                    6e:d9:47:7e:8a:8f:59:f0:0a:c5:74:5f:7d:7a:de:
                    86:1a:e7:85:16:89:b6:fc:1e:7e:17:91:a8:fb:f3:
                    98:d0:ea:df:a5:d0:f1:17:3c:60:60:0a:d8:09:7c:
                    aa:f6:fc:20:2c:1d:8b:d1:78:f2:55:3d:77:ad:d1:
                    87:53:bc:b0:89:ab:d2:57:06:31:e5:d6:cb:83:97:
                    91:d9:60:85:da:fc:ad:8d:e1:53:0f:1b:00:da:6d:
                    99:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C3:82:93:C0:BA:10:4B:FC:9A:AB:54:08:B1:11:2E:D5:A2:8D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:b0:39:25:70:97:5c:e0:ba:78:66:85:02:6d:d9:7b:da:
         90:a5:3f:f5:37:60:60:a8:5e:87:48:19:0e:06:06:d2:0f:fc:
         a9:88:33:1c:70:2c:f1:c8:65:de:44:d4:70:7b:87:0c:49:9a:
         d8:83:db:33:14:2b:95:73:ea:fb:ca:8b:09:0f:db:f3:51:72:
         99:b4:de:01:4c:6f:88:b3:3e:7e:f0:aa:10:30:af:54:18:be:
         56:1c:f9:4a:52:a6:71:98:95:11:0e:5e:ab:7e:bf:98:4e:d1:
         8e:6a:63:b2:de:8b:8f:a6:03:dd:d4:9c:56:40:09:cb:f3:87:
         60:09:ad:06:72:54:65:c3:cf:43:9c:ad:7a:b2:38:4c:c4:39:
         1a:40:3d:11:d2:ec:d9:36:cd:2b:c1:3f:ba:c0:37:52:ff:a9:
         b9:9f:52:f8:1c:15:5d:be:a9:ac:d1:95:1b:1b:12:d8:26:b9:
         85:b3:06:4f:dc:68:38:bf:6c:88:9f:48:38:8b:29:41:41:ec:
         ea:bd:52:db:6b:d9:d9:d0:61:d8:d4:6c:c1:3a:40:a6:84:52:
         20:c6:2b:e7:6a:37:bd:26:02:b3:76:5f:94:a5:ab:50:16:c3:
         45:5d:19:aa:e4:ed:84:e1:e6:87:60:84:d3:e6:69:a4:90:64:
         1c:e2:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:23 2024 by rpki-client on console-ams.rpki-client.org