Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
File:                     814253a9-9aad-32ad-b99c-4b4dc604402e.roa (raw, json)
Hash identifier:          qqAdIeuZSTZCAFQc+xfxayy/rgw0W4ZP3cUiNzjCOks=
Subject key identifier:   FD:3A:03:4B:BD:76:9D:33:67:68:0C:30:4D:19:0A:16:D7:28:DD:63
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F43285845D669083B07BC6D538682C0C0
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     151797
IP address blocks:        172.81.104.0/21 maxlen: 24
                          172.81.102.0/23 maxlen: 24
                          104.251.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:08:3b:07:bc:6d:53:86:82:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=6e2ac5c0-5661-4dff-b370-948a55ff8f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:b3:0c:0b:1c:92:8b:af:33:e6:61:c9:e5:
                    e0:b4:9b:70:ff:46:29:e9:43:7a:f3:24:6f:02:51:
                    4e:3d:5f:0e:8c:a2:36:e6:14:77:8d:8f:a7:83:38:
                    f2:d8:31:5e:7b:4a:28:b6:75:9a:63:5b:19:0e:b0:
                    a7:29:50:0c:8b:3d:68:f6:7c:19:37:72:33:18:65:
                    d8:e0:8f:c0:66:e6:a4:1f:47:35:0b:e7:0a:d5:16:
                    a9:e5:31:3d:b4:78:33:3a:ae:cf:6a:a2:28:44:78:
                    6a:65:1b:ae:11:b6:4c:e7:be:a1:2b:18:b6:48:b4:
                    13:30:90:ff:b1:17:ab:8c:d0:42:d3:ea:e6:cf:48:
                    03:fe:f0:3d:63:2c:13:d3:ce:8c:87:42:c6:02:2c:
                    0c:20:1c:fa:34:2a:28:8d:1e:d1:6a:09:a2:26:a1:
                    2b:cf:f7:20:36:35:89:f4:38:84:66:2c:a7:86:f2:
                    58:d4:81:0e:51:23:9f:f1:cb:84:7b:41:44:93:79:
                    0b:ff:a1:14:f5:90:9e:4b:3e:4e:ac:a2:35:8f:17:
                    ff:fe:66:a0:35:c8:e6:2c:14:a5:38:9f:70:f5:b8:
                    3a:ef:2c:9d:c9:e2:b0:6e:85:7d:ec:ce:c9:ac:8b:
                    f2:c4:8d:13:cc:c0:ab:24:16:f4:19:39:cd:42:ec:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:03:4B:BD:76:9D:33:67:68:0C:30:4D:19:0A:16:D7:28:DD:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/814253a9-9aad-32ad-b99c-4b4dc604402e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.224.0/20
                  172.81.102.0-172.81.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:92:c8:da:0c:0b:3e:d7:a2:b2:89:40:48:82:2c:7f:fa:
         03:d0:22:26:f1:e8:c4:66:3e:65:39:5b:01:2c:04:bc:b4:5c:
         ac:43:d0:65:13:14:91:8e:d6:9e:2c:dd:c5:80:1b:da:c2:9f:
         20:05:38:c2:12:a5:30:aa:ea:b5:5e:2f:4c:d3:5e:a4:32:d0:
         e2:60:3e:21:ac:fd:d8:0d:31:cc:10:ae:05:dc:e7:c5:b4:c4:
         5b:52:31:a6:78:e7:37:29:84:a6:e3:44:8f:57:0a:cf:4e:5b:
         1c:f5:cd:0a:7c:c9:dd:e7:d2:49:bb:b3:96:54:b1:c1:df:0b:
         f1:2c:5c:ec:bb:84:94:68:ce:71:72:9b:ab:d0:65:15:4c:70:
         f7:28:51:cc:25:8c:fd:e9:3b:b0:7b:f8:3c:cb:27:fe:4f:82:
         01:f2:e6:4c:f0:de:87:7f:0f:82:b8:45:cd:6c:56:53:1c:f2:
         c1:ef:cd:67:ff:53:35:0e:4e:dc:1a:e4:09:9a:bf:e6:e1:70:
         0c:1c:43:cf:a8:0c:87:f2:7a:51:45:19:e9:f0:d2:d0:06:2e:
         37:84:eb:08:83:81:74:c1:06:51:97:e1:14:5c:5d:46:12:97:
         b8:55:f3:f0:77:89:d7:68:61:e9:3c:20:c6:8d:e2:51:f9:06:
         83:be:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:16 2024 by rpki-client on console-ams.rpki-client.org