Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa
File:                     303ae16a-2367-33ca-92f7-16ee2a181db7.roa (raw, json)
Hash identifier:          M4s9ExZc6kbksVj8DQOsxcE++PSrBgA/Y4E7YU9fPkA=
Subject key identifier:   E7:3E:88:FD:BB:41:C7:A1:D0:85:CE:72:59:8A:49:18:9E:E9:93:86
Certificate issuer:       /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Certificate serial:       010D0C9F43285845B4E8DB7785466AA379167500
Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     147314
IP address blocks:        104.193.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:db:77:85:46:6a:a3:79:16:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=0d3b1c5a-8dbb-45f6-90bc-f8b49221e5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:e3:65:6a:fa:13:dc:e7:a9:b8:ee:cf:0a:
                    bf:c2:ec:ce:90:78:ba:c7:3e:2e:2c:61:34:0f:f7:
                    7e:5e:33:d1:06:5f:f6:f1:ef:a0:36:17:36:b0:92:
                    c7:c0:48:d9:77:ea:76:94:2a:73:0b:8a:e4:5b:c2:
                    cc:12:84:00:ad:87:1f:89:26:da:51:19:f6:aa:81:
                    a6:70:f5:f3:d7:3e:59:fc:dd:31:b0:04:fc:dc:b8:
                    ef:7c:81:b4:d1:df:1f:a9:1e:72:2e:af:45:64:22:
                    bd:63:37:9a:f8:94:be:f4:72:9f:e6:50:f9:5a:a3:
                    5c:d4:7d:7c:87:86:5f:73:71:69:d5:30:7c:0e:79:
                    d2:97:ea:94:95:1b:05:91:49:5c:ad:b4:83:cc:ab:
                    22:73:dd:70:a9:5d:30:f2:35:18:f0:8c:de:81:d4:
                    9a:cd:c1:aa:e4:34:e2:03:99:33:b4:58:36:4d:a2:
                    9c:c2:59:2b:4e:49:90:e7:b8:9c:35:69:3c:29:2f:
                    3a:2a:f0:80:67:42:70:63:b4:6f:25:cb:1b:73:b9:
                    e2:14:3e:72:93:54:db:a6:1c:02:4e:0c:0d:45:83:
                    d8:38:30:c8:1e:55:d5:84:7b:2c:c2:15:90:fb:8d:
                    31:e7:34:63:41:e9:2f:cc:71:55:90:07:87:59:ae:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3E:88:FD:BB:41:C7:A1:D0:85:CE:72:59:8A:49:18:9E:E9:93:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl

            X509v3 Authority Key Identifier:
                keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ed:5b:1d:38:53:88:e3:f1:92:31:a4:17:07:6b:c3:fc:ab:
         21:aa:5f:e0:e8:0b:dd:48:8b:95:3f:93:c3:8e:fa:4d:0f:4b:
         d1:44:e8:3b:61:a5:13:be:7f:42:2e:05:76:a2:2f:65:28:7e:
         2a:75:ad:31:54:6d:3f:ac:14:39:fa:a6:85:64:db:7e:63:05:
         52:b3:bd:70:77:d0:4e:42:2a:42:e8:e8:45:04:64:52:bd:c1:
         8b:53:bb:33:17:93:fe:bb:41:85:9a:e8:e9:2d:ea:0f:1a:c9:
         6b:52:99:29:78:b6:1f:c5:ea:a0:ca:84:9d:1f:95:d5:3e:ad:
         05:be:b9:cc:ac:f7:52:38:1e:7d:a1:7b:04:f9:36:8c:d7:a2:
         52:94:1f:49:b5:df:8f:63:4d:28:4a:35:ec:fa:a5:43:df:ee:
         6c:39:38:77:4f:72:dc:23:74:c4:af:0e:39:90:de:ec:96:4c:
         13:53:28:e7:80:f9:99:a3:72:08:d2:e2:41:e1:da:1c:ad:c5:
         cd:3d:4b:56:10:9d:2c:3f:ed:d4:19:48:7e:99:ee:d5:0d:99:
         19:02:7b:bf:07:7f:49:77:fe:31:12:14:2a:1c:d2:c2:fc:a1:
         88:d7:10:03:fa:da:f8:8d:6e:40:2f:8a:97:ed:13:04:ee:a8:
         7e:78:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:40 2024 by rpki-client on console-fra.rpki-client.org