Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa
File:                     6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa (raw, json)
Hash identifier:          JLFS0PRbPDkt4k3gRu281kEwUHa8X5X/qkcyPpBgtZo=
Subject key identifier:   49:C8:0C:CB:AB:A5:CC:BB:CD:23:1C:66:81:DF:7A:9B:70:AA:71:3F
Certificate issuer:       /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Certificate serial:       010D0C9F4328584754E0BFD0CCEA484F592A5C40
Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     59362
IP address blocks:        104.193.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:bf:d0:cc:ea:48:4f:59:2a:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=5b660b0c-207b-4f93-bb08-10213c0ed8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:a8:57:7f:95:85:a7:8f:67:84:3a:3b:5a:
                    66:33:30:ee:e7:66:75:ec:f4:54:30:c9:36:17:80:
                    f9:02:3d:fb:1b:16:6b:a5:72:5e:b7:73:02:84:77:
                    3a:4f:cb:40:64:5a:b9:02:aa:d6:3d:6d:d9:e5:ac:
                    3c:b4:0f:b3:9b:91:ff:3e:91:db:ab:fd:e7:3b:d4:
                    fa:a6:03:59:47:ab:8d:f1:dc:92:a7:7f:ea:44:d4:
                    5e:5f:e3:9e:0d:7c:a5:8a:32:4a:c3:3a:82:48:61:
                    5b:b5:c6:e9:fa:7b:c1:ac:9d:0b:94:c8:44:d3:bb:
                    48:dd:33:08:6c:8e:f4:b7:22:4d:6b:1c:76:d3:ba:
                    56:81:94:33:0a:e9:fd:08:bd:f5:cf:31:0b:b5:93:
                    94:48:b7:cd:f8:54:8f:43:08:fb:23:63:0b:da:3d:
                    dc:78:02:78:99:51:0e:cc:c0:e3:0c:1d:9e:cc:f8:
                    89:d4:e7:b7:2e:86:5e:6f:bb:59:35:7b:34:53:ec:
                    9e:7d:3b:67:d6:0b:19:2f:3e:44:da:9e:e1:fa:0a:
                    93:29:62:15:bc:87:f3:a6:1e:74:eb:04:a3:27:ae:
                    8f:32:4c:22:a6:0c:dc:aa:e6:0b:69:95:b9:50:3f:
                    d5:ef:78:7f:38:34:a2:da:85:2c:e6:85:66:94:4d:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C8:0C:CB:AB:A5:CC:BB:CD:23:1C:66:81:DF:7A:9B:70:AA:71:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/6dfcd7af-de21-3ba3-b413-81d0d31cac48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl

            X509v3 Authority Key Identifier:
                keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:54:34:ec:c5:39:96:18:6d:ad:98:52:7e:d3:01:76:4c:f1:
         39:79:2a:23:4a:a5:cb:c5:39:b6:9e:66:10:16:17:15:09:e4:
         58:85:e3:28:c0:f5:0f:e7:05:7a:43:b6:94:cd:52:41:ec:ab:
         39:9c:1a:d8:44:54:f7:f9:db:d9:53:58:9f:6b:35:7a:79:71:
         71:9c:0e:46:77:93:0c:91:5a:83:14:9c:10:84:f9:57:54:1a:
         37:24:b9:69:90:98:33:7a:f7:e8:7b:1f:16:86:e7:97:9c:e1:
         14:c3:48:92:55:43:f0:f8:68:20:89:99:0d:84:08:bc:5c:32:
         42:c1:40:a2:5b:24:ef:f4:97:a3:72:36:8b:2d:65:dd:49:ce:
         d9:70:e5:77:75:5a:81:5f:3b:b8:e4:14:e7:12:f5:ff:8c:ad:
         a3:30:1c:55:49:ed:df:5c:ac:13:2d:42:27:8a:35:b5:1c:b0:
         1e:aa:6d:a2:74:da:73:91:e2:7b:1f:9b:d2:22:e5:7c:7f:c4:
         bf:e9:7d:a2:23:ee:39:17:b6:a7:81:ce:14:3b:2b:81:69:1a:
         27:ad:c0:8c:e1:25:ea:03:03:42:36:70:56:f0:ec:cb:dc:6b:
         52:a0:75:0a:4f:9c:91:39:21:eb:73:8e:27:53:7a:b2:8b:ec:
         59:f7:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org