Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa
File:                     a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa (raw, json)
Hash identifier:          mprsXfF6rj6U3d50eye6mkZgy91XPj3Qj2eDRI0BpVQ=
Subject key identifier:   3B:99:2A:1C:2D:37:04:48:4E:B4:10:8F:8C:4F:5F:ED:4B:6A:73:C1
Certificate issuer:       /CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
Certificate serial:       010D0C9F43285845963364EC93D6771B06498A40
Authority key identifier: 76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     14588
IP address blocks:        104.219.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:64:ec:93:d6:77:1b:06:49:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=814e33ce-7483-4e73-947c-f761005536d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:1a:59:8c:ea:ee:27:40:e7:f7:85:7a:e0:
                    63:c8:57:10:39:87:d1:e8:8d:4d:62:40:57:d3:06:
                    c6:33:20:8d:24:23:ef:32:e8:ef:59:36:3e:08:f8:
                    6a:f3:90:e3:69:1e:0f:eb:d7:6e:3a:da:f3:cd:de:
                    24:aa:7e:cd:44:61:a7:b2:5a:ce:66:d2:a6:29:fc:
                    63:d7:42:6e:a2:7d:e6:d3:fa:50:b5:57:70:b0:ce:
                    5c:14:61:db:d4:24:d3:43:aa:52:5e:c1:fe:93:d7:
                    6b:7f:1d:19:be:ff:1b:b0:ac:0f:81:1c:8c:6d:b8:
                    8e:13:13:f8:84:01:65:57:45:0c:9c:66:09:43:84:
                    62:74:75:0e:51:32:1d:ff:c6:83:44:7d:f2:36:05:
                    c4:6e:b2:4f:16:fd:44:d4:69:e8:1e:ab:a4:30:8d:
                    55:3b:97:dc:4a:7d:99:70:6f:a0:ef:99:2d:e3:4b:
                    94:73:8f:c8:47:11:f0:6a:26:07:58:90:f3:36:24:
                    ec:71:71:59:7a:68:3f:38:7d:4b:08:5b:38:c6:d4:
                    45:51:0b:b7:89:2e:f6:9c:25:27:43:7f:cd:3c:75:
                    d4:9c:56:cd:c7:1c:15:d0:2d:5b:bb:3f:63:19:52:
                    74:89:cf:ca:ab:bb:86:96:78:61:a4:1c:d5:58:d7:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:99:2A:1C:2D:37:04:48:4E:B4:10:8F:8C:4F:5F:ED:4B:6A:73:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl

            X509v3 Authority Key Identifier:
                keyid:76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:dc:90:5c:be:67:de:e8:b9:4c:52:5b:94:85:6c:46:bb:
         50:ee:44:b4:8a:85:09:7e:73:35:04:54:40:b0:98:af:b5:eb:
         6b:e5:ef:da:39:45:68:5e:f8:3e:90:0f:1b:75:22:c7:00:96:
         4c:bf:cc:c8:65:17:fe:fe:ff:77:22:34:65:0c:28:f2:4d:ce:
         8e:b9:24:a7:00:59:d8:6f:38:78:3e:fc:e2:b9:c3:65:7f:46:
         72:bf:96:b3:7c:27:7c:6a:56:57:f7:77:ff:35:aa:f8:d5:21:
         11:ff:a1:f3:16:27:5b:a3:af:e0:04:20:da:67:fd:b8:7e:58:
         16:1f:33:4c:a7:b0:0d:74:f9:92:00:69:1d:1e:aa:61:1e:67:
         27:b2:4f:f4:2c:71:00:a8:9d:ba:0f:d7:15:7f:9d:49:04:c6:
         aa:32:c5:37:e1:e8:8f:6a:9e:12:1f:03:55:88:2f:88:d0:1b:
         9d:31:af:91:6c:93:a9:10:77:be:cb:c6:81:0e:c8:59:71:95:
         98:7b:62:39:5d:0a:88:b4:c1:43:37:a6:3e:d1:d3:65:a1:0a:
         60:cf:ef:74:b5:3c:bd:fa:08:29:15:87:2f:6c:42:47:15:8d:
         20:52:b0:c7:51:5f:1c:c9:86:be:12:a8:a9:ee:49:cf:1f:7e:
         27:fa:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:41 2024 by rpki-client on console-fra.rpki-client.org