Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6b47a03a-810c-37b3-a793-50fd848ce223.roa
File:                     6b47a03a-810c-37b3-a793-50fd848ce223.roa (raw, json)
Hash identifier:          5YF0cOsPWkgabu8DGNnDbdA4VIC3FSUc8OAyW/vZPkQ=
Subject key identifier:   D8:CF:1B:E6:38:DC:50:A9:9E:5F:49:5B:AA:E9:6C:75:62:C2:2B:6D
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F43285847BC2C11D509091B4728F1E300
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6b47a03a-810c-37b3-a793-50fd848ce223.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     8100
IP address blocks:        104.143.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:11:d5:09:09:1b:47:28:f1:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=c806f4cd-c0ed-4876-a46f-059c99720ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:01:31:75:af:aa:22:86:78:f5:2a:15:a4:c3:
                    bf:30:69:c8:0b:7b:63:c8:2e:8c:bf:cf:dd:94:44:
                    ab:1c:78:5f:44:27:f3:46:22:3f:c2:8e:c1:04:fa:
                    3c:0e:b5:bc:0d:36:fc:8c:14:b1:49:4e:e5:d7:9b:
                    04:d7:6f:86:ba:5a:7a:52:d4:e9:f4:dd:9b:67:41:
                    35:c1:d1:dd:cc:b3:b2:7c:65:25:3e:03:33:24:18:
                    03:76:55:e1:3e:f1:1b:14:f1:f6:86:e3:b3:96:02:
                    f5:76:9b:25:f6:e5:4e:0a:78:15:44:5a:89:83:59:
                    39:de:5e:77:52:f3:fa:80:34:fc:56:7d:91:4c:de:
                    ce:bb:fc:e1:89:d4:c1:05:db:c4:35:c4:d5:94:ef:
                    01:71:55:98:ae:5d:a5:e5:26:77:2d:5d:68:ab:83:
                    a9:ec:a8:8c:8c:f0:f2:e2:c5:33:63:3f:76:09:d8:
                    ae:37:6b:58:2a:a6:54:83:07:f1:e9:f9:1b:0e:78:
                    48:a2:40:54:0a:cb:d6:06:0b:56:4f:99:72:ea:aa:
                    72:c1:70:5c:9a:55:65:e8:fb:89:be:bb:b1:b2:18:
                    85:cb:e3:e2:b9:21:90:fa:9d:bd:40:ed:d1:9f:9b:
                    0d:db:98:b1:7a:1b:dc:f6:42:84:a8:64:49:7d:9e:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CF:1B:E6:38:DC:50:A9:9E:5F:49:5B:AA:E9:6C:75:62:C2:2B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6b47a03a-810c-37b3-a793-50fd848ce223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:97:14:ca:2f:1c:73:8a:9a:c3:08:fe:99:0e:37:f8:34:b2:
         22:34:ff:2c:85:ed:24:e4:3e:d6:80:89:8d:17:67:90:ca:84:
         e2:eb:7c:fc:cb:85:49:e7:66:82:5b:ca:66:fa:19:d1:82:50:
         3e:53:33:45:f4:82:f6:5d:0e:40:c4:47:08:11:58:5a:04:ed:
         8c:27:e6:4b:91:56:cc:73:8c:9f:4d:39:c0:d8:c0:9f:0e:44:
         8a:e5:f9:1d:36:b2:e1:72:2f:1e:a3:60:b3:27:b4:c9:9c:b5:
         8d:44:46:29:d5:0d:1d:c8:37:a9:9b:d9:e1:1d:ac:2b:65:b6:
         80:31:42:38:73:b0:e3:c6:0f:0f:37:5d:39:c7:18:b9:74:8a:
         96:ad:a0:92:7f:4c:db:fe:4a:85:98:78:a7:c8:cb:53:fa:fa:
         b6:7d:d5:97:c5:b3:95:41:6f:ad:1d:41:c5:8c:a0:fd:f6:28:
         6e:db:0b:ae:7d:ca:ff:a3:7c:23:a0:3e:15:ff:56:ea:be:96:
         41:c7:38:ec:64:1b:2b:54:6d:98:d2:f0:73:08:48:24:44:e9:
         ad:43:5e:69:77:8c:2f:0a:b8:88:4c:1f:11:e3:0e:7b:b4:9d:
         2a:d0:bc:46:a0:90:ae:ab:2b:68:16:8d:1a:74:49:51:a3:9e:
         86:d4:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org