Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa
File:                     ff7900da-0420-38fc-8569-0df46155e9fa.roa (raw, json)
Hash identifier:          wskzEUsLNbieMKGLdHfQRfWTTTA2fdvwNCjJDfP1O1M=
Subject key identifier:   CB:99:14:16:E0:95:AD:A2:0D:7A:4F:A9:BF:54:16:50:86:AF:B0:7D
Certificate issuer:       /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
Certificate serial:       010D0C9F432858478A76E07267B367D47719AF80
Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa
Signing time:             Mon 14 Oct 2024 17:41:01 +0000
ROA not before:           Mon 14 Oct 2024 17:41:01 +0000
ROA not after:            Sun 12 Jan 2025 18:41:01 +0000
asID:                     14701
IP address blocks:        104.232.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:76:e0:72:67:b3:67:d4:77:19:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
        Validity
            Not Before: Oct 14 17:41:01 2024 GMT
            Not After : Jan 12 18:41:01 2025 GMT
        Subject: CN=0ee65426-52e1-4ccc-9a9f-bbca37df0d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:98:ba:51:a9:a7:87:11:2b:64:e4:24:bc:
                    56:ad:82:ac:39:34:b6:a3:b4:b8:0a:d4:2e:ac:dc:
                    bd:8f:a8:48:11:4c:f9:d4:c6:34:77:58:d5:b9:ec:
                    ef:04:3a:ef:b2:3d:59:e4:eb:09:65:5f:f8:62:d5:
                    84:c4:52:57:4e:8c:be:51:3e:6f:fd:7a:16:3f:5e:
                    0a:89:5f:40:f7:81:03:ca:75:6a:06:7e:c3:8b:aa:
                    d9:4b:97:78:24:66:5a:fc:d9:7a:a6:57:55:8a:f2:
                    2f:ca:f4:ac:dd:d8:e6:00:3b:05:c7:34:4b:4b:0e:
                    bf:e3:80:f8:e3:08:bb:f9:7b:6e:f6:1d:85:65:0a:
                    9e:d9:dd:89:fe:fb:27:f0:df:7f:d9:cd:0d:cc:05:
                    a9:29:22:89:dd:b2:87:83:f3:7e:c3:bf:96:91:bf:
                    d0:85:da:80:ba:42:14:8d:13:e1:0e:35:88:67:63:
                    86:4b:78:77:cc:e9:9d:9b:00:84:70:6a:e7:ec:bd:
                    fa:5e:ed:3a:f2:f1:ec:aa:a9:cd:57:18:47:bf:de:
                    fe:95:6b:e3:9d:9b:83:4d:03:22:42:05:e1:2a:08:
                    d7:f0:20:7b:45:8b:2d:b9:d3:45:85:3b:bf:1b:8c:
                    7c:54:f8:f1:13:61:62:24:5e:99:70:06:d5:ec:01:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:14:16:E0:95:AD:A2:0D:7A:4F:A9:BF:54:16:50:86:AF:B0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/ff7900da-0420-38fc-8569-0df46155e9fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl

            X509v3 Authority Key Identifier:
                keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:21:6c:31:a9:6b:d3:d3:9d:27:d2:eb:fd:52:65:51:aa:f2:
         a5:61:08:76:d9:90:e9:69:b1:ef:4a:3f:28:ca:87:8a:1a:7e:
         5d:0f:86:ba:43:0c:b4:5f:4c:f4:8d:78:0f:e9:dc:a2:91:c9:
         a8:65:86:22:f6:40:25:c3:6b:dc:b1:d2:85:fe:af:2f:39:9c:
         9f:be:19:54:34:15:74:54:aa:bb:4a:27:8a:fe:8e:a1:71:18:
         57:c1:be:fb:71:46:be:43:a8:e8:85:81:0a:9f:fa:ba:ee:c8:
         d2:ab:06:f6:8d:6f:21:b8:ee:e3:dc:84:89:cd:00:52:ed:01:
         84:1e:5c:25:0e:ec:e2:49:15:15:12:2d:b7:63:9e:77:a5:29:
         52:c2:bf:c5:5a:fc:ef:66:f2:32:1a:9e:bc:36:44:8c:05:f9:
         b2:ea:89:f4:99:da:bb:0c:d0:c3:ae:00:8b:b4:15:e1:e7:12:
         df:7d:c1:c7:ea:c0:ec:81:0c:30:62:84:05:48:64:73:f0:d5:
         8f:02:a1:78:30:a4:20:90:b4:a2:e0:b0:bc:65:2e:10:0f:66:
         cc:8f:5c:29:9b:2f:5e:17:ed:df:d1:aa:90:18:ea:ad:cd:6a:
         27:f4:c5:1c:2d:8d:f4:e2:b3:fb:6d:54:9f:3c:20:92:19:e8:
         6f:89:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org