Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa
File:                     8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa (raw, json)
Hash identifier:          3Zj4AtDKmpUSnmPSsYMUzSlUu9yTsni3O5izoVE5nzg=
Subject key identifier:   C8:EC:A4:BF:44:99:24:20:B1:B9:66:63:8F:73:A8:09:D2:44:94:13
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBA9FC81E448121EDF25C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     4922
IP address blocks:        104.218.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a9:fc:81:e4:48:12:1e:df:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=9dd25553-8dbb-4bd6-a394-d0a5e03bf981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:ad:bd:e6:dd:51:bc:9e:ab:0b:0c:90:de:
                    97:72:1f:97:60:1c:16:7b:b3:e2:ea:82:b1:1c:6e:
                    36:f8:35:8f:4d:d3:3b:96:b6:42:2c:19:91:25:70:
                    8d:88:d8:29:0e:9c:d1:57:fd:76:e5:43:05:c3:d1:
                    e4:33:33:17:fe:4a:58:bb:6f:39:12:b6:d7:e0:d1:
                    bd:f6:cb:d1:61:30:9e:e0:19:c8:48:8f:56:5f:54:
                    9b:82:45:32:2c:27:88:59:f0:ea:2e:79:54:fb:55:
                    fc:0e:9a:af:6a:97:64:d4:eb:67:2b:e2:05:c3:c2:
                    03:3b:32:b6:af:5e:cf:5b:44:ad:c5:bd:06:09:be:
                    7d:6a:3a:31:fa:94:b2:1b:df:9d:12:41:70:be:6a:
                    68:fa:71:36:da:b0:46:82:0b:a2:b1:57:4c:b5:2f:
                    6c:ed:b8:d4:73:8c:6a:29:ed:88:93:0b:fe:a9:db:
                    ed:6d:13:a6:04:bd:52:6f:a5:97:00:fe:5d:fa:09:
                    b3:e3:2e:15:c1:23:73:2e:8d:34:9c:20:54:14:c6:
                    fc:18:19:e3:39:e0:5b:9b:fa:d5:98:58:c1:dc:53:
                    be:78:04:a1:33:99:e1:ff:c6:36:5d:e3:cf:52:83:
                    76:2f:a9:aa:76:1e:31:33:82:5a:f0:3f:09:db:b2:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:A4:BF:44:99:24:20:B1:B9:66:63:8F:73:A8:09:D2:44:94:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b65ff81-c154-3af7-afb0-890ecc4a2ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:42:39:6e:f0:5a:89:a2:1e:75:96:da:f2:2a:2f:fc:49:64:
         69:60:75:5f:87:b8:8f:9a:81:f9:a2:a9:47:ab:9d:0e:10:b4:
         72:34:2f:79:7e:51:9d:78:65:b5:04:75:c1:ff:03:2b:d5:37:
         73:0f:1b:77:4a:40:a4:20:30:ed:85:36:0c:be:6b:23:c5:55:
         1b:42:5a:9f:9f:64:49:1e:72:56:0e:02:79:f9:3f:85:64:18:
         98:f9:56:18:9a:a9:9e:f9:35:d0:03:ed:04:fa:73:82:08:a3:
         3d:4f:e2:a2:40:e6:f3:05:5f:50:f6:8b:77:77:65:59:a2:a8:
         31:1b:8a:19:8b:f0:28:90:2d:e0:71:1e:c9:ed:36:85:cf:2b:
         12:9d:72:c8:93:e5:9d:25:23:4e:cf:19:95:05:da:53:8c:94:
         32:a0:a6:8f:72:dd:1d:57:7c:63:bd:4e:fc:7c:81:0b:1e:4e:
         51:1b:09:cf:94:20:90:6e:58:76:c2:c5:9a:fb:e1:40:21:6a:
         88:a4:e4:bc:da:93:a2:78:ac:90:dc:62:96:0d:d3:43:46:82:
         16:16:6e:b7:bd:89:91:c8:28:16:ff:7c:d3:76:21:fb:ff:5e:
         be:7a:f3:1b:28:b6:b2:9e:07:80:3a:bb:c6:16:20:c1:dd:2d:
         4a:e2:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org