Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2704d529-e5b6-3dcc-a85d-204f81aac695.roa
File:                     2704d529-e5b6-3dcc-a85d-204f81aac695.roa (raw, json)
Hash identifier:          OIxqDj9CrtbLZN/AwSbdfUYk9Za2ghTia9RkBnYhJwE=
Subject key identifier:   00:2E:39:46:7D:FF:50:D3:A4:3C:C7:45:63:AC:B9:D3:10:C4:3B:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADF8E9A5B93448B03333600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2704d529-e5b6-3dcc-a85d-204f81aac695.roa
Signing time:             Thu 25 Apr 2024 22:43:56 +0000
ROA not before:           Thu 25 Apr 2024 22:43:56 +0000
ROA not after:            Wed 24 Jul 2024 22:43:56 +0000
asID:                     44477
IP address blocks:        104.164.32.0/24 maxlen: 24
                          104.164.36.0/24 maxlen: 24
                          104.164.47.0/24 maxlen: 24
                          104.164.113.0/24 maxlen: 24
                          104.164.144.0/24 maxlen: 24
                          104.164.148.0/24 maxlen: 24
                          104.164.153.0/24 maxlen: 24
                          104.164.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:df:8e:9a:5b:93:44:8b:03:33:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:43:56 2024 GMT
            Not After : Jul 24 22:43:56 2024 GMT
        Subject: CN=cf913feb-a1d6-4da2-8ea5-ee514e5e4b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:65:9c:28:ae:64:0a:dd:78:63:e6:22:dd:
                    7b:d6:9d:93:ac:34:3a:29:a2:78:13:51:33:16:d0:
                    5d:6f:8f:e6:d3:d9:89:da:c4:ea:dc:84:e9:c8:97:
                    89:7d:cc:53:a8:a4:79:0b:84:73:2a:17:95:13:aa:
                    9e:f9:b0:58:d5:e0:4b:4d:4a:cc:c3:d3:29:58:7c:
                    58:b1:80:11:2f:8f:e5:09:8c:0c:79:9a:91:f5:e7:
                    10:3b:ad:a6:25:0f:c8:7c:81:ef:27:6d:1b:0b:e5:
                    4e:ed:8a:69:df:45:8f:01:2b:51:1a:b4:5d:fc:2f:
                    ed:1f:04:af:b5:a4:33:63:55:1b:cf:94:62:f7:b3:
                    5f:75:4f:a7:c0:06:a6:81:41:87:fd:ac:0f:a9:86:
                    9f:07:d8:e6:c5:06:3b:21:05:2d:f4:5e:4d:86:86:
                    ad:48:4b:ba:5e:24:b5:79:62:34:39:50:bc:27:28:
                    88:dc:f6:d9:81:82:d5:52:42:20:e1:b6:44:04:d3:
                    35:0d:37:aa:89:a5:03:d9:b5:9a:23:29:ad:5d:91:
                    79:56:07:ef:9c:2e:e3:99:df:fc:de:4f:c1:37:1f:
                    27:94:50:a2:e8:99:cb:59:96:3f:ef:76:cf:55:26:
                    e2:60:68:85:fa:0c:b2:f0:03:6e:8f:06:f1:32:a7:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2E:39:46:7D:FF:50:D3:A4:3C:C7:45:63:AC:B9:D3:10:C4:3B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2704d529-e5b6-3dcc-a85d-204f81aac695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.32.0/24
                  104.164.36.0/24
                  104.164.47.0/24
                  104.164.113.0/24
                  104.164.144.0/24
                  104.164.148.0/24
                  104.164.153.0/24
                  104.164.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:bf:30:24:be:90:39:ca:39:e9:13:53:89:a1:fa:cb:ec:
         e5:65:79:af:aa:be:5a:04:6a:35:5d:04:ae:e8:92:09:b9:18:
         08:e7:bb:a2:cf:dd:36:4e:94:83:8d:e5:ec:07:24:7c:01:44:
         80:a0:13:ef:97:b2:0b:7c:97:84:ec:37:9b:da:bc:42:b8:06:
         76:d3:b6:97:b4:ca:82:93:e1:15:f9:0f:65:41:11:09:ed:5d:
         a3:53:b4:d8:d0:e5:bd:f6:cc:9b:17:87:bb:0c:0c:b2:da:df:
         6b:4a:3b:f1:f7:e5:89:2b:bd:61:a8:b2:6f:e9:b9:39:c8:ca:
         2f:67:dc:b2:85:2d:76:7f:24:fa:9c:16:86:96:4f:ed:ca:f2:
         67:df:b9:90:77:70:0a:8f:64:59:e1:28:0c:9a:0a:7a:63:4e:
         19:c5:70:66:49:db:4a:a2:18:dd:4a:99:d6:1f:db:fa:b1:98:
         ae:82:e5:c6:14:60:6e:9d:f4:89:97:34:a4:2c:06:58:18:e6:
         86:28:6b:42:90:5b:bb:96:37:6c:31:7b:54:fd:4c:1b:5a:12:
         97:6b:ab:8f:00:62:09:7b:24:07:31:0f:3e:43:c9:63:69:9a:
         59:4c:d2:c8:1f:ae:0f:fe:8f:e6:45:23:fe:e7:b5:04:a7:a6:
         4f:1a:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 21:53:07 2024 by rpki-client on console-ams.rpki-client.org