Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69c38ded-8b2f-3ba4-bd0e-b82b636e32e1.roa
File:                     69c38ded-8b2f-3ba4-bd0e-b82b636e32e1.roa (raw, json)
Hash identifier:          2Tu0G2mXhCyqgVuPxvy/FrMGLUyesYvAjxrWtWHFASc=
Subject key identifier:   20:8C:7C:66:26:C1:48:E8:D4:97:B3:38:33:6D:ED:95:C7:66:81:07
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AAE1D8A44D6FC9B31957C900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69c38ded-8b2f-3ba4-bd0e-b82b636e32e1.roa
Signing time:             Thu 25 Apr 2024 22:48:33 +0000
ROA not before:           Thu 25 Apr 2024 22:48:33 +0000
ROA not after:            Wed 24 Jul 2024 22:48:33 +0000
asID:                     397373
IP address blocks:        104.253.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:e1:d8:a4:4d:6f:c9:b3:19:57:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:48:33 2024 GMT
            Not After : Jul 24 22:48:33 2024 GMT
        Subject: CN=2c166f83-a634-4a3b-b72d-8bf9368a37c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:ba:91:35:9d:d0:58:64:56:97:28:d7:0f:
                    bd:8d:27:79:81:49:6f:fb:27:7a:0d:07:d3:b7:b2:
                    4f:09:af:70:f4:77:c0:c8:76:02:f4:25:7f:70:98:
                    07:70:07:d2:ff:00:8d:c2:65:c5:10:6b:e2:c0:0a:
                    98:a3:cc:c6:4d:dc:55:32:13:95:04:70:dc:d8:81:
                    bf:59:34:a6:06:54:e6:fa:15:f0:9e:07:76:2c:4f:
                    e3:2b:1f:8b:bb:a0:1c:d0:8b:9c:c3:82:fa:e2:57:
                    b1:20:6a:5b:a5:7f:f0:06:6a:77:e7:f6:5a:9b:09:
                    02:5a:8e:d7:aa:33:b6:71:45:9e:cd:a3:97:38:65:
                    ac:a8:69:cc:be:9b:c3:3f:5d:eb:e7:15:b9:c9:01:
                    c3:ae:cc:87:d2:bd:49:e2:9d:22:09:d1:5c:7a:ff:
                    7b:e4:ea:12:b5:97:54:d5:ec:ac:fc:28:ec:8b:e9:
                    69:6d:82:dd:05:3a:89:27:be:2f:c7:cd:e8:4a:cf:
                    b4:77:81:27:00:1a:33:f4:bb:e6:47:39:1d:ee:cb:
                    05:4b:fc:99:b5:2d:47:e6:b9:65:dc:d1:65:e5:f8:
                    31:64:84:f5:14:b8:bc:ea:ad:94:e3:90:5e:be:c8:
                    df:5c:12:28:54:7b:1f:96:92:c6:77:cf:a9:96:34:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:7C:66:26:C1:48:E8:D4:97:B3:38:33:6D:ED:95:C7:66:81:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69c38ded-8b2f-3ba4-bd0e-b82b636e32e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:e4:c6:2a:ff:0e:da:a4:3c:54:97:a5:cc:5b:ac:90:f9:
         33:11:99:ef:0a:87:45:7c:f4:f2:c7:8a:ad:28:8d:99:34:19:
         aa:6c:34:37:bd:0c:48:fa:e2:3a:1a:33:28:35:64:83:a6:d9:
         b9:e6:f8:0e:1d:69:5b:07:c9:73:be:4f:bd:fc:85:4a:cd:b4:
         49:a3:67:41:bb:0a:88:63:ce:d3:94:f7:c3:1c:d8:be:a4:9f:
         93:dc:af:b0:79:d1:ef:0d:91:c4:40:6d:80:f1:b1:30:fb:2e:
         89:2d:21:69:22:55:fb:81:df:64:7f:5f:be:97:c6:0b:95:c0:
         b9:25:e7:cf:6a:65:88:9c:f5:9d:13:f4:b2:ee:67:9b:2b:1f:
         2e:73:dc:0d:57:ee:60:3d:05:3a:77:01:de:13:b0:c2:bd:b8:
         87:a1:a7:2b:f7:04:ab:66:36:db:fe:71:f5:42:cf:72:c9:72:
         03:f2:8c:9b:0a:bd:95:b1:ff:9a:7b:d9:41:a1:f0:04:89:d2:
         a6:ad:ea:6d:5b:45:b5:06:df:be:a3:20:a7:b7:38:b8:05:7c:
         f5:f4:c3:fd:c8:17:57:49:da:fd:7c:f6:89:58:ac:76:79:2c:
         d2:96:05:82:8a:65:b2:9a:a4:14:d8:55:a2:9d:3f:e4:f9:dc:
         a4:08:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:25:16 2024 by rpki-client on console-fra.rpki-client.org