Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ab9a220-eecf-38c1-bdb3-603d63dd6058.roa
File:                     7ab9a220-eecf-38c1-bdb3-603d63dd6058.roa (raw, json)
Hash identifier:          h3vVLBH/lVbkihXCyZkUFs2G4o03MHGJYK/GOoEiX3M=
Subject key identifier:   9B:6C:D2:E0:80:D2:D9:95:1A:B2:E2:01:53:80:1F:40:BD:C4:7B:F0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E34B55AFEF028CB0FFC6F480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ab9a220-eecf-38c1-bdb3-603d63dd6058.roa
Signing time:             Fri 15 Nov 2024 13:20:14 +0000
ROA not before:           Fri 15 Nov 2024 13:20:14 +0000
ROA not after:            Thu 13 Feb 2025 13:20:14 +0000
asID:                     5650
IP address blocks:        104.253.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:4b:55:af:ef:02:8c:b0:ff:c6:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 15 13:20:14 2024 GMT
            Not After : Feb 13 13:20:14 2025 GMT
        Subject: CN=fd13f4d6-1844-40a6-8324-5a0533a92d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:97:0d:d1:c8:07:c6:aa:92:0e:a5:ac:32:a3:
                    0d:7c:d6:d4:ba:32:fc:24:16:02:f5:35:bd:42:b4:
                    c8:f8:6b:1e:17:0c:5a:a7:73:c0:09:35:b1:5f:7e:
                    ff:f1:16:dd:27:b8:bd:95:c3:41:63:fe:6e:cf:56:
                    27:4a:5d:35:63:91:95:4e:da:4d:6e:ca:53:3e:fd:
                    f1:27:43:58:83:d5:b7:bf:da:52:95:ee:a8:33:1d:
                    38:7a:e6:b5:a3:ca:f5:75:de:a9:01:4f:0c:28:d4:
                    28:77:e9:69:b2:0d:e7:bc:c7:68:c3:4b:5b:4f:89:
                    72:7e:d2:77:38:c0:fe:11:09:d1:29:6c:72:cd:37:
                    37:76:11:19:a7:2d:b3:bd:46:ca:37:a7:f1:61:9c:
                    45:0c:99:78:4e:e4:d8:cb:5d:90:8d:14:21:68:79:
                    a8:48:e0:50:5d:71:36:da:3c:37:a0:04:0d:22:cf:
                    25:38:bf:4e:ee:99:13:b7:3c:2f:7f:d7:ca:b7:0e:
                    cb:0a:26:11:16:b0:c9:4f:b3:cf:3f:d1:6b:88:38:
                    6e:0b:d4:7e:ba:76:7c:c7:cd:4e:06:75:e5:c7:f2:
                    b0:e8:26:98:6f:95:db:78:fd:f8:32:08:21:8f:73:
                    a1:c2:f9:f3:be:5b:0b:9f:dc:6b:2e:49:50:d7:53:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:D2:E0:80:D2:D9:95:1A:B2:E2:01:53:80:1F:40:BD:C4:7B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7ab9a220-eecf-38c1-bdb3-603d63dd6058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:70:3f:77:ad:8c:97:cc:94:b3:35:c5:b5:45:13:66:e9:74:
         3b:ab:d1:a7:53:0b:38:4f:92:de:02:fb:14:2a:50:cf:6e:b5:
         f5:8e:f1:14:90:1a:c5:47:49:cb:97:bd:96:e4:39:41:30:8f:
         19:27:86:18:91:e0:db:cd:0c:5d:78:f8:71:ac:fa:28:c7:0f:
         93:7b:81:b8:fd:0f:95:6d:cf:46:a2:c0:30:ba:fb:b5:cd:7d:
         e8:1b:05:91:e2:27:0f:1c:7c:92:51:df:42:8c:a9:3f:b4:a2:
         aa:46:35:62:e3:12:a5:56:21:e1:02:a3:e7:82:53:2d:07:11:
         42:c8:ab:f9:55:10:9e:5f:0f:91:5c:93:66:e9:5a:c6:72:1e:
         fd:d2:65:21:14:18:f0:04:b5:4f:c9:1f:b0:19:69:3b:b4:2c:
         e5:35:84:bb:2e:d7:de:09:a9:5b:73:fb:2f:31:37:7a:84:c3:
         09:c7:39:55:55:68:00:79:14:9c:3f:48:23:70:45:60:1e:3a:
         cc:5f:83:fd:e1:6b:72:5c:03:82:fc:4e:d2:02:a3:2d:e5:1b:
         d2:8d:1d:02:0f:44:46:97:0d:ed:01:15:7d:69:7d:75:ed:c2:
         56:ed:1b:ba:4d:9a:d6:ca:c5:57:90:9c:34:af:3e:74:4d:ec:
         ea:17:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:51 2024 by rpki-client on console-ams.rpki-client.org