Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/eb30e2a9-59d6-34de-9bc9-941421be9959.roa
File:                     eb30e2a9-59d6-34de-9bc9-941421be9959.roa (raw, json)
Hash identifier:          BqkHxvLZB7AeiC0kqpLMG3YxvImfOz7LN/aVGJlSXW8=
Subject key identifier:   F6:6F:FA:66:01:0F:8F:75:DC:8B:CF:0F:2D:A6:BB:50:47:83:A3:57
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858473D26060BD27F8B26077E8C80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/eb30e2a9-59d6-34de-9bc9-941421be9959.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     60841
IP address blocks:        104.167.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:06:0b:d2:7f:8b:26:07:7e:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=2f672299-74b0-4903-af09-64e39ab10fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:ea:d7:ac:59:40:ee:d2:5d:b2:c2:5e:11:
                    35:fb:fd:28:2c:e4:0b:1c:90:fc:53:19:05:a6:c5:
                    52:08:49:63:89:db:e7:34:a5:bd:50:47:3b:57:b6:
                    dd:86:0d:08:4a:49:43:e8:07:26:cc:a0:10:6b:a9:
                    03:e3:f3:1e:84:af:07:1b:3c:c1:8c:bb:41:42:37:
                    b9:65:f0:76:2b:d9:9e:d2:e0:e8:46:cb:e9:e7:73:
                    26:84:bb:3b:bc:79:c9:56:a3:22:f4:02:b5:04:13:
                    09:5a:a6:38:a1:c2:e8:61:fb:10:d4:3b:23:f9:3c:
                    1f:5f:b5:11:62:ec:d2:61:2e:36:23:0b:97:60:23:
                    45:e7:1c:88:f8:c5:60:f3:dc:f3:71:c2:c8:3e:15:
                    ac:5d:61:d8:57:9f:f1:4f:67:05:12:91:ca:41:58:
                    ac:4c:78:fd:d6:26:3c:90:90:d7:2a:97:1b:d7:79:
                    55:a5:81:98:ff:82:b1:22:52:51:75:6b:6e:7a:58:
                    d2:16:52:d3:22:f0:5e:77:8f:04:38:8f:ef:39:ba:
                    b3:3e:e7:85:c8:3d:a9:67:cf:e8:96:c9:e4:1d:cc:
                    a2:1c:95:0e:7a:df:d0:aa:be:d0:e3:82:fd:b3:f7:
                    bd:ea:04:05:ce:71:4a:da:26:a4:33:e6:15:7e:5e:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:FA:66:01:0F:8F:75:DC:8B:CF:0F:2D:A6:BB:50:47:83:A3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/eb30e2a9-59d6-34de-9bc9-941421be9959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:fb:0d:03:a5:47:24:a0:7e:c5:64:fd:b4:e6:ca:e9:7d:
         8e:d5:3a:1d:77:2a:bd:a1:fa:24:fa:de:90:b8:e3:e3:9e:87:
         89:29:f8:45:14:e5:e0:a0:09:c1:85:3c:75:4d:ba:4b:4f:cc:
         a8:7a:f6:6c:b7:3b:19:06:37:9d:be:02:0f:ca:ac:41:2b:0d:
         d8:38:4d:d3:8b:55:70:06:9e:ef:8e:e2:09:55:cf:25:cf:0a:
         2c:15:f5:b7:ca:9b:6d:44:26:24:1a:8b:cc:95:d4:31:3b:09:
         67:d9:56:be:fd:d6:c5:2c:3a:4d:a9:0c:97:ee:43:fa:e7:31:
         4c:9b:2d:9c:10:26:56:b2:20:0b:7c:1c:99:08:f8:97:9c:47:
         80:bf:dd:d2:be:c7:37:36:f6:a4:2d:03:4d:41:4f:0e:94:c6:
         ca:d4:a8:78:26:be:1e:8c:d9:90:bb:ce:19:16:d0:12:b7:da:
         d1:c7:3c:26:57:06:ad:8f:bb:ff:59:d8:de:a4:98:17:f9:0d:
         c8:f3:c1:ae:b1:97:3b:fc:57:a9:ce:93:ff:6d:48:88:e2:59:
         2a:ab:13:ab:f5:2f:3b:bd:9a:6d:32:ed:26:4b:68:a8:34:51:
         a2:98:12:a5:28:a8:c6:62:74:ce:a2:fa:b8:af:7d:ae:b7:4b:
         7f:0d:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:59 2024 by rpki-client on console-ams.rpki-client.org