Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/07543b4c-0537-317b-9d20-69249549336e.roa
File:                     07543b4c-0537-317b-9d20-69249549336e.roa (raw, json)
Hash identifier:          uyaSkVIyc+qU2qVb1ySVScHpJX5G1iJYYpoVb+e/A24=
Subject key identifier:   87:CA:74:F0:BC:5F:15:DE:7F:F6:2C:F0:9B:0D:47:1C:0B:C7:C1:BC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094FC7670D8BA0A6F17BF80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/07543b4c-0537-317b-9d20-69249549336e.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:fc:76:70:d8:ba:0a:6f:17:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=fbc0bf37-7462-486c-8dda-5aa68642e12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:cc:e1:53:d4:f0:72:19:e5:5c:8f:dd:b5:
                    38:62:75:92:1e:79:7b:32:f5:dc:f3:05:07:40:85:
                    25:1c:17:fe:8d:1c:88:23:6f:74:f9:be:0a:c4:5d:
                    dd:f2:d3:4f:79:06:65:42:f8:71:0b:31:da:1e:b8:
                    a1:9c:97:95:c9:ef:0e:a7:03:e9:41:02:67:d2:d2:
                    5a:13:08:74:14:d8:34:11:ec:cc:e1:6b:4d:4d:6e:
                    3d:da:6d:59:77:1d:70:7a:5f:d0:a1:00:f2:45:23:
                    ce:79:a2:ba:59:4c:b2:68:c2:e0:00:1b:a5:3b:a4:
                    e7:a2:8d:3a:65:e0:79:fd:70:3d:5d:fe:74:27:30:
                    28:f1:d5:06:fa:a6:a4:6b:b2:12:d8:87:2b:e6:91:
                    69:17:51:e9:5a:ea:df:b0:fa:89:c9:f5:4b:f2:68:
                    cd:eb:2c:3f:95:d7:cc:ab:c2:58:9e:5e:f4:88:f5:
                    2f:4d:49:7e:4a:15:6d:3b:16:ef:f4:5d:23:8b:bf:
                    85:2b:12:6a:83:03:47:4b:3b:05:2d:f8:52:62:ea:
                    ac:55:b3:d5:8a:3a:61:e1:5b:05:c4:2d:7b:5d:69:
                    b4:8d:e4:3c:f7:77:96:95:d8:f8:12:0c:23:61:75:
                    04:d8:4f:ad:a0:c3:ea:81:73:fa:2f:6e:f7:f7:ed:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:74:F0:BC:5F:15:DE:7F:F6:2C:F0:9B:0D:47:1C:0B:C7:C1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/07543b4c-0537-317b-9d20-69249549336e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:94:3e:cd:92:d5:c9:4a:72:80:8d:1a:0a:28:89:84:16:f0:
         9c:32:8a:fe:4e:38:89:5e:f8:1f:43:09:59:d3:2a:94:b4:ec:
         df:e8:05:04:2a:62:07:bf:c2:0a:ba:74:b5:5a:fa:cb:2f:fa:
         32:a0:ac:1e:b5:29:d0:e1:89:c7:f0:17:cf:51:8d:b8:1d:12:
         d1:86:25:78:17:15:77:65:32:88:08:0a:e3:35:6d:7f:57:93:
         09:61:7e:67:aa:d3:b9:4d:f3:ff:c9:4d:cc:ff:07:bf:9b:87:
         ca:4f:be:e7:eb:07:4e:38:1c:27:76:c7:d3:ff:a9:7d:bb:95:
         99:54:ae:34:ed:57:a4:2b:0d:ee:26:d2:cf:47:d3:20:e2:91:
         f3:6a:6a:db:62:03:c4:1d:87:37:b8:3d:c4:e6:1d:69:69:b1:
         53:9e:22:93:bb:49:22:82:84:db:3d:89:eb:36:92:f8:7e:5b:
         90:8e:df:c4:d1:02:c5:1c:4d:08:62:c7:8a:fc:e5:ff:e6:53:
         89:c6:8e:b1:71:92:79:26:29:9b:38:cc:51:42:79:64:6b:18:
         f3:34:4b:4b:a9:6a:4b:c1:19:35:53:66:99:22:1c:4c:0e:0f:
         5e:ba:b3:64:29:fa:71:f7:9e:16:58:8d:9e:73:e4:c6:e8:58:
         06:62:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:56 2024 by rpki-client on console-fra.rpki-client.org