Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb5f0a64-867e-3738-aa1a-78498f5db63a.roa
File:                     cb5f0a64-867e-3738-aa1a-78498f5db63a.roa (raw, json)
Hash identifier:          fTJ2if+rbfBynkCi+vrucr2kQ+6j4mglAsU9doPARho=
Subject key identifier:   90:C5:60:B7:88:38:89:C7:EC:6E:86:0E:A1:C2:D3:3A:C6:92:95:0D
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584540B72F4648FD2071955DA300
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb5f0a64-867e-3738-aa1a-78498f5db63a.roa
Signing time:             Mon 18 Mar 2024 22:06:54 +0000
ROA not before:           Mon 18 Mar 2024 22:06:54 +0000
ROA not after:            Sun 16 Jun 2024 22:06:54 +0000
asID:                     36040
IP address blocks:        104.237.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:2f:46:48:fd:20:71:95:5d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 18 22:06:54 2024 GMT
            Not After : Jun 16 22:06:54 2024 GMT
        Subject: CN=f1cc2dfa-6fdb-403e-9399-1b638d5aca7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:95:0f:c9:33:b9:cf:3d:79:c5:ab:26:fe:
                    ce:10:9a:7d:08:d2:41:e4:af:a4:ef:ab:87:e3:89:
                    c1:58:b2:de:21:67:74:df:27:e1:17:b4:74:8c:62:
                    26:36:c8:62:f4:f7:e8:cd:5b:c7:1c:23:2d:33:70:
                    98:a8:3a:e2:50:c9:4f:0e:fe:f3:f6:da:0f:b5:84:
                    49:e7:4a:0f:b1:cd:4d:c3:94:3f:48:32:4b:53:49:
                    60:de:2f:7b:d0:5e:d5:5f:60:aa:37:23:cf:86:8a:
                    09:5d:8e:d9:0a:7c:71:4d:4e:41:b3:f7:4d:1c:ac:
                    e0:a3:47:dd:64:ab:07:b0:69:44:88:80:43:34:11:
                    5d:b3:39:66:0f:a8:a6:d7:6c:86:21:bd:3e:73:f0:
                    e8:71:eb:fd:1b:e5:74:a0:bc:c8:0f:69:b9:b9:b6:
                    ff:1d:e4:d3:9a:fa:18:b9:bd:fe:d8:f6:ec:dd:b2:
                    18:0e:fd:49:3f:83:0e:e9:49:8f:9c:33:97:70:99:
                    8c:5a:ce:e3:d1:e7:f3:32:ca:92:be:ed:f4:d5:37:
                    70:6f:f0:13:99:bd:fb:0a:3c:92:48:8c:25:87:aa:
                    73:38:4a:42:ac:74:74:d3:3c:49:ae:48:5e:1b:2f:
                    97:63:24:f0:b7:7d:e7:1b:d7:22:da:a8:42:4a:df:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C5:60:B7:88:38:89:C7:EC:6E:86:0E:A1:C2:D3:3A:C6:92:95:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb5f0a64-867e-3738-aa1a-78498f5db63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:2c:12:06:ea:e1:9c:73:61:bc:4f:cf:e2:2c:1e:9e:a8:
         5a:a5:02:f4:6f:30:04:85:9b:4d:49:7f:c1:f7:43:37:02:e0:
         1e:05:bb:c2:74:b4:83:c1:5d:2e:9c:82:ba:bf:b3:04:c9:5d:
         2d:3a:cc:ad:4c:8f:cc:2a:83:24:1e:22:ba:a6:92:1b:92:c9:
         30:36:df:c6:67:f2:d3:35:5b:40:28:3b:8c:b8:ab:1a:c3:5d:
         f5:4f:c6:20:f3:d3:0d:9b:dc:5c:f8:f5:70:78:6c:17:db:25:
         a4:2c:6e:4f:e8:5f:3b:25:43:83:1a:70:d0:46:34:20:e9:a5:
         d4:24:60:d3:5b:ac:ad:87:37:c3:54:2c:54:de:65:7c:25:6d:
         c6:f3:9b:50:0d:ae:6c:5b:c3:99:f7:59:e4:31:69:dc:c5:ac:
         5f:80:07:b4:94:a6:04:96:b3:05:e7:52:98:30:45:60:a9:dc:
         79:3e:55:81:9a:35:f8:a3:3a:98:fd:84:39:5d:a4:f1:0e:df:
         3b:83:17:91:17:bb:40:ce:a3:67:e6:47:7d:41:d3:cf:04:ab:
         7e:af:6b:f5:c1:74:1e:94:bc:ae:f1:ae:42:79:3c:9a:53:00:
         26:32:dd:3c:84:e9:9b:9e:11:73:76:a6:74:9c:50:e5:68:d3:
         47:a7:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:20:12 2024 by rpki-client on console-fra.rpki-client.org