Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
File:                     6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa (raw, json)
Hash identifier:          IlZdafJuFGLqOZVrYmwdUywi0+8tsi4rLBB5zh8SWqM=
Subject key identifier:   37:59:85:11:15:5B:FA:01:E7:24:AF:B6:19:A4:96:EF:E9:7A:D1:31
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F432858455CF82E2D47BDD3DA3C603480
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     393950
IP address blocks:        104.167.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2e:2d:47:bd:d3:da:3c:60:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=bb3d6ef1-6157-4da5-acb2-80a321100b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:27:69:65:87:e7:5a:0e:fb:8d:41:ac:95:
                    8d:b1:fb:86:10:be:f6:90:4d:6c:6d:0e:21:b6:3a:
                    48:1c:2c:a0:da:c2:65:f5:e8:24:ed:00:0c:86:2d:
                    9f:38:a2:8a:cc:0a:fb:90:08:2d:d4:79:bc:7b:34:
                    41:40:49:82:7b:d5:71:6e:67:27:ec:8b:86:b2:a3:
                    73:df:43:33:4f:70:1a:3e:67:72:9a:04:04:f5:d7:
                    43:5f:a4:b6:5f:6d:41:b8:01:c1:7e:5f:b1:37:8f:
                    cd:17:57:4f:1e:02:2c:7b:39:44:db:8d:b2:91:33:
                    02:ae:35:7b:0d:6c:3b:c2:f7:79:5a:f9:97:59:71:
                    94:cd:20:cb:bb:4a:18:f8:ff:65:11:ac:fb:7b:63:
                    97:d9:f4:14:eb:e2:d4:90:e4:96:6c:88:e6:92:0e:
                    6a:9d:5b:d0:1b:ae:62:24:ca:43:87:68:2f:b8:86:
                    37:83:9c:3b:65:6b:80:47:8f:46:80:6a:fc:bc:88:
                    99:55:ce:6b:b1:e4:e1:9a:54:1c:8b:11:15:cf:30:
                    4b:23:3c:6d:68:65:25:f2:28:2f:db:dc:7b:c8:dd:
                    78:97:33:8b:40:d9:51:14:79:60:47:68:b8:bd:a8:
                    e3:d3:fa:16:b1:72:a3:c8:7b:65:af:99:17:72:73:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:85:11:15:5B:FA:01:E7:24:AF:B6:19:A4:96:EF:E9:7A:D1:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:34:b5:92:c9:ed:44:1a:71:31:79:13:46:e8:17:31:13:bc:
         60:95:2c:5d:f2:29:e5:a5:8d:24:fe:d0:9f:bd:c5:c8:1b:4b:
         08:25:52:51:91:ea:8d:77:dc:22:af:9b:b8:a6:9f:a9:22:e1:
         f7:64:54:5a:6a:ed:45:75:70:aa:af:93:c9:11:0b:a5:3a:67:
         c3:08:36:3d:c6:3d:74:59:62:8e:62:d0:ee:e3:43:cb:6f:5a:
         bf:3d:6e:77:b4:ed:8e:3a:a4:8a:85:53:ba:bb:9e:46:cf:e6:
         4e:af:bb:05:41:91:6f:f7:a1:8e:5c:a4:a5:6f:c3:1d:a6:5a:
         08:51:6c:cd:07:36:12:37:dd:f3:47:bd:ec:70:96:28:b6:c6:
         f7:c3:28:86:26:c2:57:3a:ae:29:b6:fe:58:77:a4:7d:c1:16:
         12:1b:af:5b:4f:69:10:fd:df:4d:bc:7a:69:19:ef:46:58:99:
         f6:c4:d8:98:6b:18:b3:a9:4a:36:a2:b7:52:ee:55:77:a9:de:
         f7:08:e0:f4:64:63:06:b8:68:24:ff:5c:e7:d6:9d:d8:b4:2c:
         9e:88:9f:2b:5e:f9:4c:29:6e:83:09:a1:ed:b7:e4:cb:98:a7:
         65:d8:16:1c:6b:1e:53:44:39:81:5d:da:83:db:38:2a:b8:8e:
         33:2e:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:47:52 2024 by rpki-client on console-ams.rpki-client.org