Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
File:                     6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa (raw, json)
Hash identifier:          6r7GBd0csIbDnPMV+vqSEM9roGxJlsHpqKHCj4sbY48=
Subject key identifier:   85:6B:4F:12:CC:57:71:DB:59:61:33:B9:3C:EC:DC:17:22:5B:7D:97
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F432858471D0B18D3CE266C3021F43700
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     393950
IP address blocks:        104.167.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:18:d3:ce:26:6c:30:21:f4:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=ec4e03a3-383f-445e-9d04-acbf54ba1667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:52:ef:04:25:6c:59:e1:95:3b:a7:72:c5:
                    9f:0e:b5:06:ae:ee:4e:68:2f:3a:14:04:19:64:66:
                    80:d3:76:16:47:ec:e6:94:e0:0c:e5:f2:bf:ff:94:
                    bb:42:1b:f5:10:c6:bc:b7:b1:74:b7:5a:2f:e3:51:
                    af:07:b8:00:42:7c:4e:3c:ee:7e:83:00:82:47:52:
                    e7:0b:0c:7e:72:04:cb:90:74:35:cd:e3:da:de:fe:
                    01:5a:d4:95:93:04:84:85:b8:a4:ae:73:97:31:7f:
                    b7:c3:b8:57:00:25:ab:ca:01:2b:fe:6b:8c:4b:72:
                    ba:21:15:c2:bf:b8:4d:4f:b3:a9:8f:10:aa:f1:59:
                    b0:91:dc:a7:e6:ed:b4:be:c3:59:0b:a0:66:79:88:
                    be:95:d9:38:b7:48:75:f9:86:52:22:8c:77:ae:c7:
                    33:cc:5e:63:eb:2a:94:1f:e5:e4:9f:35:c4:2b:06:
                    c4:45:7d:04:f9:77:60:af:d5:f5:d9:19:68:ce:27:
                    16:1c:b4:e3:d5:4e:89:76:6e:5e:17:b1:d0:d0:a9:
                    fc:a4:05:ef:ec:50:7a:6b:c6:ff:af:44:ba:ae:9f:
                    6b:42:39:ea:e1:91:02:b1:d8:0d:d8:b8:29:7d:2f:
                    0f:42:e5:f7:f3:52:87:40:c0:48:c0:e0:6b:c1:06:
                    4a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6B:4F:12:CC:57:71:DB:59:61:33:B9:3C:EC:DC:17:22:5B:7D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:29:01:0e:31:ca:44:50:02:ce:26:6a:04:95:04:bb:47:
         79:53:3b:a2:a0:67:2a:ed:b2:85:e1:5d:60:6c:b0:fc:4f:f8:
         16:29:79:c8:10:e4:04:7e:93:ff:95:54:5a:50:41:31:44:6c:
         da:6d:3d:f5:3a:0d:ef:7b:ef:de:a9:c2:32:72:21:88:1f:55:
         7d:7f:64:61:ff:d8:25:94:f3:1b:74:6c:9e:d0:d3:ef:78:22:
         38:a8:db:4a:05:9c:61:42:16:5e:87:76:9d:28:09:a9:e6:cd:
         eb:d1:84:e3:8f:9c:51:84:52:e3:90:fa:ee:e7:61:30:d2:07:
         1a:83:71:de:74:70:65:a9:14:c0:24:fc:5d:6f:9b:5c:13:fc:
         67:3b:78:62:62:25:f4:af:94:f6:0d:c1:ff:80:33:74:f6:19:
         63:32:25:73:7d:08:27:79:d1:19:9c:ef:d7:2c:40:1c:0d:3a:
         14:0a:14:f2:34:00:8f:5d:50:82:ca:d3:39:cd:8f:b8:50:25:
         70:1b:10:43:2d:e5:7e:3c:7e:e9:75:6d:73:12:f0:e5:73:e6:
         8c:78:3b:5a:3a:96:91:e2:9a:0a:e7:fd:f4:42:4d:f1:77:43:
         65:54:20:61:bc:84:cb:14:9d:f1:e8:c5:c2:00:76:0e:0d:73:
         80:fd:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:53 2024 by rpki-client on console-fra.rpki-client.org