Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/2b552f8d-ea2b-39b3-b102-261cc75ea5b0.roa
File:                     2b552f8d-ea2b-39b3-b102-261cc75ea5b0.roa (raw, json)
Hash identifier:          wS8+qsOtwkMDrehco7tRSR6s7nlRBPCdu3wCIXKucJg=
Subject key identifier:   8D:1D:AC:4F:04:03:D5:0C:78:AE:0C:11:5C:7C:42:87:D3:E8:D0:E5
Certificate issuer:       /CN=810a26b8-2ddc-4001-9876-52b54c0695fb
Certificate serial:       010D0C9F432858450EEAD088055B950CBDDF5B00
Authority key identifier: 89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/2b552f8d-ea2b-39b3-b102-261cc75ea5b0.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     398041
IP address blocks:        104.224.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d0:88:05:5b:95:0c:bd:df:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810a26b8-2ddc-4001-9876-52b54c0695fb
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=6942f7b9-abe8-4ae1-86cd-729e03bba2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a8:fe:96:b5:6f:ad:ab:32:a3:13:f2:a0:01:
                    fd:cf:56:cb:4e:63:54:dc:fa:f5:d1:1e:6a:fe:4d:
                    60:59:5e:12:fa:9b:2f:a5:be:b3:50:0b:90:09:b5:
                    b2:88:58:85:8f:84:69:52:54:cd:f1:59:5a:9e:66:
                    ed:7b:c8:d3:45:1c:05:d9:46:f8:c6:01:9c:4e:91:
                    a9:ab:a4:14:1a:bc:ef:d2:7f:eb:a4:c1:4a:ba:53:
                    dd:96:ce:7e:ea:75:1d:de:73:6b:3c:b1:70:6d:d8:
                    e5:d6:df:aa:65:b6:4a:25:b2:6b:37:d6:01:6c:4a:
                    30:2d:37:d5:9d:3c:86:90:a1:ad:14:b2:a5:5a:3c:
                    ce:fa:a4:4c:f4:1f:9c:be:a3:c5:34:41:f2:95:61:
                    7a:06:5b:d5:42:11:b4:95:4a:b0:66:93:5e:b6:e0:
                    3f:40:47:ea:21:65:ce:9d:4d:a3:e0:d7:76:ad:4d:
                    e5:d5:8e:42:5e:aa:8d:10:24:ef:70:71:63:a5:a5:
                    0d:a2:3c:17:76:a0:17:49:a0:f8:1b:b9:f6:c9:6a:
                    3b:8e:27:3b:ae:d8:fc:fe:9c:8b:83:ee:3b:9a:47:
                    29:8a:ad:69:9b:f8:6a:7b:cd:08:cc:b6:dc:87:ee:
                    ef:b0:cc:92:0a:af:eb:14:0d:ba:a0:51:79:16:e4:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:AC:4F:04:03:D5:0C:78:AE:0C:11:5C:7C:42:87:D3:E8:D0:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/2b552f8d-ea2b-39b3-b102-261cc75ea5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.crl

            X509v3 Authority Key Identifier:
                keyid:89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:d1:a0:6a:09:e6:f3:e6:29:1d:64:79:ab:d6:74:a3:f4:
         ab:5b:35:3a:ac:50:84:bd:74:7c:b2:e5:ef:eb:66:51:61:b7:
         4e:42:0c:35:98:be:f4:60:e9:6e:48:d8:c9:c7:51:58:73:d0:
         5b:61:6a:c7:bd:a6:e8:da:3d:4c:1d:6a:b8:4d:30:a3:6f:eb:
         71:17:8a:a0:85:2e:d8:86:9b:3a:0d:d9:fd:11:6e:92:96:5d:
         4f:f6:7a:bf:0a:48:d7:61:f8:09:eb:b9:1d:2b:a4:09:99:81:
         e2:59:0b:8d:98:fe:57:83:0b:da:11:ad:15:c9:12:24:19:91:
         8d:e0:c6:ad:d7:fe:57:3e:c6:43:73:95:2f:b3:e0:9f:24:43:
         15:dc:7f:e1:6a:1b:76:a3:ca:e0:8f:db:92:6e:ae:ae:78:bb:
         27:7b:9e:93:87:21:4a:a8:c1:21:ca:86:f5:d9:06:71:52:4c:
         55:b3:da:ba:72:69:83:19:79:bc:77:e3:ce:7d:40:1a:8b:de:
         e2:ee:b3:f3:31:29:60:56:4e:e3:5f:aa:48:02:7a:fb:7c:51:
         92:13:46:b1:f2:40:e8:0c:ab:c0:b3:79:0d:99:26:58:78:8b:
         78:0f:a0:94:f1:93:b6:fb:c8:80:5b:04:72:cf:25:8d:3a:9c:
         83:fd:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:30:58 2024 by rpki-client on console-fra.rpki-client.org