Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06be4c0f-b1c1-338a-a27c-67a878c5dd2e.roa
File:                     06be4c0f-b1c1-338a-a27c-67a878c5dd2e.roa (raw, json)
Hash identifier:          5DbRgtFPhwmZktPPdARcxDPdRJm793JZ/WMV2rdwdf0=
Subject key identifier:   35:DE:E2:C7:6B:D8:5F:B3:2B:D6:E3:84:4E:B2:AD:AB:BF:27:A0:5C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBD62B456A935D5A251CC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06be4c0f-b1c1-338a-a27c-67a878c5dd2e.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        104.196.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d6:2b:45:6a:93:5d:5a:25:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=d488733a-21ab-4710-b157-cb980ce70be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:37:4b:e2:19:8f:38:72:0d:3b:f9:2a:83:17:
                    54:26:9d:6a:ee:22:59:65:a1:ad:b9:5f:8f:ac:e2:
                    08:08:6d:99:3c:35:3d:e4:ff:1a:50:88:60:80:dc:
                    ec:93:40:80:a2:93:ee:5e:12:93:46:fe:18:1b:57:
                    f8:1f:bb:c1:21:78:f7:cb:d0:3f:15:a6:2c:54:f7:
                    d9:ba:13:4e:92:b3:26:65:64:d2:a9:71:5f:83:10:
                    81:4f:1c:93:93:19:65:c9:78:31:6f:00:96:42:80:
                    72:07:d8:7c:31:c8:e7:f7:6b:b9:ec:1c:ab:33:57:
                    98:46:cf:83:3a:34:7f:39:61:e0:14:af:cd:46:67:
                    b0:a1:ac:c7:9e:85:fb:30:78:d7:ab:7e:1f:ed:9d:
                    f3:b5:1f:07:94:53:20:a9:a7:e5:23:77:71:79:71:
                    8c:33:f9:4d:60:55:44:8f:12:19:d8:d7:8d:72:7c:
                    36:23:ec:77:59:f6:06:ad:c3:2a:32:d6:12:32:20:
                    1b:ae:e6:d3:16:76:b7:c7:08:47:9c:c4:78:ce:37:
                    86:03:36:b5:e8:db:b9:1b:7c:88:27:94:b6:ed:e9:
                    19:b4:62:a6:31:ae:3d:a9:56:91:9f:4b:a1:4c:c3:
                    39:4c:a1:82:5a:85:25:f5:81:56:ea:c6:cc:f3:d0:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DE:E2:C7:6B:D8:5F:B3:2B:D6:E3:84:4E:B2:AD:AB:BF:27:A0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06be4c0f-b1c1-338a-a27c-67a878c5dd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:da:a7:27:8e:14:2f:d0:26:19:a1:60:58:17:5b:ea:8c:31:
         35:66:fd:22:02:93:27:96:d3:47:df:6d:a1:89:5d:2a:a0:48:
         eb:ec:9a:ba:ab:6f:cd:35:86:5d:c8:09:8d:db:ba:91:a5:85:
         25:9a:58:40:bf:69:43:68:ec:33:43:23:47:b0:72:6e:4c:77:
         cd:0a:5a:17:aa:8f:16:e2:49:77:2b:5c:4f:2f:5a:31:45:a6:
         b6:db:c6:74:e3:fa:cd:5c:57:9c:82:47:c5:9e:f3:62:5b:df:
         15:9e:c4:95:29:fd:ce:ee:0e:34:d6:7c:89:52:47:0f:86:6d:
         f6:0c:ba:ed:25:40:1f:26:3a:c5:2f:d8:89:2b:c6:19:0f:0d:
         4c:93:36:d8:1b:00:ee:e2:bb:1f:26:f4:fc:7b:5b:65:9c:a8:
         95:87:45:33:3c:00:8d:87:9a:2d:d0:9d:5e:84:9c:85:d1:57:
         13:e4:16:51:25:03:ad:2f:f9:83:fe:df:e7:39:8b:94:c6:56:
         a8:e1:f2:03:e0:52:96:a1:03:bd:9f:48:23:f0:8d:dc:02:91:
         41:b8:4d:41:67:11:8e:2b:25:8b:22:a8:3a:82:2f:5b:bb:4a:
         97:7e:7e:ed:ec:3d:28:8e:df:94:61:a8:79:d0:74:60:91:1a:
         fb:9e:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:58 2025 by rpki-client