Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c6795d5-f46b-35f6-8643-14188ce72d97.roa
File:                     2c6795d5-f46b-35f6-8643-14188ce72d97.roa (raw, json)
Hash identifier:          uJ+aE1cGlEH/fLVE2gRLT5fIFO4/3qjSlu9fxRycYoA=
Subject key identifier:   A6:55:C3:42:DB:58:94:F0:68:B2:44:A5:68:5F:5E:FA:1F:D3:B3:FC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094FEC4C9C4276088A6BC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c6795d5-f46b-35f6-8643-14188ce72d97.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        104.155.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:fe:c4:c9:c4:27:60:88:a6:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=bc60e685-c57f-4139-a921-2e9e7bd4a0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:0e:a9:1d:72:89:1a:1f:05:40:93:4a:ef:
                    22:37:23:33:a0:71:26:54:7b:ff:71:70:ab:2a:07:
                    51:5a:36:8c:7d:75:f8:7a:6e:70:6d:d4:d5:39:f0:
                    79:8b:90:79:b8:76:9c:34:27:bb:26:8e:55:f1:fe:
                    42:f1:e6:29:e2:0f:5f:94:b3:5c:08:96:df:4b:32:
                    f9:db:6c:b3:cb:df:5b:3d:b3:ca:23:fa:d7:3a:e3:
                    76:f5:5d:66:6a:86:a5:1a:84:45:a8:b6:28:db:68:
                    a8:5d:f8:32:34:19:5b:bb:cb:b6:e4:94:c1:99:d1:
                    1b:c8:27:60:d6:57:bf:d7:78:56:7b:aa:8a:8f:ac:
                    d7:7c:87:ef:4f:8d:3d:3f:91:ad:4a:27:02:72:97:
                    d4:4c:38:ff:fc:50:e1:04:a8:c1:4d:91:89:57:a0:
                    3f:09:b5:5a:1e:4c:c7:39:71:75:44:dc:76:25:75:
                    20:80:14:d9:9d:21:8a:7a:f3:23:08:fb:dc:df:fa:
                    ac:97:e9:7e:44:f4:55:4e:54:9a:f1:76:52:96:95:
                    d0:9e:a6:5c:89:60:74:56:6b:20:39:2d:64:30:29:
                    ba:76:25:0c:6f:d5:a7:ed:a3:d9:b8:10:80:5e:37:
                    d9:61:6d:c1:d2:e4:c8:18:eb:7c:91:d3:7c:e6:85:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:55:C3:42:DB:58:94:F0:68:B2:44:A5:68:5F:5E:FA:1F:D3:B3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c6795d5-f46b-35f6-8643-14188ce72d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:e4:8b:35:2a:76:e1:66:30:18:0d:0e:0a:5d:79:45:cb:
         b2:0b:7e:7e:c2:be:c0:7a:fe:eb:c1:59:01:d1:8d:e9:5f:0b:
         e8:cc:34:7f:66:bc:da:b0:07:99:80:ac:5f:82:0e:91:dc:fe:
         d4:a1:c6:66:6c:6d:7e:31:9a:46:00:7b:4c:0e:50:5a:4b:4f:
         d3:b2:ad:1d:fd:58:5c:d0:a2:7c:b2:28:45:77:39:96:48:6d:
         a9:a5:e7:2b:e3:d9:ec:3d:ab:83:b3:0b:75:98:c1:49:ba:29:
         70:34:8f:30:75:65:2e:b5:b7:84:f9:01:86:cc:df:6c:00:c5:
         b1:58:5b:a1:43:78:30:66:72:22:e1:b4:24:8b:73:4e:fb:f3:
         2c:9d:25:30:9c:cb:c6:0d:19:7e:88:3e:c6:2e:47:2f:97:89:
         cb:3e:02:b1:ee:9c:4b:50:8b:36:82:83:51:f9:b7:5c:d8:56:
         66:9d:08:25:56:45:92:67:6a:5e:42:37:8d:b1:14:28:9d:80:
         26:ce:02:42:f1:32:a1:be:24:a7:63:4e:cc:97:a1:48:14:71:
         b3:7d:6c:3c:6c:f9:84:1c:3c:4c:ec:25:2c:52:72:47:fc:5b:
         14:25:0d:d4:d3:f7:c6:39:70:6b:a5:6d:72:79:72:eb:30:e5:
         58:33:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:52 2024 by rpki-client on console-ams.rpki-client.org