Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa
File:                     72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa (raw, json)
Hash identifier:          wuE2tYrt/VVO045ehpMKxigGVF2w7XZK2KuT+A66rqE=
Subject key identifier:   CF:A9:33:C3:68:3C:36:53:62:51:B6:A5:94:1E:4C:8E:3C:FE:C7:2F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094F7B7997D0E4B2EB47380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        104.197.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f7:b7:99:7d:0e:4b:2e:b4:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=657960b8-c77f-4127-bfde-65b169729bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:7e:3d:a6:d5:d2:4c:c8:b0:7d:2e:94:d4:
                    70:04:d8:8e:c2:56:90:33:84:57:3b:2a:5e:66:be:
                    d4:2b:b7:85:6a:fe:ae:b1:17:eb:fa:39:2d:b3:04:
                    29:d9:ba:05:2f:c1:b7:9a:47:0c:12:6e:5f:6c:a1:
                    a4:65:f7:e5:f5:b7:a0:f3:15:97:f2:ba:c1:0a:41:
                    66:3f:9d:48:70:b4:0c:81:7a:14:67:9b:ed:58:42:
                    59:e2:d7:af:3c:51:ce:2e:fa:a4:d2:9e:45:35:15:
                    93:b0:c8:42:2f:b6:f1:b2:7d:c5:f7:fa:68:3d:1a:
                    04:25:91:ba:94:b3:b8:e9:e3:74:06:1b:f5:de:6e:
                    25:30:7e:48:34:06:3e:26:c1:c9:44:c7:a5:ae:f9:
                    5e:77:0d:ea:96:3c:33:58:2b:67:0f:1a:2e:4c:00:
                    3f:ac:71:39:98:6c:78:91:f1:6d:7d:73:37:2c:35:
                    5a:1f:89:a6:ce:68:f3:fb:51:52:87:18:f9:6d:26:
                    b6:19:82:08:0f:eb:b4:60:6f:28:22:ac:8b:11:d4:
                    af:e6:20:f9:a6:a4:e8:a5:70:ec:86:79:09:a4:e4:
                    19:09:37:36:7e:50:d1:dd:19:0c:68:6b:21:53:91:
                    62:e5:af:f7:35:63:63:31:bc:7e:d4:bb:9c:93:85:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:33:C3:68:3C:36:53:62:51:B6:A5:94:1E:4C:8E:3C:FE:C7:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:3b:df:c2:7f:8a:0c:5b:91:ad:ef:8a:7f:be:92:7b:e1:
         a3:21:70:fb:e4:ab:f2:76:c7:cd:ed:00:48:e3:3e:29:14:f7:
         bf:7b:29:57:11:4e:b9:85:e0:8b:1c:ad:dc:cd:e0:62:84:ad:
         9d:b1:50:0d:b9:6a:50:e4:4f:96:2d:1f:cf:63:cf:dd:78:bf:
         13:df:88:91:ad:c5:87:8d:ec:b9:f4:08:51:4f:12:b1:64:92:
         ec:a7:d9:c0:a9:76:16:83:f0:4a:d3:e8:c1:a5:86:09:81:00:
         fd:aa:4d:ba:70:6b:f7:f1:96:85:b1:c6:f4:a0:01:f2:42:ee:
         5a:41:88:10:60:50:f2:93:8e:bc:97:c9:21:9c:e2:3d:67:ef:
         2a:b5:43:75:85:36:3f:e7:cf:3f:bc:25:5a:31:c0:c9:e4:32:
         c2:b5:74:57:2b:fe:26:8d:18:a7:81:4c:3e:c3:7b:4d:6e:4c:
         8d:f9:0f:41:f5:d5:a5:f2:c9:fe:ce:1a:2a:c2:3b:e7:89:53:
         3d:f3:99:dd:0d:ce:ff:34:03:bd:4b:2d:be:b7:96:d2:12:db:
         31:76:cc:76:82:e1:13:2e:21:4c:98:bc:b8:38:b5:19:24:9d:
         1c:bc:08:44:bc:5d:99:eb:bb:27:70:92:88:b6:2e:1b:25:a9:
         38:33:08:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:07:15 2024 by rpki-client on console-ams.rpki-client.org