Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa
File:                     a1f65c37-2173-3530-83d3-e99277d5c356.roa (raw, json)
Hash identifier:          C1QHQhZ80FzbcQ68gJ2+wxItMZthT0jjwOCx4wF9gx8=
Subject key identifier:   C2:CB:9F:24:1E:08:F8:EC:74:86:F4:7B:85:AC:1B:7B:4C:99:3A:8E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094D82B596EDDDAA22F6840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        104.155.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:d8:2b:59:6e:dd:da:a2:2f:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=05faf514-59de-471b-b989-9ef988b2e331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:e2:9a:70:bc:ad:75:9a:7d:9e:98:31:05:
                    f7:f5:5b:4a:c2:d7:38:4e:c7:96:26:d1:be:26:c1:
                    45:e8:f8:2f:58:42:4e:3e:fd:15:81:26:39:e8:20:
                    02:4e:0e:43:ef:a0:14:dd:dd:4d:b5:4e:ba:da:a2:
                    0f:64:7b:07:ad:60:19:31:c4:60:1f:b4:f5:3f:c6:
                    56:d3:82:73:2f:d5:c3:06:d8:49:a7:a8:2b:ae:3f:
                    e9:2f:d5:f1:a0:03:46:ab:24:df:c4:c7:cf:6b:75:
                    35:2f:fe:cf:38:4c:dc:e9:c7:e3:fc:0c:c4:46:be:
                    64:9c:b6:07:93:48:b9:bc:60:37:6a:a8:18:b5:4c:
                    39:56:6f:b3:ac:32:34:d2:81:7b:0e:bd:0e:31:cb:
                    ff:44:f2:d1:e4:90:f9:22:13:04:ce:01:55:ef:9e:
                    04:7e:6a:63:55:18:cb:58:54:7a:56:93:9f:62:c4:
                    87:34:72:96:d0:5e:0b:b9:3a:e2:86:11:c3:7e:02:
                    24:e7:3a:8e:b4:3d:68:a8:51:dc:07:8e:5d:56:a4:
                    24:c7:9e:b5:e0:37:2c:8d:f1:9d:5b:ce:94:24:0d:
                    6c:e9:06:3d:bd:44:47:e7:b3:4e:33:9d:f6:ef:4b:
                    09:05:27:87:0b:c8:88:6f:fe:d4:c5:c3:34:59:82:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:9F:24:1E:08:F8:EC:74:86:F4:7B:85:AC:1B:7B:4C:99:3A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:87:33:ec:45:0d:55:24:aa:21:1f:1f:d5:37:be:b7:4f:
         7e:b1:5c:ab:06:0f:5e:0d:7b:2c:d4:66:40:60:f0:71:95:69:
         51:7e:3d:a2:9c:cb:59:2f:d5:20:7b:5d:4a:7b:14:5a:b2:7c:
         48:00:97:26:03:ff:8d:7e:64:cc:76:ca:36:a3:7a:f0:ea:7e:
         c9:02:f9:13:fa:56:58:84:d3:95:cc:7c:eb:d1:c0:d3:b5:ce:
         9b:66:4c:1e:47:dc:59:62:8a:e3:f3:32:bd:66:fa:92:36:95:
         d3:a4:a6:83:f8:ac:03:ae:19:bf:57:c1:c4:69:4c:29:de:ea:
         30:46:91:6c:4a:d3:eb:57:9f:ed:e1:18:2e:6b:d3:bb:6e:17:
         ff:e8:ab:f9:c1:0b:bb:a4:2a:db:18:78:dc:fb:e8:24:c3:fc:
         c4:10:2d:f8:09:b6:86:90:b0:b9:f7:65:68:5f:0c:4a:45:90:
         a5:75:c9:f2:72:78:d8:39:90:20:ac:08:da:6a:f4:1d:a0:99:
         8a:d3:22:24:64:f6:6a:1e:fb:01:00:4c:68:00:20:ba:a2:a3:
         8f:b4:99:6a:4c:69:da:a0:cd:95:46:ec:7b:ed:da:67:07:84:
         59:1d:87:87:e5:95:5d:df:23:ec:0f:99:74:cc:10:9f:4a:3a:
         6e:95:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:42 2024 by rpki-client on console-fra.rpki-client.org