Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa
File:                     f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa (raw, json)
Hash identifier:          cR57rS7GgiYZPf5szSo6m7ITIylpkf63xJNHGsP29Ok=
Subject key identifier:   4B:B8:94:9D:94:46:97:A6:32:FE:45:A1:16:95:B2:7D:3D:63:D1:89
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285847DF2F4BC0892E9FA2852CF580
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     398993
IP address blocks:        104.233.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:4b:c0:89:2e:9f:a2:85:2c:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=c59da285-340d-4b1e-b4d7-68d2409b2391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:99:fd:b3:ea:64:2b:54:31:05:db:bb:bc:b3:
                    b6:30:42:9e:fb:de:46:e3:73:e7:76:fc:05:3d:1f:
                    1c:39:16:2a:06:7b:28:47:08:14:41:6a:64:45:cd:
                    0e:6a:20:70:03:a4:fe:b7:11:43:20:eb:ed:19:86:
                    04:98:a2:6d:42:4a:95:50:a2:2d:9a:cf:a1:8f:3d:
                    10:a4:cd:58:07:58:e5:f8:43:81:e2:18:c3:a1:20:
                    d9:f0:61:3e:06:75:e5:3e:64:5e:e9:21:30:c4:10:
                    83:6e:fc:80:3e:64:84:d7:59:9c:5d:cf:07:ff:19:
                    bf:03:cf:a0:be:d8:7e:74:cf:10:de:ba:2d:f8:d4:
                    af:b3:26:53:d2:ee:05:fe:fc:c0:40:7c:b3:6a:e4:
                    bc:62:bf:3d:34:39:19:0e:5c:49:a0:f0:98:3d:97:
                    7c:84:0a:9c:94:78:48:fa:66:4a:d3:0c:6c:0f:a9:
                    70:b4:be:a6:12:b0:3f:16:30:c7:95:a6:03:b1:72:
                    cb:89:0d:f9:b8:e0:87:dc:1e:64:36:3e:c2:bc:3b:
                    1a:18:0e:0c:5b:da:66:a7:99:57:c1:1b:99:f2:64:
                    33:56:ce:ea:1f:84:d3:b4:20:c1:82:f2:26:cc:01:
                    33:91:7d:f6:47:1c:c8:91:e0:c4:7a:13:36:4c:39:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B8:94:9D:94:46:97:A6:32:FE:45:A1:16:95:B2:7D:3D:63:D1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.233.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:51:c4:84:b8:78:5b:0b:bf:35:f9:42:1e:29:b7:22:e3:b4:
         0f:60:0f:2f:53:1e:74:55:f7:4f:dd:b6:80:5a:41:14:15:6b:
         08:11:7e:d3:c9:01:62:28:0f:9d:32:2b:97:43:ea:04:99:47:
         fa:ec:21:34:47:75:38:05:d2:b1:e8:21:a4:ae:9a:b2:8e:e5:
         fe:a0:d8:cd:79:86:d3:db:46:0b:a8:9f:80:ed:76:dd:52:81:
         81:e6:8e:4c:39:22:07:d5:13:2c:db:dc:6e:0e:aa:5a:a6:c7:
         5f:9c:d8:43:d7:9b:a4:6a:18:b6:c4:89:ef:b0:20:dd:09:23:
         c2:df:da:d0:4f:94:f0:2c:8f:6f:95:31:a7:1b:7a:6d:7b:9d:
         92:e3:6d:f9:de:f1:4c:08:df:ed:f1:dc:18:5e:d3:98:aa:73:
         c7:21:79:d8:4b:08:2e:49:1f:c7:b3:2a:45:04:9d:59:79:b5:
         0b:51:91:0b:2f:20:ca:95:96:f5:89:f0:29:f3:26:3e:4e:5a:
         21:ba:d8:29:16:1d:35:0a:c5:b1:9b:4a:0e:c6:38:2d:52:97:
         48:04:fd:69:ef:38:49:4f:82:57:71:bf:e5:7f:58:19:f3:fb:
         3f:fe:96:bb:e5:4a:25:13:1b:c9:6f:ca:c0:fb:f1:69:2b:fe:
         1a:26:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:40 2024 by rpki-client on console-fra.rpki-client.org