Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/290923ec-8f0a-3726-92c8-c1b3df3f3199.roa
File:                     290923ec-8f0a-3726-92c8-c1b3df3f3199.roa (raw, json)
Hash identifier:          JQaVBWKnwTA0gEOMCWlznjF6L7ZjMB6uFfdh0dVu0rM=
Subject key identifier:   26:08:84:90:CF:99:36:E4:59:C3:18:EC:F9:7C:22:B3:86:1D:29:A4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858384FE67B8F2B30585D35B5A380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/290923ec-8f0a-3726-92c8-c1b3df3f3199.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        104.137.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:e6:7b:8f:2b:30:58:5d:35:b5:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=85df3842-4694-47c4-9d85-fb015480fdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:ae:36:60:65:76:3f:c7:9b:8a:6a:cc:26:
                    2f:36:d7:8d:cb:37:8d:26:7d:85:a8:27:a8:7d:6b:
                    ba:ed:e8:cb:44:64:2e:8d:c3:14:f7:ab:a6:22:92:
                    f1:f9:39:75:88:b1:3f:f7:60:94:4f:66:94:b4:0e:
                    2a:a5:fd:6d:5e:46:16:50:1d:81:89:6e:f3:28:8e:
                    a1:98:63:80:f3:c0:f4:db:e9:cf:3e:ed:a3:59:8e:
                    98:51:98:a4:8f:26:8d:08:ba:50:e5:b5:20:ea:e8:
                    fb:3b:f6:6f:7b:39:f8:3e:b2:d9:41:03:4e:f0:88:
                    2a:cc:56:3e:45:90:84:a9:5d:86:db:f0:58:04:60:
                    79:ec:fb:0b:b2:61:b9:82:5c:4e:49:f5:21:7c:19:
                    18:e0:f9:9e:27:fc:5f:65:f3:83:9a:83:6e:7c:3c:
                    c0:1d:ef:70:11:0c:ab:6d:c0:c0:21:8f:fe:6e:d6:
                    93:b7:73:64:dd:bd:3a:b7:96:d6:6d:7b:6d:df:06:
                    95:f9:1a:43:8f:c2:a5:b8:dc:da:8f:3c:e4:7b:17:
                    16:97:cb:85:5b:d7:17:66:5f:98:b6:ea:9c:41:84:
                    86:82:ba:9a:24:64:af:97:90:0b:a3:65:53:6f:e2:
                    0c:2f:c7:50:b0:20:1f:bc:bc:2d:e1:f6:90:43:e9:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:08:84:90:CF:99:36:E4:59:C3:18:EC:F9:7C:22:B3:86:1D:29:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/290923ec-8f0a-3726-92c8-c1b3df3f3199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:83:a7:29:2c:f3:5f:a3:48:7a:c6:37:1b:ca:c4:6d:e9:7c:
         9a:7d:bd:4e:1b:43:66:eb:41:a9:81:a9:bc:c5:1d:11:1f:3a:
         9a:e2:cc:3f:7e:44:67:8a:06:7f:59:35:94:75:b3:d2:76:06:
         e9:1c:68:6b:bd:e6:1d:cd:f3:92:f8:b9:cb:20:75:9f:40:1e:
         15:9b:4d:16:28:45:fa:9a:22:10:2e:65:0a:6b:ba:64:2e:cb:
         97:66:84:cd:4d:10:7f:63:55:3a:96:04:d0:89:4d:d1:2e:66:
         05:b3:f9:1e:d0:e9:d6:74:99:af:1b:71:ca:19:47:ea:30:fe:
         d6:69:46:70:d4:0f:fe:d8:b3:ff:d3:d9:6a:69:10:6d:9c:e3:
         bf:2e:04:a9:b8:8f:4a:31:32:46:7b:ee:e2:b3:b0:f7:24:60:
         f1:c5:06:5d:8b:48:cf:21:2a:56:ff:20:b7:1e:97:9e:34:34:
         7b:41:3a:5a:91:36:fa:96:98:ee:51:4e:ae:ea:30:11:ef:74:
         06:1b:47:ee:2f:28:d7:62:95:9c:b3:3f:73:74:a8:24:3c:fb:
         df:14:31:5a:b3:81:68:0c:be:9b:17:79:30:38:33:34:bb:6d:
         fb:12:52:ee:4d:7f:af:6d:e8:84:45:ea:9c:20:58:9f:f0:3f:
         9d:86:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org