Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa
File:                     1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa (raw, json)
Hash identifier:          om2Tj7Zxj48+9oOmTMDA6iQb0WV6gcD5ysAfRDLlxWY=
Subject key identifier:   0E:F4:36:BE:8C:DB:46:A8:FD:EB:C9:E8:37:07:07:5D:8D:4F:58:E1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584554981CF17D652582E38C2FA0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     46562
IP address blocks:        104.224.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1c:f1:7d:65:25:82:e3:8c:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=f58538e3-119c-4ce1-a472-30bb9d317ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:04:20:b3:e1:70:a4:da:28:f6:d9:96:93:33:
                    72:78:ad:d1:1d:95:38:de:c3:a2:f2:1f:6d:fb:7e:
                    f7:c5:87:f7:8a:20:5e:cf:0d:54:db:56:8f:c1:75:
                    cf:05:52:94:cd:e5:42:18:1e:31:c8:52:e3:88:c9:
                    b5:d2:3f:e0:80:ee:fe:d8:3f:d6:ad:2c:d6:70:75:
                    0a:3f:24:b7:c7:98:88:ce:33:c7:74:b2:33:0b:1f:
                    c4:3b:53:68:7a:f5:bd:53:fe:36:38:2e:41:01:2b:
                    4f:1d:a2:14:a3:f8:47:79:d0:37:69:fb:f3:9a:d7:
                    56:19:12:61:de:eb:39:29:cc:a2:16:7d:1e:04:8b:
                    c1:bf:83:cf:6f:9c:57:e4:f1:95:c9:9a:84:75:87:
                    9f:31:b4:b8:19:58:d7:c3:7b:77:46:ac:8d:a1:51:
                    30:74:39:66:31:d4:a4:37:09:6e:63:1d:02:b0:db:
                    b3:d0:2c:96:b4:b9:e8:72:d5:a0:95:45:97:cb:fc:
                    4a:25:4a:4c:1b:57:66:ab:75:2a:fb:0f:23:81:f0:
                    c5:38:2f:0d:b3:99:9a:5e:05:dd:3d:7b:c9:da:a4:
                    fc:60:25:99:21:97:c4:0d:05:db:eb:8b:20:6c:01:
                    aa:be:89:1e:1e:b7:b3:9d:14:3c:28:63:df:dc:c4:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F4:36:BE:8C:DB:46:A8:FD:EB:C9:E8:37:07:07:5D:8D:4F:58:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:6b:d8:dc:d9:de:a3:f0:f8:72:d6:e6:82:1f:ef:d1:e5:e0:
         dc:c1:57:d2:a3:cc:f8:2b:12:9c:ac:b6:33:ad:3c:ad:e5:39:
         36:bd:ae:b8:24:7a:a3:62:d0:c1:72:b1:48:ba:27:1e:66:c4:
         3c:a9:27:80:71:ea:b9:eb:ed:d0:94:3c:7a:b7:e0:79:c5:81:
         a5:45:40:54:ec:53:86:3f:62:1b:d7:22:86:fb:88:88:57:4c:
         05:eb:ea:0d:09:29:3c:68:d0:17:4d:c6:dc:26:d6:34:d7:1e:
         75:30:69:0d:52:57:5d:99:41:5d:e3:d3:f1:bb:23:bf:dd:e8:
         95:38:f5:38:1a:69:6a:ef:c8:4a:5d:d7:e8:60:c5:88:7a:39:
         29:c1:0b:fa:9c:93:1b:9e:b2:51:04:8a:b1:3d:d3:f5:61:45:
         76:64:66:2b:4a:ef:3b:29:7d:53:80:ef:ed:e9:5a:11:55:8f:
         41:5b:f8:e8:36:8e:8d:75:5c:de:32:f5:f8:23:a7:22:54:32:
         70:01:1c:81:b3:38:30:db:61:37:5d:1f:13:87:f5:9f:c7:3a:
         44:87:4f:c9:31:84:af:7f:99:69:6b:a4:a7:6e:32:a1:80:9c:
         78:09:ca:f4:99:db:f9:d2:3d:85:ae:ef:11:e0:ea:9b:6d:a3:
         25:dc:22:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:22:44 2024 by rpki-client on console-ams.rpki-client.org