Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa
File:                     b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa (raw, json)
Hash identifier:          AK8Yg+cKh/tfEE74TZWrrNjY0HX1uGpuTDXbL3o1ES4=
Subject key identifier:   01:56:0D:67:E4:17:3E:DB:74:E5:57:52:28:CA:EE:88:75:C7:D3:F9
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584554981C1E9D54685A9BEB2C60
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     399045
IP address blocks:        104.167.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1c:1e:9d:54:68:5a:9b:eb:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=5b41ccf0-f175-4ca5-8dd7-62b63cafd2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:9a:c4:2b:01:8f:2d:1b:ff:b7:c3:cc:93:
                    76:f0:e8:da:45:62:48:f7:f6:8a:1d:f5:e6:66:ee:
                    3c:fc:df:37:31:04:c6:d4:65:34:e3:16:4d:74:4b:
                    aa:2d:48:4a:05:7e:21:7f:a6:ae:52:8f:eb:c9:f4:
                    57:37:e5:30:51:4b:6d:5a:8d:07:b0:4d:ab:72:93:
                    cd:ee:99:70:86:20:4c:63:81:d2:75:fe:26:46:8f:
                    b5:c3:56:99:71:3e:44:e0:b7:02:5e:3a:51:ab:b3:
                    bf:67:1d:de:1d:f7:14:99:d6:b8:80:a5:6f:9c:2f:
                    08:97:d6:6f:92:28:f6:d7:db:52:0c:88:04:de:80:
                    dc:06:a4:6b:58:80:23:a1:00:6d:5e:02:76:6a:9a:
                    de:e4:38:74:81:6f:18:79:a3:50:4a:f4:b7:1b:20:
                    a1:20:e1:fe:d0:79:af:b5:dc:e7:77:e4:46:1d:b2:
                    f8:e8:fd:a0:23:41:72:26:6c:c2:12:60:c4:7c:bd:
                    0f:20:99:b1:1a:2a:92:cc:12:65:45:c4:5a:3d:30:
                    38:76:da:25:e5:fc:ef:67:23:45:fa:21:90:d4:93:
                    d7:fc:bd:c8:ad:3f:c8:9b:ea:0f:21:6f:23:85:a6:
                    76:ae:48:d7:fb:33:6b:25:70:91:1b:19:42:59:6b:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:56:0D:67:E4:17:3E:DB:74:E5:57:52:28:CA:EE:88:75:C7:D3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9d:aa:81:6b:48:92:76:54:f6:bc:97:18:3f:33:82:6e:6a:
         a3:cf:db:5e:f0:86:2c:81:f2:09:32:04:8c:39:e7:15:13:c0:
         f2:37:09:1e:af:07:0a:67:4b:ba:3e:9b:c1:8e:15:58:d0:e6:
         c6:75:d7:a1:df:ba:0b:1c:c1:e7:c7:01:42:7d:a1:23:31:65:
         c5:f4:38:78:2a:33:36:59:e7:f9:e1:45:ad:88:6b:e1:aa:98:
         f4:8b:c9:72:b1:f3:f4:7a:e9:62:24:c8:61:99:f8:4f:39:d7:
         3e:f5:ee:19:03:11:b3:5f:78:db:2d:38:16:3d:6f:4b:70:98:
         6a:52:e6:b6:98:dd:e4:d6:65:43:ae:79:12:d6:9e:04:03:46:
         30:17:22:73:95:52:b7:a0:7a:12:ad:18:60:34:cd:3c:82:ae:
         53:fe:50:fe:be:cc:d1:ba:43:45:4a:06:87:e9:6f:f6:33:d4:
         35:ef:69:a9:b6:25:33:86:c7:9a:3a:45:2d:71:37:3a:cf:9e:
         ee:a3:83:14:8c:77:22:cf:09:59:43:7e:fa:50:2d:f7:3e:fa:
         35:4f:bb:21:8a:9d:80:6a:ca:e3:1d:d8:de:b4:ff:70:90:1f:
         9d:57:c6:2b:aa:3d:35:52:cb:6d:e1:1e:93:6f:48:fe:58:0f:
         02:00:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:28:07 2024 by rpki-client on console-fra.rpki-client.org