Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa
File:                     54ea31e2-f508-38e4-965e-d1d16af3f58e.roa (raw, json)
Hash identifier:          sd+3ahwESGYguhtNC4Kp0vgnOJSbKv5X4aYo8wO/550=
Subject key identifier:   62:52:D5:34:D1:10:B0:98:17:1B:2A:CF:75:AA:58:9C:EF:40:42:C5
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474C80B96EBF22047645E0AA20
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     19437
IP address blocks:        104.254.235.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:b9:6e:bf:22:04:76:45:e0:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=ce9bdf69-5a4f-456c-bebe-51d39c424b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:bf:d6:f2:43:14:df:63:bd:7d:50:35:19:
                    4f:3a:be:85:06:37:25:e3:e4:f4:b4:37:c1:d1:e5:
                    67:74:57:9e:51:96:30:2c:cc:81:33:4a:98:0c:36:
                    5f:a4:9d:55:bb:1b:62:0f:55:1e:1f:55:13:3f:a0:
                    cf:ba:80:52:fe:47:60:18:fc:8e:dc:0b:70:2b:38:
                    a8:d3:e1:b3:46:bd:da:6d:3f:67:92:51:86:df:25:
                    ec:1b:3e:80:db:a5:8f:c1:d7:d4:10:15:7c:e5:26:
                    a5:65:77:19:a6:f6:38:eb:94:c4:f9:29:d6:bc:1b:
                    b3:8d:76:41:3b:b8:e4:16:41:5f:1e:87:aa:cd:86:
                    3b:6c:b5:bf:4f:a8:3c:4a:a6:64:e8:d7:7c:8b:51:
                    6a:d8:65:74:39:52:ba:cc:d8:ce:f5:89:c5:95:47:
                    0b:54:18:be:c2:2a:3e:af:e0:b4:e2:f9:a4:b8:b5:
                    9b:9a:04:b9:45:21:bb:20:01:ba:c8:6d:3c:05:00:
                    27:c8:5e:37:ab:f5:4d:c8:6e:33:cc:79:f3:6d:53:
                    a0:e8:47:e3:56:06:4d:07:57:ca:81:59:fc:bf:e1:
                    09:07:eb:c6:a8:07:e9:19:76:9a:1b:67:23:df:01:
                    0a:9c:c5:72:89:22:61:ce:18:33:5a:6c:95:66:b1:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:52:D5:34:D1:10:B0:98:17:1B:2A:CF:75:AA:58:9C:EF:40:42:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/54ea31e2-f508-38e4-965e-d1d16af3f58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:15:b8:9f:0f:b5:99:6d:48:17:f9:d4:70:af:6e:ad:fa:2d:
         bb:e4:47:64:03:a6:dc:d0:e7:f3:36:4f:a9:41:47:c0:33:5c:
         b4:91:94:c1:4c:71:4d:cc:d5:cb:44:77:2a:c9:99:cf:96:20:
         32:c8:51:09:65:3f:de:43:7d:ec:cd:af:35:81:3d:8e:1d:c3:
         24:a1:9c:e0:30:54:bb:e9:be:ba:8d:ce:ce:d5:d1:af:23:d7:
         b0:96:94:86:18:58:87:5f:f6:df:ee:83:c1:17:ee:e8:99:f9:
         f3:e9:30:4b:e2:db:d9:42:46:42:be:9c:43:97:02:22:e0:82:
         18:49:5f:25:97:27:80:29:38:e6:06:b2:87:68:52:da:a4:2d:
         64:e5:97:01:c6:5a:f5:d7:42:47:f6:4a:5c:4e:b6:fd:d8:74:
         a7:54:32:64:8c:2b:e9:0c:26:a3:91:16:78:0a:5a:98:63:10:
         3d:79:df:5a:24:e0:14:2b:e4:43:57:6d:e3:9c:c1:d3:2b:62:
         dd:e3:d0:59:b7:ac:45:cc:0b:c2:28:7b:9c:42:8b:a4:f0:ba:
         0f:d0:20:f1:12:56:17:50:77:e4:fb:91:a2:05:6e:15:55:1f:
         3d:5c:cc:2a:09:b9:46:23:a8:03:0b:ea:ef:0f:ec:e8:66:79:
         91:1c:5e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:43 2024 by rpki-client on console-ams.rpki-client.org