Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/756dd887-88da-36d1-9dcf-a1db2333d0ac.roa
File:                     756dd887-88da-36d1-9dcf-a1db2333d0ac.roa (raw, json)
Hash identifier:          xYCuSS76FM6J6Ug424YO1rBYBW6dlPILS6wq3d+0ZJs=
Subject key identifier:   1B:3E:1D:79:D5:70:F5:EA:A6:4F:84:E3:EF:56:C4:B3:00:A0:73:39
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F43285847CA3F7EA8CD041AB585D10A00
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/756dd887-88da-36d1-9dcf-a1db2333d0ac.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     0
IP address blocks:        104.255.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7e:a8:cd:04:1a:b5:85:d1:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=36a294c0-3d9e-4468-8b00-303088428810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4d:27:c8:f0:9f:2d:ae:c4:4b:94:1e:59:74:
                    d8:0d:2e:92:ef:8e:6b:97:cb:6d:4f:33:4c:9f:f4:
                    bc:3c:f8:b4:e0:0f:b7:80:f6:96:a6:97:fa:ec:51:
                    58:8d:23:54:2b:28:30:94:67:83:1c:51:17:7d:bc:
                    f6:c2:88:0b:7f:eb:2b:6d:e0:61:d4:c3:1c:ab:63:
                    95:11:0c:20:53:ca:e7:6d:42:ab:66:50:66:17:0f:
                    45:96:37:95:58:be:13:b0:71:8b:41:99:2b:d6:f6:
                    6d:35:09:69:8b:2c:53:be:b3:f1:f3:55:59:ae:81:
                    7a:6e:30:0e:36:94:61:df:fc:45:7c:25:bc:2b:e8:
                    22:8d:9e:53:eb:fe:89:7a:6a:b5:b1:34:37:f0:5a:
                    17:7f:69:35:d9:e0:38:a0:98:ef:cb:32:5b:48:81:
                    0d:b1:38:4c:1f:74:1d:f6:c4:b0:34:d1:68:bb:90:
                    6b:d8:42:76:1f:89:fa:b1:6a:5c:3e:3d:c8:fd:09:
                    2b:d0:66:4a:5b:13:5f:66:3a:87:87:c1:57:28:12:
                    9b:69:8f:ef:84:74:f2:23:42:b9:1d:c6:74:ab:dd:
                    cb:3b:9a:39:dc:ed:fe:8e:00:c3:64:46:1e:09:04:
                    8e:39:54:d3:65:21:de:9e:fc:d5:11:97:7d:a9:53:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3E:1D:79:D5:70:F5:EA:A6:4F:84:E3:EF:56:C4:B3:00:A0:73:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/756dd887-88da-36d1-9dcf-a1db2333d0ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:16:b6:ab:46:b6:fb:76:21:69:35:4d:97:4c:28:59:1a:42:
         c2:3d:9a:2c:25:70:70:d6:7e:08:2d:74:e1:4a:ff:3d:b4:f4:
         7e:d8:77:e3:f7:86:2f:9f:d1:a6:eb:9e:17:77:db:d3:8f:31:
         74:50:5d:ed:f8:d6:c4:a8:57:7e:74:2e:9b:94:27:52:86:3f:
         f2:1b:1b:6c:fb:cf:8f:a8:ad:da:a8:be:9d:60:f8:6a:24:12:
         68:2d:e4:d8:8e:97:10:0a:b1:8b:17:bb:b6:bd:7c:fa:a7:cc:
         0f:ac:b5:93:a9:fd:45:30:33:78:eb:85:13:79:00:ba:8c:75:
         64:22:b6:70:c1:5e:01:87:b4:74:b7:88:92:b2:b8:bc:57:14:
         8a:d1:2d:1a:c5:69:6b:65:98:bf:59:30:0d:f3:70:65:17:2e:
         25:68:31:a4:0f:bc:aa:5c:67:db:b7:46:9e:5e:f2:8c:2d:15:
         ba:6e:9b:00:a7:96:2a:f6:39:3c:92:a9:ea:0a:d2:9a:e9:88:
         0d:f0:18:3e:4f:6c:e8:22:ea:56:1e:e2:af:35:57:30:4e:08:
         9e:96:a0:50:f0:99:16:50:fb:11:49:72:73:b8:17:4c:9a:b6:
         f4:fd:15:b9:a0:e1:51:7b:c1:5d:29:54:e7:7b:eb:e7:34:2e:
         5f:ce:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org