Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
File:                     9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa (raw, json)
Hash identifier:          y0yLoJInEPxN/jaxl5TGdKMMNhA/nr0CSaekLMoCZV0=
Subject key identifier:   68:79:A1:C1:57:C3:F9:32:F7:DD:AB:5F:31:52:DD:FD:13:AE:06:D4
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F43285844F2FFF87FCCCA427A94D0EA80
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     7029
IP address blocks:        45.43.8.0/24 maxlen: 24
                          45.43.7.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f8:7f:cc:ca:42:7a:94:d0:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=ec4af355-ea85-45d3-92cb-97361807db5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:f2:09:df:49:2c:65:17:a4:46:cc:bb:b4:
                    1f:34:9c:6d:3c:dd:d4:e4:35:0c:5c:fa:5a:63:cc:
                    0b:6b:fd:53:b1:57:0b:b5:55:fb:20:bf:81:ff:38:
                    d1:52:6a:7c:a4:db:80:5c:1f:07:bf:43:55:e5:7c:
                    5f:99:88:8f:03:b9:df:60:bf:79:6f:b9:1d:cf:09:
                    82:8f:55:49:d9:b0:d3:59:05:22:e5:ea:08:60:f3:
                    dc:2e:a6:c8:bb:e8:26:a2:01:50:8c:b5:19:fe:6a:
                    70:e9:be:d4:75:ec:3b:a7:5b:f8:1d:70:ec:8f:b0:
                    39:44:4d:d7:70:6f:62:01:de:a7:82:c7:e7:69:68:
                    a3:67:5f:93:51:a9:21:ce:de:b0:e5:e3:1b:a9:81:
                    9f:07:e6:14:1d:d5:63:ea:5a:6a:b1:87:47:f2:bf:
                    0d:d2:1c:82:19:b1:69:cc:83:0a:a0:29:14:b2:ef:
                    58:2a:0d:a2:7f:d1:e8:1a:cd:54:33:ef:ba:c4:94:
                    f4:70:cf:95:b7:a3:6b:3a:ed:7e:74:d6:bf:b4:9b:
                    0b:3b:a0:0b:cf:aa:f8:2f:26:a5:b7:3e:e2:08:89:
                    bd:b1:e5:69:5a:27:ff:99:dc:cd:2f:e9:e2:67:54:
                    e4:47:84:3e:68:b6:7c:ec:00:02:6e:b6:d7:0a:0c:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:79:A1:C1:57:C3:F9:32:F7:DD:AB:5F:31:52:DD:FD:13:AE:06:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:ae:5b:ca:32:2f:e3:ff:06:6d:bb:8b:29:88:08:99:13:
         0b:ad:06:2d:f6:c2:4f:f8:2a:97:e4:90:44:70:c1:b8:6f:62:
         1d:8c:78:67:15:33:61:81:71:fc:69:d5:94:63:2b:27:51:47:
         9f:65:1b:5e:52:7e:8a:f5:31:4d:e5:e1:74:3d:e3:cb:9f:1d:
         65:a4:ea:44:cd:2b:2f:ca:ab:a8:0a:0a:45:6b:f3:9d:fa:30:
         56:14:e4:02:ef:42:ff:67:1d:10:0f:e1:9a:81:a1:96:3f:ab:
         a7:20:2e:cf:e5:a0:79:84:4a:89:0f:90:d0:92:05:8a:be:0a:
         60:a1:19:b0:97:b6:92:86:b5:bf:8b:93:19:db:9e:f1:a3:81:
         8e:f7:ba:a0:82:b7:4c:21:50:27:99:aa:0b:29:de:7f:0d:ca:
         01:af:48:c5:44:82:22:45:40:54:66:86:02:f1:7c:5f:20:38:
         31:ef:12:26:b4:1e:2f:e1:06:97:61:9c:fe:2b:54:4a:70:d1:
         ea:f1:84:66:2b:53:28:c9:91:29:55:11:ec:8f:48:f6:08:18:
         aa:e1:c2:83:a6:81:ad:03:ca:c5:13:3c:f5:24:b6:54:2b:9e:
         79:54:0f:75:2e:43:c6:a4:b1:4d:05:ca:ef:15:a6:27:7d:0f:
         05:16:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:24:41 2024 by rpki-client on console-ams.rpki-client.org