Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
File:                     0a661bd3-50cb-3aaa-b872-5572157cf927.roa (raw, json)
Hash identifier:          vx1TERO8uPzk+2cDjd6f+BWTUjNiC1Ixz1AAH7SrAtA=
Subject key identifier:   3C:1E:74:0D:66:F4:99:4E:EE:61:27:13:B2:48:F0:9F:3A:52:4C:EC
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285844EA9FEE3B058C1D045C416B80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     11325
IP address blocks:        104.251.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:ee:3b:05:8c:1d:04:5c:41:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=2f199645-f7f0-459a-992e-15fcd32b5992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:8f:5c:d6:7c:f6:57:a7:56:71:3f:af:2a:
                    fb:f2:2d:a0:e4:b9:56:12:b8:1f:19:bd:72:f3:96:
                    73:5b:36:2f:25:7d:bd:3f:ac:ec:90:5c:94:94:3a:
                    09:13:35:36:9c:e5:b0:a3:51:db:fc:82:30:97:4d:
                    c2:bc:2d:f7:ae:8f:10:19:b5:54:40:8d:e5:85:60:
                    96:96:ce:71:bf:81:ba:9a:cb:5f:8a:76:0c:58:de:
                    b3:8b:e3:c2:54:2b:1f:3c:19:3d:50:1c:ff:be:d4:
                    3d:44:44:54:f9:bb:9c:63:6f:a3:fd:cc:d1:4c:43:
                    ca:65:9e:a3:61:df:3f:07:58:32:90:89:be:74:8b:
                    68:37:a7:60:2b:f0:7b:c1:f6:21:ad:65:9a:8e:56:
                    56:7b:9b:ca:ab:bf:37:f4:ee:5d:f7:19:96:29:93:
                    01:26:19:72:0b:53:c7:5f:82:85:a6:b2:f6:91:32:
                    ab:c1:94:b7:86:c5:15:05:39:0a:28:de:3c:e8:15:
                    85:2c:f5:7e:bb:59:84:42:3a:63:51:6c:d6:08:4a:
                    ff:62:90:03:6f:b4:ae:f3:e0:4d:80:65:8b:39:35:
                    58:ff:9e:15:87:1c:21:bc:56:76:41:e7:46:72:87:
                    ac:bc:98:be:78:4b:3b:47:2b:14:a6:31:7c:e6:f3:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:74:0D:66:F4:99:4E:EE:61:27:13:B2:48:F0:9F:3A:52:4C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/0a661bd3-50cb-3aaa-b872-5572157cf927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:7b:0e:16:94:2f:80:e4:10:8b:ca:90:47:b2:a2:3f:90:
         2b:40:cb:69:d1:bf:1b:85:c6:0b:7b:61:a4:ba:17:5a:a9:67:
         d2:a5:29:aa:8e:bb:92:1e:3c:0a:16:9c:25:87:6a:60:c4:7e:
         51:52:b7:dc:6a:9e:14:9e:2f:e4:75:4f:e2:8b:4c:5c:16:e8:
         b0:98:32:09:fd:c8:d3:26:4c:5b:27:54:f2:76:3b:1e:ec:89:
         62:af:f6:99:d7:b9:2d:10:85:ab:56:03:6b:44:81:bd:8c:e5:
         8e:17:bb:28:0a:3a:5d:de:7b:90:32:3e:fc:3d:26:20:08:77:
         54:09:27:af:52:65:3f:31:ce:36:1b:e5:cd:86:d1:e4:19:bb:
         53:65:52:a5:d2:ff:fd:02:06:0a:9b:23:39:c0:49:62:a0:fa:
         7e:16:ba:c3:5e:2b:6f:17:df:77:3c:37:49:c5:8b:4a:2c:e6:
         89:c3:6e:9c:49:02:bb:98:90:b2:6e:97:3a:90:9a:f6:a1:da:
         af:5c:01:f4:1f:3e:58:fe:04:da:eb:20:07:74:01:ae:40:34:
         d0:8c:30:14:97:a1:4b:43:88:5d:66:72:cc:d3:eb:87:b6:12:
         55:45:b3:53:2e:75:4c:f2:c9:a9:8b:79:2c:ed:86:7d:43:70:
         51:ab:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:42 2024 by rpki-client on console-ams.rpki-client.org