Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
File:                     18fb001a-970c-3cab-8188-d1568ca51609.roa (raw, json)
Hash identifier:          UdJ/9bpRldAI2UKteJ9H4C6U+w4lKo8IN0HxhSCjw5g=
Subject key identifier:   53:08:E3:00:92:D6:CE:76:1A:AB:26:D4:FF:A0:84:22:85:E4:35:10
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845B21E29B37B1173FFE84B57A0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     18978
IP address blocks:        104.218.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:29:b3:7b:11:73:ff:e8:4b:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=65b7b737-c90e-44c4-95f8-609408efe161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:1f:14:29:e3:ec:08:fc:75:f5:bb:c1:ad:
                    2f:42:77:46:f4:8e:f9:e1:8a:c4:b8:af:45:fb:13:
                    85:48:8c:cc:11:e6:04:7e:77:ef:cf:38:65:b7:df:
                    e9:27:64:64:bf:b6:bc:1d:cd:13:19:49:2f:93:a8:
                    47:75:db:6b:e6:84:c9:63:62:b3:fd:97:47:94:46:
                    dd:6e:5f:d4:9f:63:18:59:3f:48:6d:61:b4:8d:55:
                    f3:47:ba:9c:ea:4d:2c:62:10:27:75:c0:37:b3:c5:
                    82:68:7a:87:2e:0e:ac:cb:7f:3c:5b:ce:90:c9:6e:
                    76:a8:07:c3:59:f9:46:6e:86:ec:36:50:79:fc:8b:
                    39:1c:d9:bb:cf:5e:59:a6:ef:23:04:c5:8e:b7:88:
                    2b:0c:57:3f:7d:0e:8f:a1:6c:3b:3c:17:35:56:f3:
                    b7:16:bd:42:32:fb:32:34:86:58:19:41:ae:8c:5e:
                    4a:a0:7e:b1:e7:2b:0b:2b:7e:98:d9:98:e1:e2:6e:
                    35:04:e7:43:68:aa:71:2f:bc:db:1c:38:96:a8:27:
                    d2:0a:80:59:7c:94:1d:1e:0a:df:28:25:f9:b5:f1:
                    ed:68:3d:85:62:ba:6a:16:4e:2b:0d:93:39:67:39:
                    b5:5f:fd:b8:91:5e:52:e8:65:7e:dd:96:c1:cd:c8:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:E3:00:92:D6:CE:76:1A:AB:26:D4:FF:A0:84:22:85:E4:35:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:bc:98:db:c2:fc:76:00:de:59:31:9a:6d:04:86:3d:4a:
         fc:1a:61:d2:43:fb:5b:b2:05:ab:99:b1:d3:5f:c1:a8:45:b1:
         5f:a3:69:f4:88:8e:f1:06:e7:7b:1f:e1:c3:5c:d9:2f:00:ea:
         6d:7c:3b:8a:90:0c:06:dc:d1:28:9a:81:0f:c8:c9:d2:b7:a3:
         df:7b:f8:71:d3:83:56:48:40:d7:26:3c:d0:b3:11:8b:3e:25:
         bf:ec:c5:89:7a:80:d4:66:b9:8e:32:98:2c:75:74:f8:2b:b2:
         cf:a0:79:4c:20:5e:6d:9e:dd:2b:6a:f5:a0:ca:98:55:72:ff:
         7d:e0:c7:87:0f:cc:ba:d1:73:68:81:97:64:ab:00:63:13:e1:
         fe:fb:cc:c3:5b:58:8c:33:75:6d:fc:2f:4e:09:c9:b5:46:57:
         d7:84:da:e3:6a:89:a6:bf:62:90:0f:4b:ed:de:10:ac:1f:ca:
         06:cf:9f:41:8b:8d:8c:99:f6:cf:73:df:d7:8a:f1:50:fc:8f:
         61:b8:9c:c0:c6:56:7f:c1:f5:b8:a9:9c:b1:e9:65:d5:90:07:
         93:95:3c:db:f5:02:55:31:08:74:1c:42:74:61:91:de:81:3a:
         64:35:ef:76:33:98:82:55:b5:52:22:01:86:85:90:fe:db:98:
         53:f8:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:36:56 2024 by rpki-client on console-ams.rpki-client.org