Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa
File:                     c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa (raw, json)
Hash identifier:          p9y9bFSGvAbRxoBf44qC6zTtSlp79L+yIWX7wcCGlaQ=
Subject key identifier:   FD:CC:BB:27:DA:95:48:68:BE:F6:58:D5:3F:3C:F3:82:78:0A:3C:D8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285847E35F69D5233381D5657E9B00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     9009
IP address blocks:        104.251.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:69:d5:23:33:81:d5:65:7e:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=165787c6-bf96-4124-8f00-a3e0a7ac3754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:23:82:d5:6c:65:5b:fe:70:0a:a1:cc:65:
                    67:29:0c:f9:09:14:5a:78:44:54:19:29:f8:0f:6b:
                    90:d6:d0:b1:33:da:91:c4:ba:44:5c:3f:08:c1:87:
                    1f:26:a7:d2:93:4c:43:80:e9:16:c0:a1:34:3b:cc:
                    6d:fd:e8:f3:e9:bc:5d:29:60:0b:74:fd:d1:21:66:
                    ae:9e:84:f9:ce:14:03:b0:63:b7:af:15:44:58:01:
                    20:e4:ca:bd:f7:81:0d:e0:76:9f:13:f5:ac:5c:0d:
                    3c:50:0c:1e:0b:53:d5:a8:14:d6:e2:6e:6d:8b:5c:
                    81:a2:f2:34:9a:b5:38:2e:9a:d6:f0:3b:85:96:2e:
                    24:eb:19:da:c1:5d:45:b2:e9:ad:92:82:2c:15:30:
                    c6:ab:40:7d:65:a0:81:86:05:4f:fe:8b:73:21:68:
                    71:54:53:b8:61:0c:b4:70:ed:e5:9f:22:5b:68:bf:
                    c9:7b:13:b4:90:e6:af:dc:45:ca:67:80:2c:48:9e:
                    68:24:7e:56:41:f3:31:ed:e0:47:12:5e:43:dd:9a:
                    7b:70:20:7e:25:2e:46:be:50:36:03:68:b1:ab:1a:
                    0f:a4:3b:81:af:cc:a2:11:c1:c4:fd:0c:26:4d:c5:
                    c6:42:6c:76:41:bb:3f:40:f7:d5:58:bc:d3:bd:6a:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CC:BB:27:DA:95:48:68:BE:F6:58:D5:3F:3C:F3:82:78:0A:3C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c8142691-c66c-3d3f-a909-53e3d1eea3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:72:a7:30:dc:4b:95:6c:6c:21:76:10:9f:b6:95:83:f0:30:
         5f:87:44:ea:07:8d:d3:81:f9:68:bd:a7:2c:83:06:40:d9:00:
         c4:41:f7:35:69:88:dd:69:bd:49:ae:3f:d6:00:4d:a0:2b:40:
         c6:e3:34:1e:fd:a1:7c:72:c7:5d:3e:e2:39:72:51:45:42:d3:
         4d:f1:0f:46:1d:72:1e:68:14:fd:0c:e4:9b:20:05:fb:f3:f4:
         55:71:dc:fa:dd:15:2a:f2:b6:f5:8c:27:5e:43:7c:64:e1:5a:
         af:19:52:35:0c:05:43:c7:96:6b:61:9a:64:bb:9c:1d:75:b6:
         cb:14:c7:b1:72:fd:91:ab:5b:3d:93:23:93:04:c2:aa:6b:f9:
         05:b9:d1:10:4a:3f:c6:46:4c:4a:7c:d4:2d:42:fc:ba:ef:29:
         da:b9:13:c4:af:cf:3c:b1:48:6a:8e:f3:8a:e2:48:04:91:5c:
         c3:90:59:4b:bd:ce:18:62:6a:0f:d8:ba:b9:5d:ea:26:f6:f5:
         76:c5:3e:99:05:b4:c3:e9:00:86:91:94:ab:62:81:2c:cd:84:
         16:b4:85:4c:6c:1c:41:fc:85:e5:cb:56:ce:0b:72:e7:02:8d:
         08:63:38:8b:86:9c:c8:ee:65:89:0a:6e:fd:13:35:dc:9e:9c:
         5a:3d:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org