Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
File:                     d8dc86cb-161f-3995-8d99-dd240df2a645.roa (raw, json)
Hash identifier:          EkKYGSSVtw2nlJp8xg5SKhgoEkgvvLEvpLc6GQT+N70=
Subject key identifier:   91:C1:46:44:10:BD:E2:E2:76:2F:1A:9C:13:29:31:E5:40:1E:6B:70
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858477230E7E8EDB7BEAF3F1DA6C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     23470
IP address blocks:        104.251.85.0/24 maxlen: 24
                          104.251.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e7:e8:ed:b7:be:af:3f:1d:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=1d19230b-a2e5-4d0a-99a0-5ae3e7405c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e1:9a:0f:02:e8:cb:a7:d4:66:87:a2:0d:16:
                    57:36:ca:39:0b:d8:b1:30:35:9b:fd:03:d7:f6:3c:
                    10:18:eb:76:11:fa:b9:4d:0f:cc:87:79:d2:ef:54:
                    70:15:b5:9a:74:5b:9e:a9:c1:c9:cb:51:78:a9:d8:
                    21:dd:0b:4b:85:5d:26:1c:a5:83:fb:ef:a4:56:28:
                    d0:94:53:c1:46:61:8c:ae:87:7b:56:36:64:d1:ec:
                    c8:c1:90:ae:3a:8f:fc:37:4c:d0:5f:d9:01:54:55:
                    a3:ea:c6:cf:fb:bc:ea:f2:8e:20:a0:79:9f:10:0d:
                    38:4b:89:24:bb:94:a7:b7:24:f6:a5:1b:ca:96:c4:
                    18:97:3e:fa:d6:0c:8d:0f:e6:a1:14:7f:e0:87:f7:
                    bd:70:b8:b6:26:d0:05:b7:ed:68:37:cd:91:00:3d:
                    a2:ec:6d:20:82:4a:72:66:4b:eb:2c:66:6b:05:83:
                    62:74:af:ef:2f:49:24:e8:69:78:13:5a:7a:e5:4f:
                    fc:c3:f8:cf:90:35:7e:2f:03:8e:35:33:38:63:f9:
                    72:6c:b9:93:b1:18:c0:52:cb:d2:14:18:fb:1a:92:
                    88:55:aa:f5:98:a7:d3:3b:ae:4f:75:04:48:0b:27:
                    12:20:01:91:a3:34:64:2c:b6:e2:8f:b4:08:ef:eb:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C1:46:44:10:BD:E2:E2:76:2F:1A:9C:13:29:31:E5:40:1E:6B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d8dc86cb-161f-3995-8d99-dd240df2a645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.85.0/24
                  104.251.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:66:78:2f:b5:9f:6e:c8:5c:35:98:1e:bb:2e:97:df:e2:c7:
         0a:15:a7:97:ae:68:30:7a:5c:3b:e7:2a:74:ab:a2:32:a9:a7:
         a4:a9:dd:10:e1:62:b1:98:d4:42:43:fb:64:c2:14:09:78:a5:
         66:6a:f2:a1:d3:e8:e1:8c:af:1d:93:cc:64:9d:8b:7d:e7:65:
         a0:de:17:9d:86:47:5b:26:6a:d1:c4:6d:62:fb:20:ad:dc:bc:
         42:a7:6b:b6:3d:5d:00:04:6d:41:3d:57:95:ac:7c:f4:c7:c2:
         c7:4a:4a:df:19:a9:35:56:77:e2:b8:56:e8:34:c5:fe:54:fc:
         f3:10:18:ad:91:48:f8:0e:23:0c:f1:8a:03:21:65:c4:9d:7c:
         04:da:21:4f:e3:35:fc:ef:74:a1:fe:f9:82:fe:9b:92:0d:c7:
         d6:6e:7f:18:6c:b0:10:48:59:39:52:d9:b0:e9:69:c0:88:d8:
         d1:a0:9e:fc:2c:63:9f:a7:4d:5f:45:48:de:b1:b5:25:5c:74:
         f2:5e:02:05:01:f0:75:2b:49:47:04:4b:bf:9c:a1:f6:38:41:
         ab:6a:71:e1:5a:07:b3:4c:ce:12:43:c9:20:9d:da:2c:8b:b1:
         be:94:6f:38:7d:16:3e:c1:1b:e1:cf:ce:91:dc:57:f2:06:43:
         33:3d:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org