Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa
File:                     ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa (raw, json)
Hash identifier:          hTLcJ+hMh8sCTbj9W1T9hgBaA71YEEpPZAn/Nq7pJZo=
Subject key identifier:   9D:E7:D3:74:09:23:E0:54:8F:A9:23:B9:8E:2E:65:5C:35:11:E0:01
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285845AC88C91A4630CBB54783BD00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     19905
IP address blocks:        104.218.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c9:1a:46:30:cb:b5:47:83:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=45bc88f7-708f-4b3e-94be-4fa09207aeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d6:68:15:c9:86:ec:4e:d9:41:60:84:79:1f:
                    03:fe:7b:d9:4a:bf:f0:17:6c:84:62:2c:1f:f7:d7:
                    49:8d:58:6b:e7:34:ad:d1:9b:f2:c5:0a:76:cf:f2:
                    10:bb:05:e3:bf:0c:91:1f:52:a4:5d:24:62:a8:dd:
                    42:62:d4:1b:9f:ab:02:f9:49:05:0f:e4:ec:44:4f:
                    b5:e6:39:a1:e9:30:55:eb:5c:63:36:ea:08:2e:cf:
                    d0:46:e1:c3:d8:ac:d7:1c:95:4e:e6:c6:4b:2b:b4:
                    e9:89:65:5a:90:08:33:e6:cd:21:c7:0d:78:00:cc:
                    76:36:0d:81:41:6e:7e:11:67:a6:6d:6f:ec:aa:2e:
                    33:ee:6e:02:cd:c6:ee:7a:93:fa:9e:85:e1:71:c3:
                    c2:a6:35:92:a0:fa:24:b9:e7:07:4b:cc:9e:56:36:
                    6e:2d:44:d1:94:3f:17:b1:77:7e:f6:da:40:a1:4a:
                    50:b8:ef:40:3d:ff:55:b8:e9:37:93:e1:74:f7:e8:
                    6d:78:0c:88:e6:a6:13:c9:38:a1:10:12:f5:a3:20:
                    5d:de:04:e2:e2:16:86:8f:aa:bd:c8:5e:3e:c7:09:
                    dd:af:fa:61:14:1f:51:71:fe:4d:c7:ae:7d:0c:43:
                    c6:81:42:83:4b:35:89:5e:7a:0d:1f:e8:98:aa:18:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:D3:74:09:23:E0:54:8F:A9:23:B9:8E:2E:65:5C:35:11:E0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:23:f6:f9:32:d1:b7:fa:7d:25:2f:42:1b:8f:c2:c6:5b:16:
         62:a0:3c:57:3b:b1:4b:62:3f:48:02:2a:7f:08:ba:f0:e8:46:
         09:99:92:f6:70:a3:cb:d1:1c:54:c2:da:b0:4a:d3:15:27:29:
         61:49:6e:71:bb:ad:55:9a:93:a5:c5:7d:90:11:25:b8:b6:e4:
         79:e3:ae:93:47:39:ac:97:50:7a:f4:4e:25:bd:69:c6:66:47:
         3e:04:e4:d4:aa:7a:1a:dd:20:5c:0a:63:3f:33:62:00:60:e1:
         eb:00:db:93:bc:62:d7:67:a8:cf:07:d4:5c:b0:8f:de:94:15:
         6c:72:56:65:9d:a7:d4:58:bc:7f:31:4a:e9:dd:ca:f7:31:64:
         e5:24:79:17:63:e2:cd:49:13:50:d0:2b:4b:da:a3:b7:30:c5:
         cb:c7:6f:e1:99:b6:83:5c:cf:43:85:e2:bb:93:27:c7:04:ce:
         5e:17:86:f1:48:f3:25:8e:89:51:42:79:b0:be:f3:07:97:e0:
         08:9a:31:a6:c8:5e:d2:fc:4a:c1:ce:23:63:6a:35:f9:00:a1:
         5a:75:f7:90:43:cd:6f:0c:6a:7f:ac:e6:ff:96:cf:6c:74:40:
         08:22:07:82:97:c7:2c:e1:ef:8c:f7:5a:7e:20:ec:d4:93:94:
         54:65:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:51 2024 by rpki-client on console-fra.rpki-client.org