Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa
File:                     b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa (raw, json)
Hash identifier:          N+vQBkfiUichrBpFLNzvQOptqexWT6tF0tu08d2awZg=
Subject key identifier:   64:36:E6:5C:3A:AB:EF:B2:23:08:C8:8F:A1:2B:AC:24:CD:54:43:75
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED00128EBD550912361BAC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        104.220.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:01:28:eb:d5:50:91:23:61:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=8bd9559d-de41-4bcf-a521-d89b93d8cb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:88:b8:53:f1:a8:69:92:af:76:d7:c8:11:
                    e2:92:60:ec:c9:19:b7:14:f7:cd:1f:b9:00:ba:84:
                    ea:61:19:16:e3:e5:5c:a6:1a:fd:e2:3a:3d:d2:ee:
                    ef:b2:c1:9a:c8:cb:16:4d:84:82:69:b7:a4:b7:19:
                    77:c3:b5:0b:c1:11:1f:d8:1e:3f:7b:e9:89:8b:f5:
                    a8:9a:b9:51:82:4a:80:8d:b6:75:c4:aa:7f:60:55:
                    ba:14:09:9c:2f:39:83:43:9f:bc:30:e3:88:ae:fc:
                    8c:7a:e7:51:d6:3b:84:83:4f:c1:b5:d3:95:98:13:
                    f3:f0:1b:06:93:af:c4:18:11:b9:db:d7:33:7f:ac:
                    f5:60:38:5e:ab:fb:09:b0:4e:86:29:ca:a4:3b:85:
                    3a:b3:a1:84:bc:38:c1:e2:06:de:e5:aa:e5:df:a8:
                    14:fa:02:0b:37:b7:b4:49:0a:7c:c1:b8:0e:a0:32:
                    8b:6c:86:56:a9:d5:04:e1:6e:bf:ac:1b:5f:51:ec:
                    18:68:da:97:46:49:3d:0e:af:d8:c2:c7:41:54:ae:
                    7c:64:4e:d2:e4:8c:21:c8:14:1b:2f:e2:35:fb:ce:
                    7b:d1:ff:95:b1:0e:7b:f9:e6:b6:e7:98:1b:a9:a5:
                    30:46:96:4f:5a:f9:86:ec:5b:20:cd:b6:b9:83:52:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:E6:5C:3A:AB:EF:B2:23:08:C8:8F:A1:2B:AC:24:CD:54:43:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c7:d5:2d:88:dc:f1:be:21:bf:67:2f:26:56:f8:1a:be:d6:
         b3:fa:ee:a4:6a:78:65:63:34:e3:f7:80:aa:ad:b0:49:eb:4a:
         11:73:5e:ab:51:5d:b8:17:62:ef:49:eb:89:2f:ea:b5:3d:83:
         54:d7:7d:c2:70:60:1c:40:57:6e:d4:6e:94:79:d6:cd:15:03:
         e4:9c:bc:e4:75:fa:58:30:f6:bb:22:dd:f4:6c:2a:42:2a:99:
         95:0b:2e:68:a6:3b:70:d2:9e:1c:b1:78:f9:34:8b:cc:b4:05:
         16:a5:7c:23:f5:65:b1:74:1a:a9:91:64:59:43:94:d2:a9:31:
         4e:9c:cb:de:6a:4a:64:06:16:bc:b9:9d:d8:de:27:91:64:96:
         b4:8f:95:07:a4:5e:82:0d:6f:e0:f0:1e:88:35:2b:42:40:37:
         c0:06:73:1a:f4:a5:54:b2:ed:c6:49:5b:bb:30:d8:41:d0:d6:
         dc:a8:56:78:5e:8d:22:3a:48:05:e8:97:c4:94:d4:81:74:ed:
         47:f5:58:29:75:2b:4a:eb:0c:db:8e:5f:2b:d3:60:32:2d:5c:
         13:ab:56:95:7e:6e:4f:2f:cb:17:47:ed:13:a1:d9:8b:ba:a6:
         b8:4e:e2:ec:c4:d3:27:1a:3a:d8:8c:4a:fd:60:d0:d1:e4:18:
         f8:44:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org