Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/2819d5d1-fc39-314d-bb5d-3e62b4694315.roa
File:                     2819d5d1-fc39-314d-bb5d-3e62b4694315.roa (raw, json)
Hash identifier:          39Ty6FN5hB/3GFbgKBQmCvZIOVrb7OzAnQ7+Dphx10Y=
Subject key identifier:   C5:1F:5C:79:76:02:FA:36:22:39:8F:13:C0:03:22:2E:1A:6E:40:38
Certificate issuer:       /CN=c9b2f783-ae49-438b-a994-34e0ab78157d
Certificate serial:       010D0C9F432858478E1BC65171E169329A672F80
Authority key identifier: 38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/2819d5d1-fc39-314d-bb5d-3e62b4694315.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     57935
IP address blocks:        104.237.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c6:51:71:e1:69:32:9a:67:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b2f783-ae49-438b-a994-34e0ab78157d
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=da3fca71-a3e1-4c61-9d57-106c2482b062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:c9:de:6b:1c:13:e3:ef:d1:37:d7:cf:4b:
                    98:f9:55:96:9d:e8:99:08:09:9e:e5:fc:94:f0:d1:
                    0a:1c:fe:11:0d:83:38:b8:0c:b1:3f:16:82:6c:19:
                    99:7f:6b:28:71:32:41:26:fe:f4:9f:14:b2:1e:3e:
                    22:66:b2:cc:3e:d8:ec:a2:4e:1f:4d:64:32:0d:5d:
                    bd:4e:18:72:db:3a:bf:fc:fd:a9:39:1b:ee:1f:04:
                    17:1c:24:35:52:eb:12:95:ca:f9:74:97:95:f3:7f:
                    4b:8d:6c:71:7c:a0:2c:9b:5e:ff:80:cd:1f:d1:f9:
                    6e:be:b3:a5:56:d5:71:a5:fa:fe:df:77:ae:d5:73:
                    da:71:6c:fe:8a:01:c0:b3:d9:11:ce:92:8f:e1:e2:
                    a5:db:7d:4a:a2:fa:0c:8d:83:ab:8a:d2:84:0e:fc:
                    43:4b:81:93:b7:71:86:ca:4f:e5:12:70:b7:65:a9:
                    0b:0b:cb:c1:6e:cc:9b:c6:5b:53:39:23:57:4b:36:
                    7d:19:76:30:aa:75:35:38:35:ba:cb:8f:16:eb:ff:
                    77:8d:82:2f:1d:14:a1:a9:b9:cb:d4:f6:5e:d0:2f:
                    e6:5b:a0:51:f7:bd:2f:17:dc:89:25:08:14:96:ed:
                    70:db:ab:f5:0b:41:a9:69:dd:98:28:bc:85:65:d5:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:5C:79:76:02:FA:36:22:39:8F:13:C0:03:22:2E:1A:6E:40:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/2819d5d1-fc39-314d-bb5d-3e62b4694315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:9c:8e:7d:93:f4:1c:3e:dd:fb:54:cc:f5:d9:0a:c5:d5:
         97:4b:69:8c:fe:31:42:74:fc:f9:ad:34:52:23:12:7d:3e:cc:
         f9:40:b0:56:3d:aa:11:e4:d8:d3:a8:ff:7d:1d:bb:2b:1a:a7:
         7d:79:4e:d1:1b:d7:c2:16:92:94:23:01:3f:58:c2:17:77:81:
         a1:a4:df:73:10:19:73:3a:18:02:62:42:0d:e1:db:88:20:94:
         d3:72:41:47:5a:c9:f3:85:28:dc:a9:7c:8a:88:63:34:1c:f4:
         25:57:a6:c6:89:9a:c0:1d:cb:7a:fd:f2:0c:68:dc:e9:0b:03:
         b2:ba:f7:79:ae:37:97:ea:a2:d1:17:bd:e7:9a:a9:53:6a:d8:
         b6:a9:ca:3c:cc:0e:24:61:ca:ec:e4:25:84:45:1a:f0:54:9e:
         92:db:86:08:33:78:8a:c5:fb:25:a0:83:f9:ef:f9:fc:77:fd:
         ef:24:3b:41:e6:0d:b1:2b:3c:71:12:33:3b:3c:80:e7:2f:45:
         0d:47:d7:2b:6b:85:84:5f:2c:de:e7:bf:37:4f:6d:39:63:1a:
         cf:8f:c7:84:18:f7:fb:6b:31:3a:e3:ef:8f:7d:13:e2:dd:73:
         46:ee:a2:16:3f:39:d3:6a:72:f4:92:4d:1b:8f:4b:a0:c0:ef:
         07:93:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org