Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/7e8e7af1-98a5-3af2-8935-6bd24ac163f4.roa
File:                     7e8e7af1-98a5-3af2-8935-6bd24ac163f4.roa (raw, json)
Hash identifier:          0cRoay6Is+MMnu3z9F60PbcTx+1PaEo9in9Mqzt/quU=
Subject key identifier:   CA:C9:46:9C:AE:4B:82:48:34:7A:B3:19:C5:AE:0E:C7:22:E2:0B:1B
Certificate issuer:       /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial:       010D0C9F43285845B4E8CAD43371A45201CBEBF8
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/7e8e7af1-98a5-3af2-8935-6bd24ac163f4.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     7018
IP address blocks:        104.193.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:ca:d4:33:71:a4:52:01:cb:eb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=f08c05c9-53da-41f6-90d4-6fc5e99e94f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:43:be:18:ac:97:a4:3f:02:4e:3a:45:f8:
                    0a:be:e0:2c:ee:43:94:bf:e4:31:1a:24:d8:a8:73:
                    93:17:52:5a:02:b4:99:d4:99:e9:8b:83:38:ff:d3:
                    73:50:f4:38:05:74:13:1f:d0:9d:f2:35:0c:16:07:
                    e4:a8:c2:97:f0:b2:37:cb:c4:ef:f7:db:84:56:29:
                    3b:02:29:f8:92:87:ee:bc:12:68:66:32:77:71:ea:
                    70:c3:55:a9:a5:68:c5:e8:ec:21:d3:9b:fd:f3:1d:
                    6e:1b:ed:d2:76:44:a7:d6:f9:06:87:3a:7f:3f:f1:
                    ca:47:ce:56:42:56:86:72:33:34:c1:8d:0f:87:3e:
                    6f:c6:df:18:16:b5:ab:e0:c3:82:1c:6c:e2:7c:bf:
                    b1:9e:e8:33:bb:bb:87:4c:2b:ff:69:91:68:29:79:
                    07:1c:a3:4c:94:da:9e:21:8e:71:bb:70:9f:76:4f:
                    54:0f:fc:f7:76:75:3a:a8:28:2e:a6:fb:e0:62:0f:
                    79:61:8d:83:30:66:a3:8e:ae:b5:6d:61:0c:68:a3:
                    73:28:8d:ad:a0:07:df:a6:cf:94:d2:56:ff:8a:d7:
                    1b:1b:09:04:51:51:24:e0:95:80:1e:e3:7c:c7:24:
                    85:66:00:a5:9f:73:9e:91:ec:32:69:04:0b:64:13:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C9:46:9C:AE:4B:82:48:34:7A:B3:19:C5:AE:0E:C7:22:E2:0B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/7e8e7af1-98a5-3af2-8935-6bd24ac163f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:86:85:41:c6:f2:11:23:42:3b:97:93:be:c1:f5:da:ca:27:
         1c:3f:65:f0:90:e3:b4:79:43:a3:34:29:a2:9f:57:1f:1e:a5:
         07:39:93:30:93:09:f6:2d:31:ad:1a:63:99:09:55:8e:7b:20:
         bf:37:f9:36:3d:bc:3d:3d:6f:2e:17:23:f2:30:bd:a0:54:27:
         e2:76:8b:17:4f:ae:87:ec:99:84:82:53:3a:f3:a7:24:b0:13:
         55:23:3b:71:74:96:67:f0:96:73:c3:30:5d:49:99:9f:60:35:
         fe:49:af:cf:bd:f1:d1:4f:2a:23:e1:d5:d6:0d:3a:e2:39:48:
         2b:82:fe:db:ba:91:52:42:60:89:7e:83:3b:4c:21:a6:5c:36:
         84:ef:80:e3:b0:ec:da:5d:13:72:c0:c0:82:7c:37:4a:ac:37:
         38:92:b3:b7:0a:71:9d:aa:fc:00:0c:c1:ae:be:2a:40:ba:72:
         87:e4:64:23:ae:62:ba:c8:d2:6e:b3:ed:36:6a:93:28:e2:c0:
         fc:83:80:5f:5f:39:45:03:3b:a5:08:1b:f5:87:08:b2:1c:70:
         4b:30:83:b6:a0:49:9d:12:3b:30:72:ab:e0:dc:d5:30:c0:48:
         dc:9b:dc:b9:7a:84:0c:c9:98:b2:fc:d0:22:49:22:75:f1:a4:
         c5:26:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:37:03 2024 by rpki-client on console-fra.rpki-client.org