Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
File:                     e4984303-cfdd-381f-b4b6-b6359fd756a7.roa (raw, json)
Hash identifier:          Js872Iw73tIq221eISqFGX4gDX6fn+0dlp/kVq13dBs=
Subject key identifier:   90:0D:26:A4:0A:63:EB:09:DE:AA:D4:B9:C8:E9:1C:28:7D:BD:98:1E
Certificate issuer:       /CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
Certificate serial:       010D0C9F43285847A041441A1A8F33AAAB0D31C0
Authority key identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     20283
IP address blocks:        192.16.104.0/22 maxlen: 22
                          204.144.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:44:1a:1a:8f:33:aa:ab:0d:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=90f6cfb3-27c7-48cc-8289-98ebda3432d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:c6:ff:5b:e8:ec:06:c3:cb:33:96:eb:d8:
                    53:b7:4c:ca:0d:92:5d:78:72:a5:dd:c6:32:aa:20:
                    a0:0b:94:d5:98:dd:ca:9c:50:d7:f8:18:af:17:49:
                    44:29:b5:ab:98:69:1d:91:dc:aa:e2:71:05:19:4e:
                    03:f6:68:80:26:4c:7c:33:35:11:7e:e0:64:18:12:
                    7f:1b:0b:ca:da:a9:fa:4b:99:1a:26:0a:04:63:e6:
                    50:b4:ae:e4:b6:8d:61:75:48:f0:c6:8a:4c:22:95:
                    d1:13:63:83:11:a5:82:61:e8:5a:50:ff:3b:a9:70:
                    a6:29:f7:b7:6d:39:80:d8:c4:fa:c5:3a:1a:72:21:
                    8a:41:4f:82:80:c4:95:ff:2e:50:b3:7f:a3:d2:0f:
                    bf:d9:25:3d:67:3b:3e:c8:9c:07:9b:12:e4:3b:d1:
                    29:3b:71:cb:1c:8e:05:c7:d8:5a:26:9a:d3:ba:c4:
                    81:29:7a:09:99:e2:c3:ea:6f:a2:2f:0c:d4:81:d9:
                    fb:78:0e:1e:1b:c9:55:49:95:c6:06:3f:71:7d:7a:
                    c3:58:e9:e3:86:f3:ea:b3:b0:0e:78:4b:ec:95:dd:
                    cb:dd:48:c7:c4:0c:9c:7d:4f:ab:0d:29:39:03:0d:
                    63:75:50:f3:17:61:45:50:07:e9:50:11:ca:d6:3f:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:26:A4:0A:63:EB:09:DE:AA:D4:B9:C8:E9:1C:28:7D:BD:98:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.crl

            X509v3 Authority Key Identifier:
                keyid:49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.104.0/22
                  204.144.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:d4:af:0d:ca:e1:67:de:c1:fa:1e:ba:f0:da:d8:ba:4f:
         d9:e4:c9:dd:5f:b3:6c:f9:cd:08:24:f9:2b:e3:7a:39:17:af:
         1d:33:d0:a1:c4:a6:bd:31:a8:b0:25:b9:f2:19:00:8d:f3:af:
         c3:30:7b:63:90:6c:83:90:a7:0b:52:7d:30:46:54:83:ca:6d:
         c9:8a:9d:56:ac:cc:f9:e3:38:e6:80:87:8d:8d:66:3c:82:0a:
         10:4e:f2:c0:f0:26:e1:9c:73:41:9c:20:7b:1b:d8:1c:dd:65:
         4b:f2:fa:01:9d:9d:92:31:8e:30:22:10:a2:a0:32:82:a0:a1:
         55:f1:36:21:a0:7c:0a:68:06:d0:a0:a7:9a:4e:ac:18:3b:ba:
         5d:fa:98:c1:ec:11:5a:aa:25:33:20:12:87:6c:75:42:75:c7:
         43:fe:09:ed:e6:d5:db:83:b0:8c:dd:5d:a5:1a:f7:00:a9:20:
         14:99:dd:9c:9e:62:d0:92:c2:5e:cd:fd:26:eb:aa:90:6e:0d:
         b0:f3:db:7f:61:2f:14:f8:f5:18:ad:52:6b:90:82:22:ae:ec:
         e3:50:b2:eb:6f:fb:f0:d5:e3:62:0c:3c:5a:cf:3c:21:69:23:
         a6:2b:ae:3d:0e:e6:ed:7f:76:8c:cc:ce:4e:44:72:10:f5:75:
         8b:cd:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:47 2024 by rpki-client on console-fra.rpki-client.org