Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
File:                     cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa (raw, json)
Hash identifier:          bc2WxI/7h6nAKyOMuMoIzerf3U0c/m7WkjWQdE7kKZA=
Subject key identifier:   20:54:66:6D:2D:73:16:E1:FA:20:1B:36:09:4B:4A:02:35:49:64:9E
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584529528F790912E604948E8880
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        104.200.216.0/24 maxlen: 24
                          104.200.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8f:79:09:12:e6:04:94:8e:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=b8bc7e3f-e247-481c-b2ab-bd3c320b1b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:17:3e:8e:48:af:11:48:9b:86:8f:93:d8:
                    d0:08:75:85:a5:a1:d5:3e:7b:ab:e5:11:c0:f8:96:
                    a5:f4:43:6e:8a:e2:d5:51:bd:89:e6:d9:bc:ea:21:
                    e4:bc:9f:5a:6a:5c:84:23:44:a6:5e:fa:a7:e7:1d:
                    23:19:c7:37:3a:dd:08:2e:59:73:50:4b:35:43:36:
                    19:b8:a9:54:98:eb:27:4c:bf:06:d4:87:12:d4:52:
                    01:c8:d2:a3:67:a2:91:f8:c7:40:3f:e3:47:e1:59:
                    f9:01:33:6c:b9:88:8b:53:89:0b:af:ce:5a:c2:5e:
                    14:3f:d3:be:e0:85:88:48:fc:96:90:b9:5c:9e:d0:
                    e9:6f:a6:f8:cd:96:48:ef:fd:79:bc:9d:a4:01:b0:
                    a8:d4:11:33:d0:ab:8c:b1:76:29:83:75:d9:a1:14:
                    b4:45:3d:fc:02:07:4c:b7:b1:c3:d8:a7:55:c4:c5:
                    c0:e4:97:79:5a:73:28:5f:fb:ab:59:a7:7a:2b:0a:
                    95:09:20:27:b2:12:6c:af:07:c5:14:1a:00:8c:a8:
                    85:46:57:5e:10:fd:33:6c:c1:f7:b2:f8:ec:5f:86:
                    fa:31:b5:21:ba:0c:db:f2:f9:02:1d:28:cf:60:a0:
                    54:72:18:f9:17:84:38:95:8d:6f:8e:0f:30:39:4f:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:66:6D:2D:73:16:E1:FA:20:1B:36:09:4B:4A:02:35:49:64:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/cfce2ba4-7cd8-3722-96e0-415b3fc5526a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.216.0/24
                  104.200.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:37:77:08:7a:ed:5f:8b:65:aa:db:45:72:ea:f4:8c:fd:
         f7:67:61:af:24:c9:d6:9f:e4:4e:8b:55:6f:f1:1a:d4:9c:ee:
         bd:8f:da:11:25:f8:60:1a:66:28:23:1a:45:3c:60:e6:07:b1:
         01:2e:d7:8d:41:8f:f0:a9:38:6c:c9:48:df:24:8a:84:be:bd:
         70:79:c2:1c:c6:e7:43:ab:b5:f5:c5:bd:a2:07:fb:8d:60:f3:
         7c:28:fa:8d:c4:5d:e9:69:b5:c5:f8:b2:be:94:a1:31:81:f6:
         a0:2b:30:ac:45:c5:8b:3a:2c:3f:1d:2e:e0:b8:d3:8f:ca:67:
         0d:0d:2b:c6:ad:22:92:a0:9a:4d:8f:9c:23:81:5c:9e:79:aa:
         29:40:44:2f:cf:36:d2:d5:d0:6d:3e:b6:7a:69:81:af:1b:29:
         35:1f:17:b1:6b:cb:8a:96:96:40:b6:24:96:82:12:fd:1f:9c:
         61:78:67:e6:cf:62:a7:70:05:24:87:ad:9b:ca:12:47:ee:b1:
         80:6b:54:d7:4a:e0:ee:36:5a:c5:a2:23:ea:e7:67:e8:4c:24:
         a6:0a:45:57:4f:b2:3b:86:53:89:86:6b:7f:9b:aa:9c:26:5b:
         5d:ff:75:14:5c:e5:dc:a3:06:ca:c9:03:8b:b5:2e:bf:de:ba:
         f4:6f:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:28 2024 by rpki-client on console-fra.rpki-client.org