Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa
File:                     f746411c-82dc-320f-833f-056441f592f0.roa (raw, json)
Hash identifier:          ZFcWgeyEd/rcha+MAq3iyyXFobqPt1degwCxBAljPi8=
Subject key identifier:   77:FA:54:1E:D8:CE:12:FC:29:DA:80:6B:E8:7E:3C:64:24:FA:9D:9E
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F43285847DF2F53D52DDC04BBC1C63180
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     40342
IP address blocks:        104.200.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:53:d5:2d:dc:04:bb:c1:c6:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=581a3ada-01ce-4684-8420-9259c167967c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:00:d6:2f:0a:02:12:44:18:99:8c:e6:29:
                    96:ca:6b:42:c7:d6:dc:a6:bd:22:55:e1:96:84:ba:
                    2e:03:12:b2:c3:23:f8:89:30:88:6d:05:a7:4e:6e:
                    21:1c:e4:80:71:a1:f9:c3:e5:07:50:e3:f6:24:05:
                    93:34:87:03:4e:5e:3b:5d:0f:5f:4b:7d:57:01:3c:
                    6c:db:3a:e9:94:5c:c1:1f:a6:cf:bf:b4:c3:6f:05:
                    b2:a5:f8:53:28:1d:b9:d3:96:80:cb:f4:97:90:6e:
                    d3:df:15:b8:ba:7e:77:b8:4d:88:fe:e9:80:da:d2:
                    fa:b3:16:6a:13:31:5a:36:97:b6:c6:cc:41:d5:08:
                    e2:74:3f:f6:c9:a0:d1:ec:fe:03:fa:70:44:d3:58:
                    dd:17:ee:0c:8b:d0:a6:c5:12:03:ec:bc:ae:8f:6f:
                    e9:64:de:60:a5:8b:2a:90:96:e1:7b:e4:52:c9:35:
                    21:55:82:83:f8:0f:92:ca:ce:99:76:04:18:be:52:
                    c5:d5:1e:3c:a6:43:d5:0d:bf:b2:7d:40:d1:96:20:
                    9e:29:2e:64:6a:8d:e1:dd:88:84:ce:85:4f:11:a4:
                    05:f1:8f:88:2a:f6:03:01:ff:1a:09:89:74:8d:e9:
                    e4:40:1a:23:43:8a:67:d2:7b:af:0b:20:3e:7e:bc:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FA:54:1E:D8:CE:12:FC:29:DA:80:6B:E8:7E:3C:64:24:FA:9D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/f746411c-82dc-320f-833f-056441f592f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:26:01:f9:2f:a9:15:1f:97:4c:a6:3a:d6:49:69:11:cb:06:
         e4:9a:f4:33:c5:e8:f2:a9:7b:87:58:e2:fc:20:fd:06:6e:9a:
         b3:f1:14:b3:41:73:69:93:48:68:3f:83:a4:98:6b:a4:2b:d6:
         d3:e4:67:bd:88:a0:93:1c:6a:4c:9b:93:55:82:cd:c4:73:c2:
         01:85:00:79:fa:3e:e0:61:a2:7c:ce:14:fe:08:6e:ea:77:18:
         5f:53:48:db:72:7b:5d:ee:15:f5:68:48:bf:da:71:8b:69:02:
         2b:82:f8:dd:a2:ba:75:0c:aa:e3:c4:20:10:4f:56:cf:12:79:
         aa:95:02:f9:28:80:42:e2:7f:6c:ac:3c:0e:6f:10:f7:7b:6e:
         f8:2d:b6:35:b6:b1:8b:5a:1c:d8:82:e1:60:9c:d3:4d:86:ac:
         c1:d4:55:46:60:36:21:12:df:eb:85:18:b7:e2:98:6e:20:d5:
         c3:fe:6c:72:77:70:2f:9f:e6:50:7f:83:d7:38:ea:20:6d:3f:
         d0:5a:f8:87:cd:74:88:d7:21:ef:9a:bc:80:36:06:5d:b4:c4:
         24:eb:a7:40:f6:e8:bb:59:46:7b:63:6b:30:c6:f8:79:1c:cb:
         6d:76:f5:36:0e:d2:63:bc:c3:af:fe:2e:6e:fd:c9:46:b1:18:
         5e:01:6e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:30 2024 by rpki-client on console-fra.rpki-client.org