Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa
File:                     731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json)
Hash identifier:          H0mgVYZlAxQlciYpSfi4q1VgnnxabMQRqqM4fkv5zJk=
Subject key identifier:   AE:73:CA:B6:2A:7A:50:3E:3C:10:AA:71:17:38:52:D6:D7:74:CB:7D
Certificate issuer:       /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
Certificate serial:       010D0C9F432858474850AE4E836405CDF503CF80
Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     11734
IP address blocks:        104.151.136.0/21 maxlen: 24
                          104.153.192.0/22 maxlen: 24
                          199.19.208.0/22 maxlen: 24
                          199.189.64.0/22 maxlen: 24
                          208.74.28.0/22 maxlen: 24
                          208.74.48.0/22 maxlen: 24
                          208.82.204.0/22 maxlen: 24
                          208.91.48.0/22 maxlen: 24
                          209.134.48.0/20 maxlen: 24
                          2607:f148::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:ae:4e:83:64:05:cd:f5:03:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=9182b550-43b3-4fb5-84d9-8869df27b5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:56:be:aa:82:55:01:3a:fd:94:fd:af:58:
                    32:09:ae:8a:e0:26:c0:1d:90:20:ef:22:81:00:3b:
                    43:ae:5d:64:b1:e8:c5:b7:33:6f:01:d5:92:fa:5d:
                    07:e8:b0:29:70:db:5f:bc:9a:94:36:ef:95:45:d9:
                    5a:67:68:89:da:1d:69:93:b6:a5:e0:bb:68:f3:e3:
                    23:54:1c:84:0c:7c:f6:90:02:42:36:8e:2c:53:97:
                    f0:82:73:86:01:6b:06:79:44:2c:40:8b:a8:8c:b9:
                    ca:a4:71:c8:c2:d9:04:16:9f:ae:1c:79:ad:c1:9a:
                    d5:47:ef:fc:64:d3:4b:a3:95:e3:a9:2f:8a:2e:72:
                    75:7d:7d:7c:d8:af:3b:44:df:9d:1e:d6:ab:be:29:
                    e1:9b:52:ee:1f:66:79:22:84:22:d1:4a:66:fb:69:
                    3d:37:03:e7:f5:06:06:2d:48:56:db:23:c8:95:76:
                    6c:df:40:fd:b9:cd:2b:41:23:75:35:89:04:b6:45:
                    9b:3c:53:7b:3d:f0:99:b3:ec:6e:97:bb:47:d8:69:
                    e8:57:e6:e3:7d:41:15:e8:9b:d4:73:a1:fb:b6:a1:
                    f9:15:8e:01:f6:a0:a5:e8:6b:14:3b:3d:90:ae:ff:
                    bc:f6:0e:ec:4a:1d:9e:3b:cb:59:5b:f7:62:6a:52:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:CA:B6:2A:7A:50:3E:3C:10:AA:71:17:38:52:D6:D7:74:CB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl

            X509v3 Authority Key Identifier:
                keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.151.136.0/21
                  104.153.192.0/22
                  199.19.208.0/22
                  199.189.64.0/22
                  208.74.28.0/22
                  208.74.48.0/22
                  208.82.204.0/22
                  208.91.48.0/22
                  209.134.48.0/20
                IPv6:
                  2607:f148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:d4:c5:45:05:41:61:58:20:01:c1:dc:e3:d4:9d:d0:b4:
         9b:be:93:60:c2:0e:7a:e0:60:74:06:e0:6a:41:96:e8:f7:ba:
         f3:50:5a:b8:73:57:00:5b:47:1c:6c:a7:38:74:7e:db:c4:41:
         f3:92:fd:6d:a0:f4:39:09:0b:c2:56:f3:6e:da:de:47:92:d0:
         f3:66:36:a1:b7:bd:b0:c4:d3:69:c8:e4:c4:9b:f7:bc:6e:c7:
         7b:ed:a0:48:23:f1:28:f9:e8:99:17:94:55:69:64:ab:16:70:
         47:fc:0b:70:d2:92:44:04:ae:6a:8b:7c:10:5a:39:f5:9f:1e:
         5f:b7:77:21:ed:ae:b2:15:9a:7c:bd:c8:48:e8:4c:50:29:21:
         17:2b:7e:e3:71:58:55:b0:47:1a:0f:05:68:2b:43:e0:01:a5:
         14:5d:c1:ad:bc:13:60:85:60:fa:3f:69:aa:5b:5d:41:e4:5e:
         b3:0c:4e:48:ce:9c:68:9a:e3:b0:06:40:4d:06:df:8a:20:b3:
         bf:1f:aa:a4:0e:ff:c8:0f:59:d1:ed:18:ee:bd:17:27:9f:38:
         ae:1d:59:1f:45:c4:82:57:23:36:32:11:91:8f:cf:3e:a4:10:
         e1:75:76:f5:d8:8e:2c:0d:cd:fd:9b:4b:e6:25:1e:69:bc:8d:
         bb:68:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org