Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f97956e-28eb-3e8b-bc39-1da635b174ff.roa
File:                     1f97956e-28eb-3e8b-bc39-1da635b174ff.roa (raw, json)
Hash identifier:          +dNXJEZUPBMDLOcNvjkQaJDt+SH25n9HKn9j6H/SPJI=
Subject key identifier:   9A:BB:8D:76:F4:4D:F4:D5:C6:10:D8:73:7A:4A:C9:A1:7A:F3:63:26
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A9C22CCF85CF12199A3BB080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f97956e-28eb-3e8b-bc39-1da635b174ff.roa
Signing time:             Thu 25 Apr 2024 13:08:55 +0000
ROA not before:           Thu 25 Apr 2024 13:08:55 +0000
ROA not after:            Wed 24 Jul 2024 13:08:55 +0000
asID:                     16625
IP address blocks:        104.94.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:c2:2c:cf:85:cf:12:19:9a:3b:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 25 13:08:55 2024 GMT
            Not After : Jul 24 13:08:55 2024 GMT
        Subject: CN=07f84d6d-77ee-4d67-9492-f60b46282107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:9f:59:3e:73:42:4a:9a:b5:bd:c4:11:42:
                    f3:f9:41:d6:27:f2:5d:05:68:9e:7f:53:d3:e1:a4:
                    b8:00:35:e6:8c:a5:d2:37:eb:ad:d5:39:34:0a:47:
                    8a:a9:c4:2c:50:2e:22:45:ed:99:d8:e4:da:b1:56:
                    84:f1:51:e2:88:03:b1:35:38:1d:f8:83:15:b9:67:
                    ea:59:d8:cc:0f:f4:39:ec:00:87:9c:47:0b:6d:e0:
                    20:92:2a:23:b5:ce:80:86:b9:8c:0a:06:2b:68:24:
                    21:d5:5b:7b:ec:3b:d7:9e:dc:7b:7b:2b:0b:9e:af:
                    7c:55:51:96:b5:a1:2a:c2:55:39:72:32:bf:be:56:
                    44:e7:c6:03:7f:dc:b2:7b:01:69:ad:33:e4:b0:38:
                    8a:a3:17:af:4d:cc:72:80:8d:64:3f:27:d5:4e:d7:
                    ca:2e:7e:39:fc:ba:19:af:b5:d1:7c:85:ee:26:60:
                    98:15:42:81:e9:25:50:05:d9:16:be:1d:93:2e:c4:
                    46:ac:bc:e9:7d:26:e2:da:c6:6f:d3:d9:8f:4e:a7:
                    a3:4e:7d:b5:8f:00:97:75:df:d1:19:49:09:89:eb:
                    27:9e:44:72:ef:5f:c7:49:c4:b3:e8:a4:43:5b:a0:
                    32:c2:ab:e5:d9:19:14:17:e3:48:88:af:46:72:a1:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BB:8D:76:F4:4D:F4:D5:C6:10:D8:73:7A:4A:C9:A1:7A:F3:63:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f97956e-28eb-3e8b-bc39-1da635b174ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.94.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:ea:b9:52:ee:c9:bd:47:5d:8b:8f:5d:a9:56:11:08:13:
         d1:f0:d0:74:14:d3:e3:dc:1c:40:f0:58:df:48:7d:c7:43:7b:
         76:aa:48:74:54:58:f6:9d:ae:bb:c7:47:2d:fc:8d:0e:1d:51:
         6b:c1:94:3b:0b:b3:13:a9:98:0e:05:4c:af:e5:3f:29:69:db:
         9c:e3:e2:a4:74:04:21:1c:21:9e:be:96:99:6f:33:05:21:d8:
         72:53:40:c3:8b:fd:26:41:31:3b:a0:a4:dd:50:d8:b6:9b:a5:
         7e:0a:97:0e:90:60:c7:2b:24:7b:da:47:5c:08:62:e3:b8:e8:
         5c:37:f6:09:6b:03:67:ce:b7:68:d1:3f:9e:b6:df:97:a8:2f:
         52:b0:8a:02:a6:41:59:0f:08:c2:22:1a:6a:f7:42:29:d9:8e:
         82:ed:e0:85:63:b7:4a:25:0b:f0:22:1b:49:69:a2:9c:a8:93:
         93:3a:2b:9a:d9:6d:f4:36:88:4c:7b:e9:23:0c:11:65:0f:22:
         18:b8:a0:ba:1f:90:fe:f7:5e:d0:8a:35:5a:82:f5:14:84:24:
         59:3b:74:4d:62:9a:a4:98:56:3f:1f:83:90:02:e7:1f:0c:12:
         15:64:9c:3f:54:5a:54:ff:c8:fc:2f:6d:88:1f:cb:b0:cc:ac:
         30:7f:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:47 2024 by rpki-client on console-fra.rpki-client.org