Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23990d3a-3326-375b-a6bb-9754f63016b6.roa
File:                     23990d3a-3326-375b-a6bb-9754f63016b6.roa (raw, json)
Hash identifier:          iBgW/4OGMr3JZzENeYBd2bbd1tmLmtzx46dGUM4vAUk=
Subject key identifier:   17:A2:09:9B:04:7C:60:DD:AA:AA:68:F1:5B:2B:98:48:5D:77:9B:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A9C8F67BE2E7BE59802A7C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23990d3a-3326-375b-a6bb-9754f63016b6.roa
Signing time:             Thu 25 Apr 2024 13:22:36 +0000
ROA not before:           Thu 25 Apr 2024 13:22:36 +0000
ROA not after:            Wed 24 Jul 2024 13:22:36 +0000
asID:                     20940
IP address blocks:        104.79.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:c8:f6:7b:e2:e7:be:59:80:2a:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 25 13:22:36 2024 GMT
            Not After : Jul 24 13:22:36 2024 GMT
        Subject: CN=fef5f638-acd1-4fd4-9006-416df77fb006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:ed:3f:51:76:5a:35:fd:ab:09:0b:5b:f1:
                    9d:2f:61:41:8b:4b:d6:d8:85:02:24:1c:43:df:ab:
                    3c:c1:49:c0:8e:9b:79:92:44:c9:af:c7:ad:44:71:
                    ad:18:41:fc:dd:99:15:35:26:3a:02:e8:2d:9a:41:
                    72:ae:c9:f5:16:6b:84:f1:f5:c3:cb:cb:c5:02:c9:
                    c6:33:c7:2c:e8:ba:f6:81:e9:db:35:a7:fe:7b:1e:
                    45:ac:0b:b6:c6:ba:d0:83:06:7e:c8:89:d3:3a:a4:
                    ba:aa:e6:bc:23:bc:09:5e:0a:b9:46:36:56:ae:49:
                    08:d2:27:9a:d0:09:1c:ed:00:9e:6b:20:0b:c7:bd:
                    34:c6:e9:c3:3c:a9:c8:3f:c2:c9:f2:5a:13:ca:f5:
                    27:9f:7f:0b:d5:ef:84:70:f4:00:3e:5a:44:20:30:
                    66:0b:45:f2:a2:0e:71:9a:9e:68:7e:3b:23:cc:3f:
                    21:d6:24:a8:cf:ce:9b:fe:f4:65:7b:7f:71:f8:0f:
                    ec:ab:ed:d5:53:bc:38:d0:48:12:cf:6b:f2:f2:6e:
                    ba:cd:ff:16:22:5b:63:a6:eb:37:8f:18:28:4c:08:
                    8a:5d:37:c9:ac:7d:a9:62:bd:c5:cf:fa:01:58:56:
                    c5:92:7f:64:e9:8a:49:bf:14:f5:1e:cf:f5:7f:13:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A2:09:9B:04:7C:60:DD:AA:AA:68:F1:5B:2B:98:48:5D:77:9B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23990d3a-3326-375b-a6bb-9754f63016b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.79.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:9b:df:5f:08:d1:44:bc:97:c4:80:26:2a:92:81:35:3f:
         34:f3:87:a1:4e:06:52:4f:ec:96:91:3b:1a:d2:52:e8:38:66:
         3a:5e:67:15:45:42:00:60:51:64:db:b5:09:bb:e6:28:52:48:
         89:61:a9:8b:6b:92:f9:42:7b:02:b3:22:24:cb:d6:7a:51:5c:
         f7:9f:4f:57:e1:cb:53:6e:12:f7:48:29:e2:65:72:ad:35:63:
         73:2e:4a:c0:4f:8c:a4:65:80:1a:95:d2:d0:d4:3e:7b:08:ca:
         59:88:75:ad:a0:40:d4:51:4d:80:b0:41:d6:b2:6f:2b:af:82:
         18:e0:fa:cd:14:de:9d:5b:7d:9f:d5:d3:f9:55:b7:66:04:c1:
         b5:d9:1c:6e:a5:df:d5:d4:3f:62:5a:0d:b3:5d:34:8f:88:12:
         1d:7b:64:77:eb:fd:08:be:02:22:af:09:01:78:5f:55:bc:0c:
         13:57:77:19:96:81:77:78:31:96:e4:55:97:ab:26:65:6a:41:
         80:9b:a3:6d:82:6f:68:74:f2:06:f9:f9:11:a8:6e:4b:32:05:
         dd:87:9f:97:82:9f:94:df:7b:93:d3:89:ba:24:b3:95:ba:f0:
         ea:30:f6:55:d0:43:d8:92:03:7e:35:c7:41:c0:c4:33:98:18:
         be:0b:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:12:59 2024 by rpki-client on console-fra.rpki-client.org