Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b89c9e4-a815-346b-a79b-d35826ec5cc4.roa
File:                     2b89c9e4-a815-346b-a79b-d35826ec5cc4.roa (raw, json)
Hash identifier:          B1UZ++Qni9EaF6sGVGc7O9//LQB2MhZ5w117U1iD1Gw=
Subject key identifier:   04:A1:85:1C:D0:18:9B:86:CF:09:9A:44:17:97:53:E9:A0:23:73:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A9942C5A4A0606FAF0130BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b89c9e4-a815-346b-a79b-d35826ec5cc4.roa
Signing time:             Thu 25 Apr 2024 11:36:14 +0000
ROA not before:           Thu 25 Apr 2024 11:36:14 +0000
ROA not after:            Wed 24 Jul 2024 11:36:14 +0000
asID:                     20940
IP address blocks:        104.69.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:94:2c:5a:4a:06:06:fa:f0:13:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 25 11:36:14 2024 GMT
            Not After : Jul 24 11:36:14 2024 GMT
        Subject: CN=1ce3b5a9-c6d0-49ee-be38-386b31f39670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:62:14:d5:35:fb:aa:7b:3d:1b:de:3e:af:
                    b6:81:c6:6b:a4:4a:2e:84:15:cd:30:41:d4:2e:2e:
                    91:2d:9c:96:48:be:a8:f1:db:89:1e:f6:1a:8c:00:
                    49:9f:09:89:23:22:d2:a5:d2:d9:05:00:40:d4:ad:
                    bf:c1:b2:ad:a8:0a:dd:fd:1c:68:83:35:dd:54:67:
                    9f:e4:11:b4:4a:63:77:5d:65:af:73:ae:7b:4b:81:
                    13:42:21:83:bf:eb:1f:79:8b:09:27:e9:45:ee:6a:
                    69:48:67:20:e8:ac:c8:c7:3a:7e:cd:0c:cd:bf:ab:
                    06:e7:84:2e:ca:e5:f1:b0:8b:f7:89:87:a4:d2:6b:
                    25:85:b9:42:96:0c:da:19:d3:c7:f0:f0:07:94:3e:
                    ce:8a:85:35:11:c7:7d:63:ca:20:20:7c:ae:63:0f:
                    2f:a6:cc:c6:cf:f8:6a:47:a0:89:89:d9:5a:3f:d0:
                    a4:81:fc:9b:0c:db:2c:ce:48:e5:36:6d:b7:1c:88:
                    ac:02:82:d5:b4:bf:0c:0a:36:6f:b9:6b:3d:1a:f9:
                    14:87:75:9c:b4:f7:e0:05:e2:3d:99:0b:09:d0:de:
                    57:1d:94:eb:83:e1:46:9d:ed:1e:58:a0:17:a7:af:
                    01:31:e3:8b:39:b7:ee:17:e3:18:2c:c2:d0:da:eb:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A1:85:1C:D0:18:9B:86:CF:09:9A:44:17:97:53:E9:A0:23:73:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b89c9e4-a815-346b-a79b-d35826ec5cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.69.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:c6:3c:6f:0f:a8:db:09:6a:9c:f4:28:c1:27:be:6b:43:
         7b:f2:d8:1a:59:52:ca:a7:c1:4e:f8:ad:49:03:7f:75:b1:6d:
         ef:24:40:30:65:36:a8:30:f0:2c:11:b3:f4:02:17:74:71:18:
         de:6b:d8:5f:30:f6:8d:d4:60:67:d6:07:f3:09:3d:27:81:d5:
         52:d0:6d:00:e9:b5:94:26:cf:de:ed:62:1d:69:91:05:b8:fe:
         fe:4f:96:82:67:e7:89:9b:1b:3f:cd:bf:b3:c2:1f:24:b6:20:
         e5:f8:5d:d4:9d:72:35:6c:80:f0:1c:25:d7:2d:6f:b3:2a:ee:
         b9:d7:77:2e:5b:10:34:de:ec:87:ac:00:83:9d:0b:77:38:d5:
         a4:a9:d4:97:94:13:d4:a7:f0:8d:76:96:fd:20:42:8f:5b:c6:
         93:f9:83:f8:14:be:83:f0:c8:92:20:a5:dc:c4:47:32:2f:81:
         e7:4e:07:7b:55:e7:22:85:0a:cd:c9:76:d7:d8:3d:0f:9d:08:
         af:ca:cc:e6:33:dc:c7:03:94:17:90:f7:4e:3e:80:b7:db:fa:
         80:b4:be:16:92:75:f7:8d:88:99:37:24:70:c6:7b:50:4a:07:
         03:dc:1c:e4:41:6f:e4:06:78:36:cb:44:56:4e:be:48:2d:90:
         57:d5:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:37:01 2024 by rpki-client on console-ams.rpki-client.org