Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342db373-cc8c-345a-bcab-3a26b37d0746.roa
File:                     342db373-cc8c-345a-bcab-3a26b37d0746.roa (raw, json)
Hash identifier:          ZFQ1EAY2szkosWqJ9TPHBGFiH5ZiOBHCrzYAszoeFZg=
Subject key identifier:   D0:59:E7:4C:14:0C:65:99:48:48:CF:EE:33:D5:8F:3C:3C:69:8A:F9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B731F1B46BDA9493146C5A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342db373-cc8c-345a-bcab-3a26b37d0746.roa
Signing time:             Tue 30 Apr 2024 08:39:38 +0000
ROA not before:           Tue 30 Apr 2024 08:39:38 +0000
ROA not after:            Mon 29 Jul 2024 08:39:38 +0000
asID:                     16625
IP address blocks:        104.81.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:31:f1:b4:6b:da:94:93:14:6c:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 08:39:38 2024 GMT
            Not After : Jul 29 08:39:38 2024 GMT
        Subject: CN=3fc6ba26-2ef8-42a7-84fd-a9abb13504c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:3b:f1:c9:a5:82:c3:ae:e0:4c:69:59:41:
                    21:8b:94:b5:e9:40:96:24:77:c9:e2:87:7d:df:23:
                    ba:56:dc:72:94:08:bb:a8:be:42:48:0a:e5:84:dd:
                    b0:8c:d4:dd:19:00:4b:a1:5e:c1:69:23:6a:98:71:
                    c8:1c:f6:1d:1b:6d:df:b5:4e:56:bc:d3:a4:88:65:
                    03:3d:7b:f5:6f:e5:d7:59:5a:4b:8a:41:9c:8c:ee:
                    9b:4a:5d:8b:20:b0:30:b3:92:65:67:97:f3:41:19:
                    54:b2:eb:ad:95:94:5e:c7:4b:64:19:a0:f5:c7:df:
                    e2:c2:5b:4c:38:e7:f0:6c:d4:b1:25:a4:79:95:4c:
                    90:0e:f1:25:cc:6d:1f:e7:95:ac:77:c7:5a:80:69:
                    60:b7:d5:c2:d6:53:f2:68:79:e2:3a:e9:46:19:5a:
                    fd:75:96:f3:3c:f6:28:08:55:67:44:db:f8:34:7b:
                    e3:f8:56:c5:17:69:57:b6:03:3a:34:cc:e0:ef:c5:
                    18:72:58:3d:dd:9e:c0:0f:34:1d:a4:ba:d2:11:08:
                    7d:c1:f5:5f:92:d7:bc:5d:97:de:1f:d5:71:2f:03:
                    cd:57:9c:c9:a0:73:24:b2:1c:c3:ac:15:a9:b2:fd:
                    e7:ee:05:5b:ca:43:38:a0:d4:76:d2:f6:ce:b7:ab:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:59:E7:4C:14:0C:65:99:48:48:CF:EE:33:D5:8F:3C:3C:69:8A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342db373-cc8c-345a-bcab-3a26b37d0746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.81.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:fc:e3:33:fc:30:32:91:a1:60:9d:12:45:a6:f0:d8:a3:
         98:b2:63:3d:32:47:7e:1e:e0:9f:00:2a:17:8e:7f:ef:4c:98:
         2f:a8:69:7b:75:e6:3d:ae:6e:d9:f1:d1:4b:9f:38:b1:a6:f9:
         8b:6a:43:02:d1:94:b2:ec:c7:92:38:06:a8:41:56:3e:23:f3:
         c9:49:b6:9f:bb:56:09:2d:9c:16:b6:f2:79:6d:b7:60:02:98:
         a1:aa:e6:4d:1b:27:83:e4:31:dd:e8:28:b4:07:39:6b:51:21:
         a4:2c:9d:8c:ec:70:45:60:39:f6:4d:8b:bb:57:a3:9e:31:a1:
         9b:cb:01:e0:d9:87:5a:4f:49:17:95:b3:9d:7a:7e:b5:1e:28:
         81:45:a9:a4:64:c6:9b:d8:5d:fd:cf:57:a5:04:fb:6b:af:b1:
         25:75:78:ee:86:56:ab:23:51:6d:61:4a:a8:96:54:9a:25:d9:
         be:93:1a:a7:b0:f1:57:3b:0d:01:d8:5c:2f:2e:a9:a3:26:f1:
         c7:2b:01:5f:0c:96:ce:e9:8c:29:62:89:b6:50:63:49:50:25:
         1d:ae:cf:96:e1:b6:82:e2:82:7a:ac:53:f8:70:4b:ae:cb:5a:
         32:df:d8:04:f2:f5:43:cc:22:2b:73:96:de:67:4a:72:18:80:
         44:64:1b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:36:17 2024 by rpki-client on console-ams.rpki-client.org