Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cfc89ce-bc3e-3564-8acb-25be423fc809.roa
File:                     3cfc89ce-bc3e-3564-8acb-25be423fc809.roa (raw, json)
Hash identifier:          KZJ0aAztmLK5rwrg86KsYmm+qV1L98Htds9TIiWs18g=
Subject key identifier:   04:F8:C2:46:AC:48:73:44:92:C3:AA:74:1C:5D:BE:57:AE:C1:60:5B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BA141FEEBBC6E4A7ADF14B02
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cfc89ce-bc3e-3564-8acb-25be423fc809.roa
Signing time:             Wed 01 May 2024 09:26:59 +0000
ROA not before:           Wed 01 May 2024 09:26:59 +0000
ROA not after:            Tue 30 Jul 2024 09:26:59 +0000
asID:                     16625
IP address blocks:        104.116.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:14:1f:ee:bb:c6:e4:a7:ad:f1:4b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 09:26:59 2024 GMT
            Not After : Jul 30 09:26:59 2024 GMT
        Subject: CN=f76ae2ef-cb28-49e8-8071-317e94e2cd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:aa:af:11:2b:0b:a4:1f:99:62:ab:3b:0d:
                    85:51:8f:a0:40:8d:85:46:4c:09:4f:ca:19:c8:78:
                    0f:73:e4:82:33:27:33:03:ee:5d:22:25:b4:eb:b8:
                    ba:2d:b2:ae:e2:25:31:0a:a5:cf:e8:c8:50:c8:83:
                    cb:8d:90:60:e6:59:78:94:43:7c:71:ae:77:a6:82:
                    aa:de:aa:c6:df:b0:a5:54:23:ea:76:70:e2:18:8e:
                    78:d3:63:44:56:40:db:0d:1c:dd:d0:82:5c:2c:61:
                    20:6d:b1:d2:00:21:72:34:69:e4:f1:f7:c8:9b:fd:
                    91:1f:d7:60:f3:27:df:b2:40:e2:df:fe:05:c5:13:
                    ae:14:23:6c:02:95:1f:48:c9:f9:c1:3d:7d:cc:9b:
                    39:42:32:b2:32:16:41:48:63:fb:0e:24:0e:fd:81:
                    6e:0d:bf:41:f7:3e:22:ff:6b:4c:6c:d8:6a:3d:02:
                    09:c8:53:e4:bb:07:63:58:6c:8e:a0:08:4e:d3:1b:
                    47:a3:ed:6c:99:90:eb:72:6b:c3:e9:5a:14:dd:81:
                    98:53:f2:b9:cc:a1:8f:90:c0:65:c8:91:a5:01:3d:
                    7a:82:95:c5:17:21:fa:a1:22:73:d4:f1:54:a7:68:
                    f1:1a:13:9a:bd:93:f1:7d:59:76:1d:bb:9e:9f:6c:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:C2:46:AC:48:73:44:92:C3:AA:74:1C:5D:BE:57:AE:C1:60:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cfc89ce-bc3e-3564-8acb-25be423fc809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.116.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d2:3e:dd:64:f5:f6:55:8e:eb:51:27:bf:1f:ba:89:01:14:
         47:1c:a8:8b:04:bf:7e:02:32:4b:69:48:00:fb:84:98:6c:eb:
         2c:ef:0f:ff:38:08:a7:64:1e:35:f8:d7:20:6f:a7:26:70:68:
         32:10:a6:bd:bd:d1:d4:b4:77:54:cd:3c:e4:46:91:c4:24:e9:
         0e:aa:76:3e:f1:53:d4:04:9b:05:25:c3:4f:95:98:60:70:d6:
         d5:57:e1:b1:0b:80:64:a7:13:88:0f:1c:df:ec:07:d6:b1:b4:
         79:c2:8d:04:61:e6:c0:83:76:e6:2e:91:04:1b:db:40:21:5f:
         19:bf:0c:6a:af:a5:c7:2a:1b:9f:4f:50:c8:91:2d:44:1e:97:
         ef:0a:a0:b6:2b:b1:7f:4b:29:60:1c:9b:83:2e:e1:f6:93:2a:
         66:7c:bf:fc:68:84:80:c9:a5:3e:b9:2c:85:fb:f1:63:50:ce:
         1c:e6:14:54:e8:9e:6e:fe:b1:7b:16:fa:46:84:38:a8:f1:50:
         36:1b:d9:6c:bc:57:f8:99:3b:5e:ac:aa:87:47:2d:dd:41:c7:
         fc:ca:cb:af:d3:ec:ec:6c:b0:38:a4:c9:8a:df:58:ac:38:78:
         49:77:bd:af:dd:59:fa:5c:e3:a1:3d:d6:00:41:06:85:5a:45:
         47:a3:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:50 2024 by rpki-client on console-fra.rpki-client.org