Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46932105-a832-3046-a47f-4f75aa07adf8.roa
File:                     46932105-a832-3046-a47f-4f75aa07adf8.roa (raw, json)
Hash identifier:          mhKpQsIecvUtJ617l50SsYEs5x0fuGN526iwLuDZfBE=
Subject key identifier:   4D:EB:37:69:99:AD:9D:C0:EB:14:55:7F:6A:61:E5:D1:E5:F5:25:98
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847686B95F06E9C7436697998E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46932105-a832-3046-a47f-4f75aa07adf8.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        104.122.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:95:f0:6e:9c:74:36:69:79:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=1ffc7923-0228-4136-8312-e37b642edd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:ab:5c:5d:24:48:46:a4:2e:3a:70:f1:d8:
                    1c:93:78:00:2f:1d:84:6a:f9:27:02:88:7f:ef:cf:
                    e4:32:21:2a:a1:99:9b:1a:97:f6:c0:1a:54:41:7c:
                    da:1a:56:58:73:5c:87:c7:17:77:3e:b2:f1:9b:1f:
                    3f:9a:3b:0d:41:83:15:66:d4:30:87:e6:4d:c8:cb:
                    be:02:05:80:b0:0b:f2:c5:85:be:65:f1:67:b5:f7:
                    2a:b8:88:c0:d2:ea:f4:35:c0:35:97:0a:ef:e3:3d:
                    86:e2:5a:7c:84:78:3d:bc:a4:05:81:d8:00:7c:7f:
                    fa:1a:8e:4d:8b:5d:a7:33:ad:84:57:80:1a:51:6d:
                    90:17:79:5a:db:6f:a1:0a:f4:59:a3:a3:8c:0c:4d:
                    87:68:ce:bb:c4:19:24:b6:e7:74:f3:80:6b:fc:34:
                    b4:f6:ec:35:b0:52:dc:7c:85:6e:34:1b:0d:49:21:
                    c2:ed:a5:55:67:87:ba:ba:7c:c9:76:74:35:06:91:
                    22:46:90:b2:00:8b:9d:9e:99:a2:9f:e2:1c:fa:62:
                    ee:43:e9:e7:75:f4:e9:c5:6c:71:44:55:2e:71:cb:
                    13:06:ad:16:8a:2d:48:3b:2f:2b:51:ae:1a:3b:3f:
                    13:54:30:ef:df:4e:8d:bb:d3:06:a0:27:02:73:7f:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:37:69:99:AD:9D:C0:EB:14:55:7F:6A:61:E5:D1:E5:F5:25:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46932105-a832-3046-a47f-4f75aa07adf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.122.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:02:14:46:ae:7d:3c:af:25:91:13:44:a1:46:bc:ed:50:8a:
         7e:5a:1f:f5:bc:bd:4f:cd:47:7f:58:a6:1c:03:85:86:3c:e8:
         04:3b:42:24:41:5e:2f:0a:dd:68:21:15:ae:6a:b9:39:99:f4:
         a6:9d:5a:35:a4:89:1c:e7:59:1e:48:c3:c8:5d:ec:8a:e9:6c:
         07:53:d3:ce:8b:57:28:3f:d5:d5:0e:cd:59:d4:9b:fb:ce:5b:
         ec:c3:b8:d7:0b:ae:2e:04:0b:fa:58:99:4f:51:f0:73:6b:f0:
         78:5a:72:29:16:29:8a:40:6d:77:a1:cc:c2:64:a9:c2:e5:b3:
         82:21:ce:e4:12:fc:48:0c:3b:75:4b:39:05:84:e8:6c:5a:37:
         86:29:f4:0a:e3:80:58:13:0d:8c:2e:ba:4f:28:e5:ad:24:e9:
         e0:9c:d5:3e:fd:71:8c:e5:4b:ed:ec:47:93:eb:fd:3a:03:e7:
         43:34:14:83:15:a4:9c:5b:24:1b:f0:0d:a4:2d:6b:9a:a0:ac:
         14:0b:86:57:3b:d9:ec:56:70:ae:dc:3c:8a:70:42:30:d3:25:
         ce:6e:6a:19:8e:32:8c:e7:4a:93:a9:31:d0:9f:94:f2:49:05:
         d2:02:9e:db:c0:a7:9b:e6:65:87:31:13:22:05:ca:c4:e5:d7:
         c5:f1:1b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:36 2024 by rpki-client on console-fra.rpki-client.org