Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c35957-34f2-3882-8396-c78261119b69.roa
File:                     56c35957-34f2-3882-8396-c78261119b69.roa (raw, json)
Hash identifier:          W8eJi5lAAwPKQVFTwP8xcHz4orhUFO+X9etyoVAnv2c=
Subject key identifier:   68:A8:47:22:99:D6:E3:04:E5:59:C4:42:AE:3E:76:56:75:F8:30:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BA27E2AF34BD52B3044823C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c35957-34f2-3882-8396-c78261119b69.roa
Signing time:             Wed 01 May 2024 10:06:48 +0000
ROA not before:           Wed 01 May 2024 10:06:48 +0000
ROA not after:            Tue 30 Jul 2024 10:06:48 +0000
asID:                     35994
IP address blocks:        104.124.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:27:e2:af:34:bd:52:b3:04:48:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 10:06:48 2024 GMT
            Not After : Jul 30 10:06:48 2024 GMT
        Subject: CN=eccb12f6-5c07-4549-9546-b43299ea8eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:2f:70:09:7e:b5:cc:f5:6f:a6:9b:10:34:
                    3d:c7:3c:66:3e:14:cd:81:c7:66:6f:1f:87:42:14:
                    37:fe:5c:72:f2:43:d0:be:99:7b:0a:d5:7d:ce:df:
                    8d:ae:b6:cb:50:78:57:f5:4d:c6:be:89:34:62:d1:
                    10:07:f1:15:51:57:1f:6a:2f:ed:34:cb:16:5b:04:
                    a7:d8:22:4d:40:bc:47:df:13:ae:05:6c:ca:3d:b3:
                    49:48:17:9f:d0:bf:70:90:af:cf:52:00:61:72:89:
                    f0:ed:f7:d4:fb:e4:d1:2f:05:39:bf:fa:0e:51:28:
                    81:4d:11:5a:de:71:f0:de:5d:24:9b:14:ef:3f:a6:
                    77:d5:8c:ba:9a:cd:e1:00:07:24:b1:1b:9b:d4:35:
                    58:82:83:f3:40:35:a5:5b:d5:da:b2:88:ad:cd:93:
                    fb:06:11:28:b6:4b:1b:85:fb:c5:ba:32:84:35:3c:
                    c8:71:fa:b7:7f:ee:bf:8e:c4:ea:75:6a:c5:cc:89:
                    d1:01:2b:aa:b2:06:05:d5:5c:42:8c:c8:e7:e9:6b:
                    e3:f1:e3:74:a3:35:90:33:b0:78:55:97:49:13:c3:
                    7b:cc:89:9a:c6:ba:78:98:28:fb:34:25:4e:d3:1e:
                    23:e4:02:cb:6a:25:30:c8:c3:32:ae:d9:75:63:bd:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:47:22:99:D6:E3:04:E5:59:C4:42:AE:3E:76:56:75:F8:30:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c35957-34f2-3882-8396-c78261119b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.124.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:af:86:b8:a5:92:fc:ee:74:1e:64:da:ae:2f:12:f3:7d:84:
         fe:b8:5b:3b:ad:86:d1:f7:c9:dc:04:86:ef:1f:f8:cf:9e:86:
         4d:5d:47:aa:2f:cb:5d:fc:1c:24:ce:4f:e1:07:f7:54:ef:f4:
         96:dc:2a:dc:c1:f1:c2:f8:78:46:5e:0d:f2:af:bd:f9:fb:de:
         41:6c:53:1e:7d:7c:dd:76:f7:2b:2f:99:51:03:9c:3c:ca:43:
         6a:72:46:ca:96:7f:e6:5e:71:96:e2:a9:19:0d:03:b2:2c:28:
         69:a6:92:23:92:f3:16:db:eb:bd:bb:73:c3:5b:4d:ce:3d:9e:
         e6:6c:f7:cb:03:3a:d9:18:2a:5e:62:50:3b:ff:8c:c8:71:22:
         24:bb:cf:5e:cd:bc:d4:fd:9a:6e:7a:ec:51:0f:e8:00:a6:f7:
         e4:af:88:69:0d:64:c8:dd:99:21:cb:a4:ed:3a:6c:3e:59:a1:
         1e:87:d4:5a:cf:aa:03:b5:7b:70:14:05:c9:c8:7d:46:a8:bb:
         2b:72:d7:f3:e8:67:65:1b:f5:77:61:7f:e2:4c:6c:25:c0:49:
         a3:68:13:d9:f1:ad:d7:53:f2:3d:4a:44:42:43:b9:0a:66:09:
         1a:ec:bc:5e:59:ee:ac:fc:6a:53:e7:4c:6b:dc:cd:e5:06:d8:
         a3:87:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:52 2024 by rpki-client on console-fra.rpki-client.org