Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ffc8dca-9683-355b-a822-de4c8f04d2c2.roa
File:                     6ffc8dca-9683-355b-a822-de4c8f04d2c2.roa (raw, json)
Hash identifier:          xBNZ0/xza9yQ4IXtGcgJjF6Jf4Gh6ZUQ0YxveVcDSm8=
Subject key identifier:   24:28:92:1F:00:20:2A:67:60:0E:7C:33:86:B6:FC:97:A2:15:6E:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B7328A0BB91C288AA7DC6A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ffc8dca-9683-355b-a822-de4c8f04d2c2.roa
Signing time:             Tue 30 Apr 2024 08:40:50 +0000
ROA not before:           Tue 30 Apr 2024 08:40:50 +0000
ROA not after:            Mon 29 Jul 2024 08:40:50 +0000
asID:                     16625
IP address blocks:        104.90.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:32:8a:0b:b9:1c:28:8a:a7:dc:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 08:40:50 2024 GMT
            Not After : Jul 29 08:40:50 2024 GMT
        Subject: CN=8ad0888c-9e4b-4bd1-a7e8-17f9a7936da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:e6:8f:0c:d4:21:90:04:ed:fd:05:2f:f6:
                    c3:c9:ba:6c:7d:1c:47:04:c5:b1:68:bb:6c:d7:31:
                    29:d9:17:9e:cb:79:8a:3f:e6:37:1d:08:87:7b:43:
                    6e:1d:9b:a6:cd:6d:f6:5e:bd:31:c9:80:54:0b:ed:
                    ab:eb:8a:97:3b:c8:44:97:e1:e8:92:f6:98:2a:48:
                    54:35:e1:1e:fe:d3:bc:d4:c9:e4:ca:6a:05:87:cf:
                    f6:6d:6c:b2:da:41:f0:ea:67:60:e0:cf:ea:96:f9:
                    da:d8:fa:cb:df:d2:a9:3e:ed:86:14:d0:24:17:40:
                    fc:5d:c7:6c:73:ed:a5:af:12:7f:be:7e:7c:4f:2f:
                    ee:9a:84:1f:95:e2:ea:a1:80:25:5c:b5:69:b3:24:
                    06:93:e6:e5:5f:ad:52:cf:7e:56:4c:e5:78:61:af:
                    4f:58:fd:06:41:e0:75:b4:c4:80:b6:3b:77:8f:e9:
                    09:08:f6:50:51:83:ec:55:ba:7d:94:f4:b7:d9:b7:
                    78:bb:54:5c:ac:c1:6a:d1:90:6e:1e:24:fb:fa:5d:
                    69:5a:96:38:3f:05:3f:a0:6c:c1:13:17:0b:2f:51:
                    fd:53:aa:17:68:ea:3f:b2:77:e1:13:80:a5:6f:da:
                    41:8c:8c:de:9c:3e:1c:c6:e9:ea:1f:62:28:79:8d:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:92:1F:00:20:2A:67:60:0E:7C:33:86:B6:FC:97:A2:15:6E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ffc8dca-9683-355b-a822-de4c8f04d2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.90.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:91:0b:a8:61:38:6b:54:34:1c:81:6b:e7:c5:2d:6b:13:
         63:dc:1a:42:63:56:3b:26:c9:ee:10:51:a0:b2:2d:83:d9:b2:
         13:e1:29:20:30:18:45:a3:7c:95:86:2a:fe:25:1c:53:ff:2d:
         41:59:53:eb:05:51:91:b8:7e:80:6f:e4:f4:57:a3:ac:88:66:
         60:a6:18:b8:79:ee:72:5a:f6:ee:b3:d0:78:c1:79:8d:16:35:
         85:74:f9:90:9c:12:f1:33:ba:b4:8d:1c:86:f5:1e:18:10:43:
         11:b9:5b:c2:31:0e:04:8e:5e:d4:27:9c:63:9c:bf:63:d3:66:
         d3:1a:35:5a:69:39:ff:42:45:42:d0:cf:a2:26:70:a9:24:d7:
         de:c4:84:94:f8:fc:df:91:12:8a:b0:f7:11:03:2b:c2:de:b5:
         96:55:88:c5:6c:d7:a4:a2:71:7d:9e:7f:23:ab:3e:dd:4c:c4:
         96:48:e0:28:2b:bb:b1:11:7c:f3:c8:a3:27:9f:9c:5f:1b:89:
         de:fd:ae:8f:ad:c5:44:b5:48:70:6f:ed:e1:4e:3a:51:9f:1f:
         7c:3f:42:00:7e:c4:09:a3:cf:76:02:1f:f5:98:10:1a:63:a8:
         b0:09:b7:8f:f2:41:21:c9:da:7d:12:76:62:51:78:47:2e:ae:
         5a:1a:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:54 2024 by rpki-client on console-fra.rpki-client.org