Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/711f0b91-1eab-31d6-8119-8057341d9cc6.roa
File:                     711f0b91-1eab-31d6-8119-8057341d9cc6.roa (raw, json)
Hash identifier:          DrGA2LGkF5FFLN611UUuic2eFWcWj902JJyR6714eRE=
Subject key identifier:   62:C1:66:D4:07:47:47:F7:95:56:7B:62:1C:F6:E9:57:63:8D:5D:EA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847686B97C81A7EE16D302F7500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/711f0b91-1eab-31d6-8119-8057341d9cc6.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        104.71.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:97:c8:1a:7e:e1:6d:30:2f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=5c703ccc-9f10-4734-b8db-e519e7196c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:f0:7b:c7:e0:69:af:b9:d3:1e:75:74:1a:
                    25:4c:e3:77:2e:64:49:77:05:21:8a:34:bd:0c:4b:
                    ef:2b:41:a8:3e:27:52:08:24:8b:fc:12:dd:33:72:
                    d9:e9:2b:42:92:6f:8c:76:c0:33:5e:a0:93:c9:a9:
                    da:e2:43:9d:dc:e6:68:cd:26:5f:cb:a1:12:1a:18:
                    72:19:a6:82:ff:9f:83:57:8f:e5:f9:b3:4f:84:dd:
                    59:9e:fb:38:d2:2a:03:c0:1a:ee:a7:26:0d:6a:45:
                    de:a1:df:a8:59:2a:96:2b:34:14:2a:b8:01:f5:96:
                    ef:30:d5:c5:e4:62:63:f1:76:1e:28:d1:f6:25:83:
                    ff:0a:30:e3:d3:19:de:71:cf:dc:4b:eb:c2:d5:8b:
                    a7:53:4b:0b:56:af:e4:1c:b4:a6:38:78:0a:e3:6c:
                    0b:31:49:d2:7d:50:8c:21:8a:ed:8e:0a:48:bf:bf:
                    34:c9:f4:28:96:49:e6:c0:00:06:5e:d9:29:36:a1:
                    0f:e8:53:e5:42:20:61:1f:dc:8c:dc:79:70:15:51:
                    58:5f:9f:87:c3:8e:a5:34:d7:9e:41:af:88:5b:c1:
                    e2:66:42:65:73:8f:28:8a:14:a9:c1:04:f2:9b:68:
                    9e:5a:cb:d6:26:be:2a:71:e7:0f:a5:02:fe:65:b2:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:66:D4:07:47:47:F7:95:56:7B:62:1C:F6:E9:57:63:8D:5D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/711f0b91-1eab-31d6-8119-8057341d9cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.71.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a2:a7:73:a2:27:46:b2:1f:81:96:3d:ff:81:35:34:e6:c5:
         ed:3b:ba:6e:32:fc:15:2c:3f:19:ec:ad:ea:7d:1c:b0:fa:d2:
         38:e2:0e:a9:56:1c:32:b1:f2:c9:16:eb:41:85:cf:72:f6:e3:
         85:d2:5e:32:4a:11:ec:fc:6b:29:8a:f0:63:db:5f:a5:07:7a:
         e7:24:77:a8:81:c8:06:17:5b:25:bd:cf:9a:2e:b3:9b:93:82:
         39:61:87:45:77:28:74:ed:c5:59:5e:3e:63:a4:0c:47:a6:13:
         b1:93:ef:1b:c1:ca:44:42:ce:30:5f:c7:85:9f:0e:15:7e:5f:
         34:db:2d:bd:eb:c2:0f:3f:24:e7:1f:6a:61:ef:a6:05:2f:92:
         55:d1:54:a7:e1:76:ea:df:2e:99:b4:3e:84:3b:f2:19:70:01:
         49:93:a2:a6:48:9e:c0:1c:10:f6:84:ea:9c:17:70:10:9e:7a:
         b4:f8:56:dd:ea:e6:e7:c1:5b:3a:77:d4:77:b4:7a:8d:cc:b4:
         3b:4b:9e:17:31:3c:21:ca:26:3c:df:a0:7d:06:7b:bf:d9:eb:
         a1:45:7a:5c:e8:23:9e:fd:37:eb:5a:fe:8e:dd:41:76:2a:28:
         a2:82:3f:9b:4d:a2:41:a9:9b:a2:ed:ef:89:bd:d9:1b:ad:df:
         11:33:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:16 2024 by rpki-client on console-ams.rpki-client.org