Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79baf92f-d509-3b64-b25c-a6a61963d7a2.roa
File:                     79baf92f-d509-3b64-b25c-a6a61963d7a2.roa (raw, json)
Hash identifier:          P1R0AfTuWD6jPNJGtVAL9pvuCnEkPY6G/NtW7+1Y8ZQ=
Subject key identifier:   19:88:63:44:3E:C9:07:7B:AB:52:F4:D0:96:14:C0:06:3B:8B:C6:23
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584776610DD582E5E9BE6E4AA980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79baf92f-d509-3b64-b25c-a6a61963d7a2.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        104.85.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:0d:d5:82:e5:e9:be:6e:4a:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=b5f01d87-cdeb-43d7-a3ba-8076b17c3b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:f9:c5:99:fe:e3:47:8c:61:f7:35:17:94:
                    79:f0:8d:a7:6a:37:4b:8c:13:a3:dc:2f:73:08:6d:
                    38:0b:8f:74:04:a0:f6:e5:42:9f:5b:3d:1f:66:fb:
                    66:2d:b0:48:81:df:9e:10:2a:c7:6b:55:53:20:d4:
                    51:b5:74:9c:f2:b3:a9:d0:50:66:bb:de:c2:4a:9e:
                    2b:0b:71:34:b9:ef:cd:3c:bf:fd:c6:18:e7:95:b5:
                    e7:83:d2:5b:3e:49:62:20:cd:0a:5c:6d:87:fc:a0:
                    44:69:aa:f3:86:2c:d2:fd:da:e4:f2:f0:38:79:5e:
                    d1:b5:8b:3b:64:c4:bd:5f:1b:19:ef:e8:5b:bd:e0:
                    ff:08:9f:32:bc:fc:ca:c1:98:ee:ad:1e:0e:dc:d7:
                    27:fb:15:b8:13:a3:48:cb:a0:0c:96:8a:3c:ff:e7:
                    36:5c:ea:f7:77:ac:79:8f:02:fd:75:bb:c8:45:af:
                    1b:fc:5c:62:32:ec:1f:9a:42:98:a7:ba:5b:d5:64:
                    ce:e4:aa:a9:17:77:cd:97:9f:35:36:77:a6:13:1d:
                    eb:86:79:72:c9:e5:6b:4d:06:fa:dc:f7:92:62:0f:
                    f1:66:0b:93:ee:da:57:5c:c2:c1:b7:75:04:16:5c:
                    15:2b:2c:f0:b8:54:e2:75:21:62:ef:4b:e7:89:e3:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:63:44:3E:C9:07:7B:AB:52:F4:D0:96:14:C0:06:3B:8B:C6:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79baf92f-d509-3b64-b25c-a6a61963d7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.85.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:20:c8:30:05:0b:aa:48:00:d5:fc:e6:47:8e:76:0d:47:
         48:c5:26:d6:9d:af:de:e4:82:1b:6f:9e:76:a3:e8:82:7c:9d:
         a5:3c:07:69:c5:51:8e:13:de:c0:78:7c:b1:81:66:c0:62:b4:
         f0:a0:e5:94:36:38:2f:32:fe:3c:44:40:7f:15:23:fd:fc:2b:
         df:af:70:c5:8c:e4:af:71:87:80:9d:c7:af:68:28:5f:d0:50:
         af:b9:5d:5a:00:b8:64:e7:cf:72:03:86:5b:ef:67:91:ae:be:
         3d:44:eb:e2:36:29:62:1f:85:7b:b3:74:d2:65:e1:df:b3:af:
         92:15:dd:ae:63:db:cd:3a:09:5d:98:53:62:eb:ef:3a:62:2a:
         50:2d:cc:29:3f:c0:e7:3b:8a:af:b9:53:20:45:17:d1:2d:c3:
         62:23:fc:eb:09:0b:71:61:00:95:bb:e7:97:58:e5:bb:72:c1:
         ef:7d:0e:87:d6:c7:39:b9:80:79:86:1b:99:48:6c:ba:8e:66:
         0a:83:89:55:3e:c0:ec:bf:2a:4c:c6:2d:05:0b:bd:92:84:ce:
         94:cb:ad:d0:3d:75:a2:22:96:54:ae:97:0a:24:6b:c2:50:70:
         a2:8d:4f:f8:dd:5e:d0:ab:c4:83:a3:07:78:8a:9a:9e:78:df:
         89:eb:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:17 2024 by rpki-client on console-ams.rpki-client.org