Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6748ab5-4dad-39d2-82dd-5a5c81ce2e29.roa
File:                     a6748ab5-4dad-39d2-82dd-5a5c81ce2e29.roa (raw, json)
Hash identifier:          AXDiJlTYGab2jsYWSCeHoIw6sgSlm3O0wXlYHPdwf5Y=
Subject key identifier:   16:68:58:7F:02:B4:4D:28:6A:9B:03:01:C4:EA:CC:5A:B0:A2:CF:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B48A42D05E0DD6CE032AD540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6748ab5-4dad-39d2-82dd-5a5c81ce2e29.roa
Signing time:             Mon 29 Apr 2024 09:50:09 +0000
ROA not before:           Mon 29 Apr 2024 09:50:09 +0000
ROA not after:            Sun 28 Jul 2024 09:50:09 +0000
asID:                     9605
IP address blocks:        104.69.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:8a:42:d0:5e:0d:d6:ce:03:2a:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 29 09:50:09 2024 GMT
            Not After : Jul 28 09:50:09 2024 GMT
        Subject: CN=5269e378-2d84-4a47-a522-02eb8de8f645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:9a:bf:99:14:22:10:f7:3a:c7:d2:6d:56:
                    c4:f0:5f:b4:40:31:93:91:d3:58:9b:86:d5:c1:00:
                    aa:62:df:ae:33:e4:49:d3:2e:82:f2:20:11:1b:37:
                    dc:26:be:78:83:03:46:ec:4a:13:b8:40:91:ad:70:
                    a1:2b:3b:52:a9:e5:6f:8f:88:5a:35:ba:53:03:b0:
                    95:6c:a4:f9:ab:cd:18:fc:98:ee:d4:02:36:e7:40:
                    9d:07:d1:05:ec:64:28:ac:89:8b:9f:2e:7d:8f:11:
                    b0:6f:22:6c:a2:43:f0:4d:3c:d1:c7:b3:56:3f:a8:
                    f6:fe:bd:28:8c:00:05:40:d0:73:4a:ff:a8:bd:cf:
                    a1:fc:ab:33:f5:c0:5f:00:e4:c9:3d:d2:14:d0:1d:
                    9c:60:19:40:ff:c4:ee:c9:fd:14:c3:3f:a3:ed:66:
                    9c:41:40:32:9f:0f:3c:af:72:cb:bc:28:27:52:00:
                    27:c0:89:a6:26:53:7e:02:b6:33:b6:12:eb:e8:5e:
                    9e:38:98:3d:bf:25:69:c4:32:2c:8d:4f:69:9a:68:
                    c7:52:f5:33:e5:cd:c0:87:b3:d2:96:cd:56:3f:4d:
                    49:47:0c:40:9d:3d:33:1e:a0:c5:31:e7:03:07:08:
                    dd:8a:2c:35:e2:3e:7d:c7:81:59:b3:f2:23:b5:3d:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:68:58:7F:02:B4:4D:28:6A:9B:03:01:C4:EA:CC:5A:B0:A2:CF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6748ab5-4dad-39d2-82dd-5a5c81ce2e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.69.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:d4:87:ad:45:a2:cc:86:5f:ff:74:8b:79:39:f3:7b:28:
         10:1f:24:75:1a:bc:b7:d6:7f:82:37:4a:cd:85:d8:20:4b:a5:
         e4:30:8a:94:c7:61:e7:0f:d2:3e:29:97:c1:b9:89:f5:81:e1:
         63:fc:e8:9a:16:4e:48:72:f5:53:5f:6c:d2:7e:46:04:cb:a6:
         5b:d0:e4:3e:33:66:d4:58:b9:0b:48:fe:97:21:56:74:d5:88:
         46:e2:3f:be:d4:04:b8:31:ff:9a:20:15:ab:26:f8:6f:1c:46:
         29:62:a1:39:59:40:0a:fb:57:f4:c6:7f:76:45:6c:19:c6:29:
         51:f0:e2:f8:b2:52:e6:b7:18:e4:40:f5:a9:d6:81:51:2e:d2:
         25:84:ef:03:96:cd:b9:fd:f5:d5:ca:48:cb:e7:aa:3f:aa:19:
         cc:b9:b9:bf:0b:3b:af:aa:ee:f8:8f:c2:4a:4d:c0:12:26:26:
         f5:b2:a8:ef:6f:c7:27:7e:66:4b:f3:92:92:d9:ff:64:3e:6a:
         c6:59:28:96:b3:75:a5:f5:a2:27:ea:6b:cd:fd:85:03:93:fe:
         5e:36:9a:59:da:82:7a:36:b4:0d:f7:9c:47:ae:f7:b7:0e:e2:
         ae:3a:6c:c3:e9:83:46:5a:66:43:2f:7b:f0:43:52:3e:f2:38:
         aa:4b:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:07:53 2024 by rpki-client on console-ams.rpki-client.org