Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7cfde43-2429-3545-836d-ebc016a0d91c.roa
File:                     b7cfde43-2429-3545-836d-ebc016a0d91c.roa (raw, json)
Hash identifier:          AhVDnTfG01ABerLLQmNtSQmrnLrG1w5tfw3CMAdbjlo=
Subject key identifier:   1F:A5:67:8E:7C:56:7F:AA:55:1D:E8:DA:A5:3B:94:7F:A6:46:AE:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BB6F0E19BA05F05D60200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7cfde43-2429-3545-836d-ebc016a0d91c.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.64.0.0/10 maxlen: 10

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b6:f0:e1:9b:a0:5f:05:d6:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=5c882d1c-0541-47d1-80f4-fd7a7e0b311f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:f0:2d:00:4a:a0:16:71:65:1d:89:c5:7d:
                    44:b5:8f:e2:6d:6d:17:66:8d:c5:04:c1:31:69:cc:
                    9a:09:5a:ae:a4:d5:3b:ea:b6:fd:23:25:85:dd:58:
                    42:1c:06:bd:cd:fb:70:32:41:59:06:5d:00:38:fa:
                    68:bd:9d:8e:fa:00:19:d4:bb:be:47:66:40:82:10:
                    16:06:bc:68:92:49:18:9a:66:1a:e7:1a:18:93:28:
                    00:2d:5c:0d:80:6a:1a:62:a9:f8:e0:eb:fd:50:b9:
                    f2:f8:89:5d:ad:4b:30:56:76:d1:4f:cf:ae:5e:79:
                    0b:e5:aa:3a:48:80:72:f6:0c:a3:8e:2b:9c:92:13:
                    5c:1e:c5:2c:95:5b:3b:53:b7:3f:00:02:ad:16:e6:
                    19:1e:f1:6e:ab:85:18:56:78:6b:a9:73:0b:ce:a5:
                    fa:bb:9e:f8:6f:fa:40:00:c7:95:f8:37:1b:53:0a:
                    68:0f:7d:58:bf:eb:6a:c9:8c:de:79:5d:29:2a:de:
                    85:4d:6b:3c:b3:35:27:ce:70:ce:85:bb:28:93:47:
                    af:01:4e:87:f5:2d:eb:12:c4:a9:9b:61:66:e5:6a:
                    ed:e6:eb:90:a7:f8:7e:dc:94:01:4a:be:09:e1:ae:
                    10:ba:3d:f1:08:19:d8:93:96:fe:64:b0:6d:f9:06:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:67:8E:7C:56:7F:AA:55:1D:E8:DA:A5:3B:94:7F:A6:46:AE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7cfde43-2429-3545-836d-ebc016a0d91c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.64.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:f2:1f:98:40:be:5e:4e:98:c9:5d:a1:f2:7e:19:39:1a:
         e3:c3:5d:b4:b0:c2:8f:38:9e:ea:a9:cc:e9:48:f0:3e:d5:a3:
         96:8e:1a:bc:33:11:5b:de:ba:4f:cf:58:b9:a6:f4:0a:7a:46:
         9b:51:c7:36:96:50:e9:a7:93:3a:86:7b:78:3b:6d:dc:96:33:
         31:9d:cc:90:ee:c8:93:c0:6b:1a:b5:ef:34:e5:24:75:09:7c:
         b9:f3:fc:50:f9:54:5d:40:10:53:e7:13:4b:a6:2b:d0:3a:84:
         55:1c:aa:0d:7a:dd:50:d0:0e:fd:5e:02:59:b6:de:a8:30:a2:
         3a:b5:49:a7:9e:1e:ba:00:2b:69:43:27:e2:e2:53:2c:9a:d3:
         81:c0:1e:13:3f:5e:04:72:d0:1f:50:5d:c2:a7:6f:fd:49:9f:
         d1:97:e1:c6:5e:f1:fd:55:a5:5f:3b:75:27:47:b1:b3:84:a2:
         0b:3f:1f:10:a4:d4:5f:cb:19:18:81:82:6b:8d:82:dd:b7:ba:
         3b:69:a0:f1:f8:2b:6c:46:5d:53:b7:be:93:2f:71:ae:43:ec:
         bb:c0:4b:dc:5f:fe:e0:77:cb:ce:b8:41:b4:48:b0:d1:25:5e:
         23:a3:44:5c:d9:3c:49:23:19:d6:05:ba:8f:45:5d:0c:7f:e6:
         9f:f2:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:18 2024 by rpki-client on console-ams.rpki-client.org