Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80db8cb-f78c-3e80-9137-6e319ede88b9.roa
File:                     b80db8cb-f78c-3e80-9137-6e319ede88b9.roa (raw, json)
Hash identifier:          9dzy8qnKyE8DdRvWloo+U8P71drSVSweX6oRGjYNthU=
Subject key identifier:   D8:0B:AA:1F:97:3F:D7:49:74:D9:28:B5:1A:01:22:7F:BF:01:32:C1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847792BBD4F83D3A88F27AC9800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80db8cb-f78c-3e80-9137-6e319ede88b9.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        104.123.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:bd:4f:83:d3:a8:8f:27:ac:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=59c05d26-5f94-427a-b2ee-c2512f170f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:06:7e:a4:64:c4:65:0c:e8:c0:67:34:ca:85:
                    a4:ba:a7:32:e7:9b:17:b9:10:18:be:1e:dc:25:08:
                    d6:46:a8:7d:1b:82:37:22:d8:d4:db:37:75:7b:61:
                    6b:ce:cb:39:29:17:a7:7a:ba:9c:28:e0:96:40:3b:
                    18:28:92:72:11:15:e5:d5:6c:dc:c7:7d:27:3c:48:
                    59:36:32:1d:c0:cb:52:89:35:51:c7:b8:92:0f:aa:
                    b8:ff:ce:18:c2:5f:c9:81:08:d7:13:86:d2:8c:75:
                    8d:5b:41:b5:4e:e1:27:ae:d0:bd:99:20:c5:18:fd:
                    a0:d7:d2:e5:62:39:b1:dd:04:b3:34:55:da:ae:c2:
                    00:0f:f3:2c:20:9c:72:3d:5b:65:37:56:3b:40:a2:
                    2e:d4:69:e1:07:cd:ca:80:38:8e:41:18:35:1f:e6:
                    6c:53:66:12:77:0a:b8:49:7c:31:78:32:26:31:c7:
                    1a:4a:22:6d:ec:e4:7c:5b:be:11:71:a1:c7:41:10:
                    4d:80:68:92:2f:05:09:2c:86:d7:42:6e:7a:cb:d6:
                    5b:08:22:bf:9a:df:c7:88:bb:49:0a:95:89:fc:a6:
                    e7:ac:9b:ea:aa:f2:f5:53:79:a7:09:0a:8f:a2:62:
                    8d:6b:a9:6e:68:09:ac:00:f5:e8:44:fc:4e:aa:7e:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0B:AA:1F:97:3F:D7:49:74:D9:28:B5:1A:01:22:7F:BF:01:32:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80db8cb-f78c-3e80-9137-6e319ede88b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:7d:bb:87:03:0e:c9:0d:d8:a1:f9:d0:71:94:96:b9:a0:
         86:1e:61:bd:0b:92:b3:03:fd:2a:1a:8f:50:ed:39:f8:e4:26:
         af:13:72:d2:eb:74:90:a7:3a:77:55:e9:6c:7d:67:ee:57:63:
         70:f0:18:e2:52:4a:50:5f:37:9f:b2:b7:16:b8:25:92:6d:63:
         43:30:93:57:30:69:1e:36:4c:e2:14:8e:ab:3e:36:07:ae:b0:
         91:28:c5:13:14:44:0f:e0:8f:87:73:93:fb:eb:7f:6f:f9:0c:
         7b:5b:a9:1e:e1:1a:11:55:89:97:d3:70:91:4e:a7:ab:49:68:
         c4:bb:24:b5:95:bb:d9:8d:04:55:37:90:91:17:04:e6:06:41:
         cc:f7:58:e1:42:97:4f:b1:c4:16:07:af:c6:bc:f4:f2:8c:ea:
         45:a3:06:f2:66:26:dd:7f:14:e9:97:11:31:c7:3d:64:ee:ad:
         29:79:00:21:39:84:9b:2c:5b:a6:01:4c:30:57:35:23:79:e9:
         8a:ea:40:d6:df:a7:39:db:c3:74:24:15:37:85:21:c7:40:79:
         ce:84:69:ec:54:fe:84:22:47:9e:eb:6d:ea:d5:e4:72:6e:47:
         56:4d:80:91:36:3f:29:c1:60:3b:ce:db:8d:d6:42:bc:0f:85:
         8a:3d:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:25 2024 by rpki-client on console-fra.rpki-client.org