Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3c3a66-6223-32e4-99e1-dd7881f02c22.roa
File:                     fe3c3a66-6223-32e4-99e1-dd7881f02c22.roa (raw, json)
Hash identifier:          tV5N7h8K8y0Tkj6HfO+adquAoKbmU/E6OuAc9UQ+11E=
Subject key identifier:   6C:F1:FF:72:FE:61:81:5D:3F:7D:45:3F:28:83:57:05:66:11:D4:44
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845B755B925785143D47766F900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3c3a66-6223-32e4-99e1-dd7881f02c22.roa
Signing time:             Tue 30 Apr 2024 09:51:43 +0000
ROA not before:           Tue 30 Apr 2024 09:51:43 +0000
ROA not after:            Mon 29 Jul 2024 09:51:43 +0000
asID:                     20940
IP address blocks:        104.91.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:55:b9:25:78:51:43:d4:77:66:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 09:51:43 2024 GMT
            Not After : Jul 29 09:51:43 2024 GMT
        Subject: CN=31facfc7-ab4a-4c39-8d95-0469e7790440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:49:4a:bb:63:9c:19:a2:4c:8d:02:b9:b9:
                    94:44:17:76:a6:03:af:a4:6f:8e:89:81:e1:29:97:
                    6c:1c:00:50:2e:a9:8d:9d:a6:df:4e:d3:e3:57:86:
                    46:88:68:99:ef:12:cb:cd:61:02:19:62:59:5a:4c:
                    78:37:d6:47:2c:80:96:30:ca:81:91:ce:7d:d2:ed:
                    22:53:04:c2:6a:df:0b:73:3b:91:62:86:ad:29:69:
                    db:ce:f7:72:09:4d:a1:b3:c8:e3:ce:25:9b:98:ba:
                    75:86:e1:4c:61:da:68:16:6a:38:20:52:a2:73:e8:
                    f7:a3:7a:b3:97:f7:b4:9f:3a:80:ab:6d:c3:68:6f:
                    35:b0:93:74:d6:d2:a1:10:7b:77:e0:3b:03:3f:2e:
                    98:46:d5:3a:00:06:3e:73:73:eb:89:96:21:f0:17:
                    f3:1b:e4:fa:7f:46:0f:90:90:bd:5c:62:16:fd:d6:
                    55:cc:57:db:3a:61:b0:a0:dc:bb:d0:ce:c7:e0:09:
                    e7:1a:0b:08:00:ac:2f:f0:d5:00:6c:fe:bf:bd:71:
                    c3:31:50:94:49:c7:16:e6:76:51:e7:5f:27:2e:46:
                    2c:2a:7c:55:92:2b:a9:28:56:51:90:b3:ab:dd:8d:
                    f5:cb:e3:c1:e2:8e:e5:be:d4:89:95:e3:1d:00:b2:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:FF:72:FE:61:81:5D:3F:7D:45:3F:28:83:57:05:66:11:D4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe3c3a66-6223-32e4-99e1-dd7881f02c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.91.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:32:47:f6:1f:95:01:23:5f:de:78:2a:03:20:7f:88:c0:
         ff:49:31:fe:a5:bb:91:80:bf:d2:eb:a0:2a:f5:7c:60:ca:2e:
         4c:b4:17:e9:9a:89:5c:2b:3b:ac:cf:05:89:bb:3c:b1:f9:4e:
         30:14:90:74:0d:81:a8:14:0f:c0:42:76:cc:7a:44:74:ff:99:
         cb:15:fb:ee:a0:40:1e:4f:b9:fd:b1:97:71:6a:f9:c7:58:fe:
         02:78:f0:be:48:d5:e3:37:c7:9c:38:1d:d3:d2:ea:6f:af:af:
         30:e2:e0:1b:1c:4b:fe:ac:ad:57:d5:7b:e6:2d:8b:58:ec:7a:
         0e:6c:88:09:f8:7e:70:84:89:64:2a:3c:d7:9e:be:bf:de:39:
         5b:79:b5:3c:bf:3e:8c:24:85:97:d4:8c:95:1c:e1:a5:1e:0e:
         c4:8c:6f:2c:2b:18:12:e5:6d:11:65:24:91:90:93:0c:86:aa:
         6e:20:dd:ce:d4:29:86:83:54:d0:eb:37:45:a7:47:b7:17:2b:
         c2:8e:91:c3:76:4b:20:db:ea:2d:7e:1a:17:85:58:7e:51:ba:
         60:b5:8c:c2:75:73:32:31:97:25:be:b7:b6:8f:cc:cb:f6:35:
         83:41:2f:21:64:ba:0c:51:3f:db:56:27:8c:f2:64:f5:a9:3d:
         8b:93:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:17:00 2024 by rpki-client on console-fra.rpki-client.org