Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/265f34dd-a96f-3798-bc2d-91c8727ff553.roa
File:                     265f34dd-a96f-3798-bc2d-91c8727ff553.roa (raw, json)
Hash identifier:          1U8ulExzhQzcjwCaKb/aTGX6ll0PjC6BPIdFwzLGFrA=
Subject key identifier:   00:CF:91:C9:B6:B8:4D:52:09:45:62:B3:F1:EC:12:EF:E3:4A:89:29
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285845A6F36A9928DEDA63CBDB14A0
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/265f34dd-a96f-3798-bc2d-91c8727ff553.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     46562
IP address blocks:        104.243.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6a:99:28:de:da:63:cb:db:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=5f07427b-04ae-41e5-aa4b-b3b6c8ea1d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:53:0c:ba:b2:0f:27:db:10:18:e9:ba:f0:
                    0f:57:b0:71:45:f4:5a:60:8f:68:12:10:e5:b7:b4:
                    ac:94:b5:be:23:fb:a9:1a:1f:1d:b8:01:eb:71:5e:
                    86:8f:08:56:60:dc:0d:18:bc:1f:38:b2:85:01:97:
                    08:74:8e:8b:6e:a6:0a:74:f4:08:8d:11:16:22:d6:
                    d7:87:5e:bf:b2:f6:68:da:cd:a7:9c:01:f3:b9:1d:
                    f9:d9:67:dd:bc:96:15:f3:b9:e2:f0:4f:ce:fe:da:
                    65:cf:43:70:06:02:44:fe:dd:fd:16:ca:25:89:55:
                    74:d8:7e:c5:4a:35:60:8f:72:c0:24:a0:26:3f:39:
                    82:3f:f4:dc:18:9b:35:5f:d4:f1:c5:f3:63:1a:4a:
                    12:18:31:86:a4:fd:f8:2f:7a:b2:63:57:26:00:b7:
                    1e:ef:ed:64:5f:1e:4d:b2:24:b8:17:38:a2:a0:ba:
                    84:0b:81:6d:f7:9d:cc:c5:ee:68:c4:3c:df:00:d5:
                    fc:5d:e5:34:2c:f3:a6:cb:da:98:d3:7d:01:0b:4c:
                    f6:25:ab:2d:20:e7:ef:3e:2c:59:87:a6:fa:bc:c4:
                    74:08:c0:47:3f:0a:b8:98:5b:26:96:aa:ab:51:dd:
                    96:49:74:75:e9:ef:9a:f6:b4:fb:31:34:c5:91:7c:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CF:91:C9:B6:B8:4D:52:09:45:62:B3:F1:EC:12:EF:E3:4A:89:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/265f34dd-a96f-3798-bc2d-91c8727ff553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:11:c0:c6:79:e1:da:87:ce:7d:e2:a7:ea:ff:bd:63:a0:fe:
         2d:9f:05:09:eb:bb:9d:27:9a:74:88:20:12:27:a6:9a:5c:9a:
         22:58:64:84:7b:4a:87:fa:20:ba:17:3d:ee:75:18:c4:fd:76:
         24:33:ba:66:ff:dc:fa:7f:1b:ad:29:57:72:47:61:20:19:7a:
         19:ec:7e:ec:2f:a4:74:97:2b:53:ea:f8:8e:98:e5:e1:ff:99:
         fd:45:c6:5c:35:d2:56:ae:fe:ce:d7:5d:e3:c2:84:98:dd:fc:
         a6:6d:c0:09:64:74:20:8d:06:7f:f5:69:4c:0d:0c:03:af:07:
         cf:cf:1c:d5:cf:16:99:33:a7:d6:7e:9a:a0:89:94:c2:f3:f4:
         4a:dc:ec:11:7a:f2:06:fe:60:d0:c5:31:db:eb:6c:be:81:9d:
         da:ff:b1:06:1c:03:55:ee:00:9c:e5:99:94:e0:15:bc:7e:07:
         46:90:72:04:16:a5:85:80:6d:de:88:2f:83:5b:2f:28:45:12:
         6e:08:9a:15:a1:e7:6c:4e:c3:1a:6d:7b:fa:02:f7:54:73:86:
         f5:0c:c2:70:fe:28:09:b8:6c:2e:ec:09:ee:54:14:21:c6:58:
         e9:a4:96:3b:0b:27:46:66:ab:3b:7d:b3:7d:d8:56:d4:f4:a3:
         e4:43:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:37:16 2024 by rpki-client on console-fra.rpki-client.org