Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/523549f8-f12a-3cb2-a487-27dd817d9f46.roa
File:                     523549f8-f12a-3cb2-a487-27dd817d9f46.roa (raw, json)
Hash identifier:          012JFZs44K21af/S+e7J4X/BWUyv8d2Qj9UrwItXyEY=
Subject key identifier:   6F:84:35:BF:3B:6F:88:BD:D6:60:E4:1F:EE:1E:6F:74:5E:03:6C:1F
Certificate issuer:       /CN=99e1d141-14b6-4f80-9f3f-dee27509d144
Certificate serial:       010D0C9F43285844FB2D3377A74ADAD24D778DC0
Authority key identifier: BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/523549f8-f12a-3cb2-a487-27dd817d9f46.roa
Signing time:             Fri 23 Feb 2024 00:18:06 +0000
ROA not before:           Fri 23 Feb 2024 00:18:06 +0000
ROA not after:            Wed 22 May 2024 23:18:06 +0000
asID:                     14618
IP address blocks:        104.244.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:2d:33:77:a7:4a:da:d2:4d:77:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e1d141-14b6-4f80-9f3f-dee27509d144
        Validity
            Not Before: Feb 23 00:18:06 2024 GMT
            Not After : May 22 23:18:06 2024 GMT
        Subject: CN=cbfaef37-aa34-478a-9d72-98d0be67a45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:ab:4b:a8:36:ba:fe:32:ac:8a:09:91:f2:
                    10:90:19:7f:30:07:94:18:34:ed:8b:5e:1b:5b:45:
                    85:87:df:f7:cb:e1:0e:ed:e5:cc:1e:85:df:45:3e:
                    98:f7:1b:37:cb:66:5c:6c:93:0c:5b:1e:c6:a5:05:
                    75:3e:34:f6:74:f6:ed:61:c7:91:52:41:c7:47:0b:
                    fa:be:af:ab:20:37:40:79:f5:a4:0c:f3:b8:53:ce:
                    4d:15:96:0e:30:b5:8e:21:aa:26:dc:aa:0c:3f:2e:
                    71:04:0f:59:91:90:d9:f4:3d:96:61:11:bc:71:a4:
                    e9:6e:2d:7c:2b:ad:7d:d7:32:a4:9a:cc:4b:33:c5:
                    de:dc:20:4b:64:e5:42:02:34:a0:f4:70:2d:bf:d6:
                    e1:d1:14:2f:8e:fe:da:a2:e5:64:24:84:52:28:f8:
                    2d:a3:59:be:ba:73:a4:e2:da:79:2d:a8:cc:b6:2f:
                    a1:9b:2d:58:42:ed:e2:cc:65:3d:41:44:65:ae:31:
                    db:2b:5d:d1:25:33:6e:c7:24:a1:88:0c:93:18:23:
                    75:33:99:7d:08:35:d4:48:0d:5a:8b:12:da:09:33:
                    08:f6:d6:a9:3e:02:3a:45:94:06:8f:68:44:53:1c:
                    8c:ac:f5:7b:bb:d4:c9:b9:3d:26:6f:41:63:bd:c9:
                    47:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:84:35:BF:3B:6F:88:BD:D6:60:E4:1F:EE:1E:6F:74:5E:03:6C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/523549f8-f12a-3cb2-a487-27dd817d9f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144/99e1d141-14b6-4f80-9f3f-dee27509d144.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2D:93:B2:25:24:A4:46:22:6F:BD:5A:28:F3:59:42:88:0F:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99e1d141-14b6-4f80-9f3f-dee27509d144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2b:d2:08:7e:5b:e1:2e:37:4d:3a:82:44:47:eb:e3:68:d0:
         f0:35:e0:97:3a:93:07:c4:c2:d3:cf:7a:52:62:6d:d5:6e:4f:
         9a:25:9f:17:f8:bb:ba:92:23:4f:86:98:56:1b:7c:6f:55:bf:
         a0:b3:8f:98:d1:43:60:95:33:10:72:94:93:c9:26:a5:60:fb:
         31:9b:69:78:7d:b5:cb:d9:43:3d:52:c3:b6:84:a6:18:4b:9e:
         ec:97:3c:31:57:b6:66:9d:08:d8:87:2a:c3:e7:28:80:16:05:
         3a:5d:2d:d0:b4:43:99:65:64:5d:74:86:a9:d0:d1:b6:a1:6a:
         5c:bf:f5:22:d1:98:65:7f:31:cf:71:63:ce:89:5d:86:79:f6:
         a4:2b:34:b7:87:5e:a5:11:d6:66:f6:05:e6:c3:a8:4a:50:2b:
         5a:09:9d:44:7d:f7:3b:f6:a1:b4:ba:cf:f4:e7:09:1b:a7:ee:
         64:ac:59:44:1b:d8:be:48:b5:11:87:1a:cc:e1:f5:79:5a:8a:
         04:d1:06:21:8e:c7:38:20:a3:c6:ab:4b:d6:19:82:18:c0:dc:
         f8:61:9f:17:ec:cd:fb:c7:23:db:66:83:e9:0a:ed:4b:e3:9a:
         17:9f:da:c4:3c:4e:48:a7:93:c9:d9:8a:3c:a2:18:0a:20:1f:
         ba:cc:a3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org