Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa
File:                     f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa (raw, json)
Hash identifier:          pTg5LBMtMqMSrQA6zKzWEz6hmLtap5dHdRaEO8NT14k=
Subject key identifier:   93:BB:2A:40:02:86:D3:9C:72:CD:C4:DF:9B:9A:0A:96:E1:66:78:C9
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584728CAD0364A019652482584A0
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa
Signing time:             Mon 09 Sep 2024 18:00:56 +0000
ROA not before:           Mon 09 Sep 2024 18:00:56 +0000
ROA not after:            Sun 08 Dec 2024 19:00:56 +0000
asID:                     5645
IP address blocks:        104.246.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:ca:d0:36:4a:01:96:52:48:25:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Sep  9 18:00:56 2024 GMT
            Not After : Dec  8 19:00:56 2024 GMT
        Subject: CN=87bcc6ef-3c78-4810-97d6-380478108ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:f2:19:4b:28:c5:25:3e:dd:71:18:4d:55:
                    77:8a:34:3f:e1:fa:0f:10:b1:05:f9:1c:46:52:6e:
                    0e:48:52:d1:ba:d7:58:49:35:29:80:39:eb:e1:c6:
                    e2:69:94:4a:33:9f:54:02:63:3e:4e:66:76:70:c4:
                    db:80:e6:2b:17:c2:3f:b3:c7:a5:ff:6a:70:b3:a1:
                    da:46:97:0e:7b:9f:40:07:c9:1e:5c:e8:82:d5:1c:
                    03:63:dd:95:2b:0e:48:32:07:35:26:bf:55:de:d7:
                    a8:4b:bf:2d:3f:37:e4:2d:e8:e4:1b:8b:31:48:c5:
                    73:ed:74:c9:94:b7:e6:e9:02:3a:91:c0:5d:17:01:
                    1a:af:98:c5:4a:41:38:b5:5a:6c:a3:d5:8a:ba:67:
                    99:1c:00:45:69:b2:23:0f:9f:c5:90:33:f5:62:c5:
                    c1:df:5f:70:a7:bf:a9:80:65:ef:18:57:f2:3a:7b:
                    f0:1f:71:8f:06:24:70:ba:58:ea:8c:6c:f1:ca:d9:
                    52:de:be:a5:67:b7:f3:dd:05:86:da:d5:f1:7f:d6:
                    f1:7b:7e:71:fc:57:98:a9:40:76:bf:8e:fc:17:ff:
                    fb:a4:09:69:3c:77:f8:d6:ce:2d:2f:97:0f:34:d6:
                    3a:65:05:4f:d5:50:31:b0:ac:39:76:fb:de:70:e7:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BB:2A:40:02:86:D3:9C:72:CD:C4:DF:9B:9A:0A:96:E1:66:78:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.246.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:74:bb:43:24:14:ae:81:3f:ff:ce:4a:eb:0f:ce:f4:c5:8f:
         79:8f:89:e9:37:74:dd:3b:0f:aa:a0:4e:2a:08:3f:18:ce:2a:
         63:c9:23:85:d4:ea:73:07:61:e0:12:b3:e6:d8:e4:b8:f0:a4:
         84:a1:26:11:5d:c6:84:41:3d:75:b6:19:13:03:9f:df:32:40:
         a4:2c:b9:62:a8:32:90:bb:34:c9:3a:c8:05:02:a3:6f:84:a5:
         62:49:10:2d:a1:88:09:47:b2:25:8a:27:2b:e0:a4:78:3f:1a:
         07:c7:5a:a6:1d:4a:f4:27:d5:7f:cf:69:13:13:a2:8a:8f:02:
         7f:a6:b7:d6:1e:f7:6d:97:86:23:77:80:24:e6:7d:f0:f6:0f:
         8c:e9:c0:29:3b:f3:8f:cf:f8:52:a4:c5:65:cc:36:9f:43:11:
         9c:37:62:c7:1d:dc:f5:9d:b1:2e:2e:59:79:20:e2:05:39:f5:
         0b:ee:bb:16:80:8f:8d:14:f4:2e:c2:af:44:2a:14:38:5c:70:
         20:48:c5:40:88:40:a7:bf:82:de:10:79:a9:97:eb:2b:41:b9:
         52:51:a9:57:c6:cf:db:26:9e:b8:e9:77:54:5b:13:5e:5e:71:
         d5:b2:67:8d:18:16:59:bb:c8:3a:2f:f1:c3:c4:7f:a0:05:8f:
         5c:64:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:43 2024 by rpki-client on console-fra.rpki-client.org