Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa
File:                     12b496d5-5cb5-36f8-baf0-9e729b598d53.roa (raw, json)
Hash identifier:          7QRbM8UpHo/9gYWrwf2we5Vr1VSdUNrcl5/Xxw9V7Js=
Subject key identifier:   C5:5D:20:85:F4:C7:60:34:89:CC:2C:0A:69:76:FA:9F:FF:AE:CB:9E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285847A30BE9EA84CE3A92EAB17CC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        170.114.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:e9:ea:84:ce:3a:92:ea:b1:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=928456f1-af8e-431d-b450-66fa3d7190be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:6e:93:c5:a3:ca:54:b9:0d:87:2b:9c:62:
                    43:d9:bd:0f:e3:39:d4:0b:37:9d:d0:0b:1d:ae:9e:
                    2a:c4:78:62:d9:da:89:34:ca:2a:e1:ea:6b:a0:d8:
                    c6:67:e8:ca:c5:fb:a4:50:c3:a5:ed:42:25:4b:ab:
                    64:9b:10:91:1c:7c:1c:6a:b4:82:80:5b:bc:dd:b8:
                    be:2f:11:fe:c9:2f:b8:ba:bd:17:46:9d:bf:59:a7:
                    71:8d:81:4e:b3:d9:b2:1d:37:67:65:63:c5:b1:ad:
                    ee:b5:e1:5d:fc:c4:f8:9c:04:96:7a:85:a7:bc:6f:
                    51:ec:97:c0:2b:e3:ec:8b:ab:d6:52:ce:42:d4:45:
                    5e:a5:1e:10:19:f0:90:41:1a:39:fc:49:39:99:71:
                    1d:3f:7a:09:19:75:21:ad:4f:09:c5:aa:64:19:97:
                    c8:e4:46:01:27:63:4b:dd:ba:29:e8:85:d5:89:66:
                    16:75:c0:5b:82:30:f6:2e:f5:1a:06:1b:44:48:92:
                    30:80:85:75:35:44:ce:b0:72:3e:de:ad:38:2d:a2:
                    6a:de:b7:8a:90:37:68:96:96:e9:cb:f4:50:28:ab:
                    62:12:68:f9:e4:ce:db:05:a9:29:df:1a:7c:34:fd:
                    25:c5:dd:a0:9b:f6:42:3b:ca:b0:2e:de:47:b0:c5:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:20:85:F4:C7:60:34:89:CC:2C:0A:69:76:FA:9F:FF:AE:CB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:33:c8:8e:cc:ac:ce:a1:e3:c7:c9:34:84:14:d5:bb:80:b9:
         54:66:d4:79:32:5a:03:bd:6b:ea:fa:7b:64:b5:8f:1b:8f:b6:
         e4:33:77:83:99:ad:01:d7:c6:26:d5:0a:05:75:08:c8:a8:f7:
         4c:21:a0:85:a2:ba:3d:98:12:73:b0:55:17:f8:25:ed:5c:38:
         88:e7:33:39:53:61:df:e0:e5:e7:ef:e6:b3:a8:55:f7:dc:e2:
         49:97:29:cb:b1:17:2d:88:e8:67:aa:63:d4:87:3c:87:b4:12:
         b2:8b:d4:f8:a2:2b:80:b4:83:43:bc:c1:b7:88:16:58:fa:f1:
         1f:a4:1f:e7:7d:81:6f:a0:da:28:ba:5f:0c:29:a1:a5:f5:13:
         b1:ae:0f:b9:a3:6f:d7:c4:c4:33:b6:c5:c5:9e:31:3a:0a:fe:
         a2:35:70:a6:d1:f0:d1:55:2c:58:a2:94:1a:3a:e0:4d:dd:1c:
         31:e6:ec:fd:07:7a:e0:d7:e6:a3:de:89:ce:a3:de:8e:39:cc:
         df:91:81:9e:52:43:b8:f1:27:3b:d5:c5:6a:fb:9e:a7:4f:ee:
         80:6e:0c:25:17:fb:f1:54:e0:e5:2b:f8:54:e9:bc:a9:87:ab:
         c7:d2:e7:30:f7:6d:44:7e:ba:ad:85:51:56:12:e1:e5:43:82:
         d1:f0:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:53 2024 by rpki-client on console-ams.rpki-client.org