Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa
File:                     0d37223d-5314-319b-9fe0-482a76573c2e.roa (raw, json)
Hash identifier:          1dQX5q0C7Z3qICmmz7ij5NhZgIIykhi2Q/JJbdt+nRA=
Subject key identifier:   73:DB:4C:48:C6:56:39:02:88:B4:43:6C:8B:2A:2B:61:83:BD:AE:60
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584535863C2A35D11B4B9B206B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa
Signing time:             Thu 14 Mar 2024 21:54:23 +0000
ROA not before:           Thu 14 Mar 2024 21:54:23 +0000
ROA not after:            Wed 12 Jun 2024 21:54:23 +0000
asID:                     41264
IP address blocks:        104.133.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:3c:2a:35:d1:1b:4b:9b:20:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:23 2024 GMT
            Not After : Jun 12 21:54:23 2024 GMT
        Subject: CN=6dd9d47b-7ce1-43cd-bdbe-03cdc95f10a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:76:ee:00:8f:f1:33:4b:c7:a6:f6:c5:5a:
                    19:68:0d:33:e8:86:e3:f3:27:87:19:63:77:70:5a:
                    20:de:24:c4:28:30:c1:64:33:38:b5:97:eb:46:ef:
                    24:ae:e7:cf:7b:58:79:f9:cc:98:76:ad:5e:72:db:
                    66:db:dc:4e:e7:d7:5b:ff:96:2a:70:0a:55:65:b8:
                    79:90:8c:69:d7:aa:cc:2c:42:b0:dc:50:71:50:20:
                    b7:f5:54:3b:65:af:56:d7:dd:ed:50:04:fb:17:b4:
                    0b:e6:26:33:d5:4f:12:36:ee:51:4a:65:d6:9a:db:
                    03:29:9c:8c:34:8a:c4:28:bb:ae:5f:e0:48:c6:57:
                    3a:bc:cc:2f:0c:78:a4:a1:ff:0f:ad:30:fc:cb:c6:
                    ea:ba:a0:41:07:7b:47:b6:8c:47:c3:b5:a0:8c:33:
                    c1:57:5f:5f:89:b3:82:eb:67:5c:1a:b6:36:0b:41:
                    0e:68:28:41:6b:ca:a8:52:f0:1d:6b:74:8b:cf:d7:
                    58:e3:41:77:6d:62:ba:d1:2e:72:11:e6:f9:1f:7c:
                    d3:5b:d8:d2:38:86:33:25:a7:77:75:55:58:33:7d:
                    1a:b0:40:ff:93:05:6a:13:e8:88:1e:fd:b7:8b:bd:
                    93:8a:98:db:d6:be:a1:44:f7:bd:86:ae:0b:40:bc:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:4C:48:C6:56:39:02:88:B4:43:6C:8B:2A:2B:61:83:BD:AE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:83:b5:de:77:b5:49:bc:4d:57:b2:40:eb:89:62:71:16:8f:
         81:1b:8d:3a:de:77:9e:7b:2b:5b:b3:78:2c:47:8d:67:34:5a:
         6b:16:c3:02:28:05:ff:a6:c3:ca:13:bb:f4:b7:a5:33:6d:e6:
         d1:05:cb:1a:5b:46:31:24:f0:4e:0d:5d:b5:c2:49:3a:bd:87:
         e5:ef:2b:66:b6:24:85:7a:ee:88:a2:da:67:78:04:11:05:6c:
         ff:01:da:3c:be:d0:d9:b3:f3:ee:98:e9:5a:1c:6e:ef:80:0d:
         8a:56:05:25:d0:58:30:04:90:5a:3b:56:57:c0:67:23:d5:16:
         e1:c3:dc:38:fc:36:9d:cc:fd:2d:df:15:3c:c6:6b:ff:dd:16:
         a3:9f:b7:da:51:7b:11:b3:8b:5d:43:2f:9a:cc:e2:88:91:31:
         30:64:f3:98:2d:81:8a:48:3b:d4:1a:51:b8:0f:b5:e3:cc:23:
         9b:ca:a4:a6:9d:09:c1:92:8f:f5:fb:27:b4:97:c4:db:c6:f2:
         20:82:94:2f:aa:32:bf:72:54:cd:bf:fa:05:4b:c1:53:9f:26:
         3e:af:5d:f4:e8:ac:e4:69:c2:a7:83:28:05:47:27:99:5b:1a:
         67:d5:3b:f0:85:b4:f8:45:2b:4b:d3:0e:62:4c:51:c0:f4:4f:
         71:38:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:24 2024 by rpki-client on console-ams.rpki-client.org