Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa
File:                     100d407b-0506-34eb-b5f6-2bf73b584406.roa (raw, json)
Hash identifier:          Ma+h66hQnR+Pi+/uEy8osgmJx2nv5ZK6Ld9GOxKE34I=
Subject key identifier:   FE:3C:C6:23:24:97:86:B7:C3:A9:7C:7A:5A:42:02:37:3B:31:DD:99
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453586519026B11567EF4ADD80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa
Signing time:             Thu 14 Mar 2024 21:54:33 +0000
ROA not before:           Thu 14 Mar 2024 21:54:33 +0000
ROA not after:            Wed 12 Jun 2024 21:54:33 +0000
asID:                     41264
IP address blocks:        104.133.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:86:51:90:26:b1:15:67:ef:4a:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:54:33 2024 GMT
            Not After : Jun 12 21:54:33 2024 GMT
        Subject: CN=515e2a39-ce77-49f3-8992-6e69a7e299da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:c6:67:68:69:32:99:1a:77:55:84:e8:72:
                    a1:11:e0:f2:70:d6:e7:bf:95:78:73:3c:37:66:76:
                    ea:d5:55:86:f4:31:8b:33:73:65:52:ca:75:4e:b5:
                    71:ad:d0:54:d3:c2:b6:2e:e4:79:1d:80:6e:37:8c:
                    cd:b9:b9:81:a1:93:28:79:4c:3a:62:dd:85:9d:0e:
                    d5:62:18:3d:08:c1:4a:89:ad:ae:ff:7b:e3:32:45:
                    fd:5a:c7:8a:2c:64:99:6f:8b:c5:d7:9b:2d:61:2c:
                    c0:7f:f0:c0:d7:26:df:3b:f3:60:bb:7d:bb:8b:bc:
                    d4:30:d8:59:5c:03:7d:d5:59:16:78:05:35:b6:e6:
                    d0:17:c7:6c:6f:3b:1f:73:c4:28:d8:7d:b7:db:32:
                    9c:96:b0:ea:74:9c:9d:56:df:d4:d0:dd:d4:0e:b2:
                    19:7b:01:d5:e9:27:0f:6e:df:87:fb:c3:53:19:fb:
                    22:a2:45:94:e3:9d:d0:9a:84:29:93:3e:ad:67:9a:
                    6a:18:de:d6:1d:57:66:db:88:c1:9c:28:84:b6:4b:
                    86:0d:82:b0:e2:ad:a5:1d:22:90:49:fb:60:65:4e:
                    d5:74:88:9c:1d:30:5a:b5:1b:24:c4:d1:c4:c9:fa:
                    ef:b3:d8:ff:b2:cc:ea:50:26:22:ac:80:e2:53:d6:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3C:C6:23:24:97:86:B7:C3:A9:7C:7A:5A:42:02:37:3B:31:DD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:a7:a9:32:c4:a9:db:55:08:37:62:0d:4c:86:cc:6e:88:
         c5:92:ec:cc:f5:5f:e4:fe:44:f0:d8:5b:c9:c8:f3:59:fe:45:
         eb:8d:bd:79:44:0a:19:7e:4a:8e:1a:53:bd:5c:c1:af:75:ee:
         79:b0:0a:99:ad:09:1f:f6:8f:29:53:7b:f0:7e:65:e5:66:8a:
         48:54:6b:69:21:e0:1c:85:4c:3a:38:bc:67:bc:ff:86:05:0c:
         34:c1:17:59:7c:26:66:6b:0f:dd:00:01:6f:51:81:a4:6a:ac:
         a3:04:d3:39:2f:b4:fc:fa:cb:e3:42:f0:31:44:f7:33:54:b1:
         9c:da:b7:c5:0d:f6:2b:c8:60:0e:fe:71:8e:c8:98:0f:5f:5b:
         10:dc:26:09:fe:11:fb:5e:87:4d:8a:fc:15:82:58:69:82:bf:
         25:1d:e5:93:ad:71:b8:ba:df:df:72:0e:b3:0c:ef:c7:a7:a8:
         d9:2a:7a:53:d1:dd:65:be:5f:07:98:58:fe:cd:be:76:81:da:
         8f:83:b5:22:8f:97:3c:f6:3f:a0:1d:8f:25:bd:32:98:62:9f:
         bf:e1:66:c6:3b:7f:9d:b8:21:60:46:1f:52:06:41:78:03:fc:
         ed:05:75:4a:51:d9:d8:91:2d:66:81:d0:0d:88:20:db:cc:d5:
         45:66:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:24 2024 by rpki-client on console-ams.rpki-client.org