Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10f39a4b-4af7-3d9d-bb21-8cf40fb22924.roa
File:                     10f39a4b-4af7-3d9d-bb21-8cf40fb22924.roa (raw, json)
Hash identifier:          Z8ZNY2ksgj7+9nO654U+FAtiNz23fIBltwOTMgrQDRg=
Subject key identifier:   37:CA:95:58:29:E0:16:D4:D1:06:C4:18:41:24:D0:9F:4E:4D:23:25
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584540BA6306CDFABAFCE0980D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10f39a4b-4af7-3d9d-bb21-8cf40fb22924.roa
Signing time:             Mon 18 Mar 2024 22:13:21 +0000
ROA not before:           Mon 18 Mar 2024 22:13:21 +0000
ROA not after:            Sun 16 Jun 2024 22:13:21 +0000
asID:                     15169
IP address blocks:        104.134.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:63:06:cd:fa:ba:fc:e0:98:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 18 22:13:21 2024 GMT
            Not After : Jun 16 22:13:21 2024 GMT
        Subject: CN=43aeabf6-b6cb-4c1a-a4a1-af0f652e952e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:08:3e:33:f6:5e:3e:97:fe:dd:ec:97:44:
                    ca:a4:ea:c7:90:c3:42:65:90:44:68:ec:46:4d:27:
                    6d:29:1b:41:a1:00:f4:64:80:45:ed:20:5a:11:c5:
                    dd:46:ad:01:8a:a8:67:80:3b:ab:55:50:96:6b:de:
                    e9:ba:9b:8d:f3:4e:bf:00:f9:be:56:0a:6d:5e:8e:
                    2c:12:11:86:f8:2c:e4:e8:e2:fd:ac:c4:81:a4:07:
                    54:0d:43:fb:5a:0e:da:9f:c2:59:6b:88:5a:71:72:
                    97:13:0e:ee:c7:41:75:49:3f:78:3a:f9:78:23:c5:
                    7c:c8:cd:51:15:63:ba:1a:45:82:1f:9b:4e:f1:2f:
                    6a:d0:dc:00:62:e1:ce:24:6d:87:4c:f8:fc:24:7b:
                    17:26:30:c8:ee:fd:f8:2e:59:58:eb:51:a5:bf:92:
                    d9:02:d7:d9:74:79:8e:be:44:13:c1:51:c8:08:ed:
                    aa:d8:0b:b9:59:8d:da:2e:91:26:85:ad:12:a2:f5:
                    28:2f:6d:76:b6:1c:4c:d9:2e:7a:d3:ee:64:77:57:
                    1b:5f:89:85:ab:0f:de:3f:82:4a:91:12:30:1d:03:
                    9c:14:07:6b:e9:70:34:0c:b1:52:dc:fc:90:75:d8:
                    20:de:78:fd:19:14:7a:20:fb:b5:81:d3:ee:fc:80:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:95:58:29:E0:16:D4:D1:06:C4:18:41:24:D0:9F:4E:4D:23:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10f39a4b-4af7-3d9d-bb21-8cf40fb22924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:71:f1:3d:23:92:dd:b1:ea:d3:d1:30:6e:19:44:33:e8:24:
         46:10:12:42:d6:9c:a3:d4:a7:19:84:33:9e:e3:bd:9f:cb:ae:
         a8:38:13:d1:ff:9b:85:d1:97:46:32:d6:51:85:6e:fb:b8:98:
         26:8e:88:bc:3c:81:73:de:c1:e0:6f:19:79:7f:1f:99:b0:16:
         94:85:7c:a6:88:1f:47:a0:1f:d5:81:25:42:27:2d:bd:ff:82:
         a0:c8:18:e3:b4:cc:6a:c0:c2:d7:96:2b:17:44:e5:4d:a4:7f:
         1a:b6:3a:7d:ed:fa:23:28:bd:78:94:18:03:15:84:bb:3d:48:
         e7:8c:04:cd:2d:c7:0a:ac:9c:8a:eb:44:ee:b8:8e:d7:ff:35:
         56:37:5f:31:21:e8:8b:a0:c6:41:d7:5e:c1:40:97:3e:00:29:
         d4:af:3e:bc:0e:1d:74:1d:a4:99:39:1a:11:dd:74:f7:51:59:
         77:74:ab:f8:28:9a:01:7e:1f:12:09:e5:38:64:e7:2b:00:c1:
         bb:2c:9f:56:2e:d4:8e:d7:8b:3d:7c:25:da:24:fe:94:c7:ae:
         b2:2f:cd:ba:0c:26:db:74:9d:12:5d:99:c0:0a:f2:f8:dd:5c:
         00:1e:e5:55:0c:ae:e1:ba:2e:c9:2b:ce:41:a0:ca:d8:cf:a5:
         86:38:2a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:25 2024 by rpki-client on console-ams.rpki-client.org