Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa
File:                     13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa (raw, json)
Hash identifier:          HiwtkuHIFbvjxAevSZ5ANaTCyGG1fwHPH7Q2GBI7QAQ=
Subject key identifier:   FF:1A:AD:F4:12:25:3D:B3:7C:B8:F7:F5:11:5F:9E:7E:A2:2E:22:96
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858453585FA74C7CF6959E12B63E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa
Signing time:             Thu 14 Mar 2024 21:53:52 +0000
ROA not before:           Thu 14 Mar 2024 21:53:52 +0000
ROA not after:            Wed 12 Jun 2024 21:53:52 +0000
asID:                     41264
IP address blocks:        104.133.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:85:fa:74:c7:cf:69:59:e1:2b:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 14 21:53:52 2024 GMT
            Not After : Jun 12 21:53:52 2024 GMT
        Subject: CN=f513ef6d-f1dc-4457-84c9-ce69b3bc04ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:6d:2a:4f:91:ec:59:95:12:11:3e:a8:2c:
                    32:8c:34:12:0c:59:e7:44:5e:c1:18:82:45:e7:a9:
                    96:95:75:36:02:78:c5:ce:af:7a:e3:5e:3f:49:c6:
                    7e:55:49:80:da:55:4d:95:52:3a:36:ac:c3:7a:08:
                    5e:1e:ba:36:e0:41:a0:88:47:23:37:1b:4f:e3:e5:
                    96:b2:4f:10:04:cf:f7:fd:8c:89:8f:e7:21:21:6a:
                    c0:2f:f7:c6:5d:3d:6a:4b:33:7e:73:a2:5d:31:59:
                    f7:33:43:18:0e:89:1e:13:42:70:c5:bc:8c:e3:54:
                    e6:87:3d:be:b7:a9:67:f1:04:d1:cc:7f:9d:27:09:
                    36:7b:ed:2a:83:62:d0:f2:20:de:5f:a0:ed:a4:a4:
                    fb:13:a4:75:ab:31:1b:17:4d:cd:87:ab:78:38:d9:
                    44:a7:b5:f6:96:85:3f:db:10:f1:44:c5:e0:de:7c:
                    60:86:86:cc:8a:fe:0b:86:6b:2d:a5:8c:cc:4b:a6:
                    25:2e:b4:db:8b:52:7d:64:75:12:ce:76:c2:14:23:
                    79:ad:d7:33:8d:c4:75:29:9d:37:d5:67:a6:75:0d:
                    0f:af:c0:f9:9e:bd:6e:8f:2f:81:ae:cb:ab:ed:48:
                    12:bf:e3:8b:59:d4:0c:ac:c1:47:f1:a4:b4:6d:44:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:AD:F4:12:25:3D:B3:7C:B8:F7:F5:11:5F:9E:7E:A2:2E:22:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7f:fa:5b:32:f6:d1:a2:14:59:f0:8a:ad:2c:1f:4c:37:7a:
         1d:fc:d9:6a:b8:95:7a:19:2a:8a:42:bf:2e:36:57:ed:28:e0:
         a3:fe:20:68:7e:d8:75:d7:ec:c5:78:65:7b:41:97:67:50:e7:
         47:a4:91:96:74:3b:e8:b2:77:af:4a:c8:65:4c:95:8d:bc:4a:
         1f:52:17:03:50:d4:fe:f1:25:d4:eb:46:cc:63:d4:6e:88:cf:
         4a:60:92:df:17:61:b9:82:6a:6e:63:34:35:b1:6a:f7:14:70:
         b9:8c:62:e4:13:6b:3f:ac:d6:59:d3:9d:a3:40:6f:39:99:70:
         9b:d9:62:7d:e6:b7:9e:5f:49:c0:ea:7d:f3:99:48:02:8a:4b:
         1a:40:b5:5e:d4:cd:6c:00:2b:9d:ff:78:96:41:54:02:25:6f:
         b9:7a:af:b4:99:0c:7e:81:b9:9a:b1:8e:ec:48:bf:e3:7b:dd:
         c1:81:2a:77:0c:e8:59:f8:ff:d0:4a:5e:67:3f:14:49:d9:9b:
         20:87:c3:42:94:54:9b:be:2a:51:5b:22:cc:90:2d:a7:43:45:
         06:99:28:3b:bc:1b:4b:e9:81:17:bb:05:cd:91:cf:ae:f0:82:
         46:c2:0c:6e:52:ea:d4:2a:20:10:60:4f:b9:66:f4:8e:1a:3c:
         d5:f8:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:11:25 2024 by rpki-client on console-ams.rpki-client.org