Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa
File:                     1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa (raw, json)
Hash identifier:          GcEKTyCd5kQInzyNwM+2pMQYyQ4dlavRxqRcA7AHqjQ=
Subject key identifier:   B3:AE:5F:69:6A:E3:4F:A3:5D:E7:A5:43:0E:CF:EA:CE:28:06:F2:81
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285845328465DCCBF2CA914F15E480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa
Signing time:             Wed 13 Mar 2024 20:03:15 +0000
ROA not before:           Wed 13 Mar 2024 20:03:15 +0000
ROA not after:            Tue 11 Jun 2024 20:03:15 +0000
asID:                     41264
IP address blocks:        104.133.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:84:65:dc:cb:f2:ca:91:4f:15:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 13 20:03:15 2024 GMT
            Not After : Jun 11 20:03:15 2024 GMT
        Subject: CN=a0c17fa7-50d6-4cac-b816-26ea92e8e436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:10:36:4d:ba:5e:2d:19:ff:eb:a3:b8:f9:
                    a2:38:65:b1:c0:57:62:65:96:6c:1c:4e:ba:5a:4d:
                    c3:07:6a:6d:4c:41:b4:5f:8a:f3:a1:b6:e2:14:28:
                    3f:15:b0:1f:95:89:9d:6f:cd:8b:71:c2:1a:ba:bc:
                    ae:57:b4:2d:b4:8b:20:f8:6f:31:9e:d8:d7:eb:a1:
                    6b:ff:6d:5b:07:bf:4a:c5:ef:09:22:f0:36:83:d4:
                    0d:b6:3f:40:17:73:10:b6:33:cc:a3:d6:68:73:a3:
                    06:c6:6a:01:8c:25:4d:fd:12:29:73:a8:b6:b4:30:
                    be:2c:3c:4f:95:01:5d:e2:e9:a4:4d:7e:4d:01:ec:
                    e9:29:e8:46:16:c5:d3:34:b8:45:f2:fa:79:24:c5:
                    19:ec:90:26:3e:03:94:47:89:e9:31:a9:82:c9:73:
                    55:f4:82:4b:31:62:ed:1f:ff:2f:0a:57:37:6c:38:
                    cf:84:d0:95:68:1f:80:95:fa:58:01:0f:5e:40:d9:
                    c2:34:99:58:23:9d:8f:ef:fe:ae:15:9d:a1:5b:09:
                    e2:46:09:b3:be:ac:a7:9c:05:29:bc:52:8a:4e:71:
                    9a:fa:56:52:42:3c:0a:7c:5c:1e:15:4f:d3:77:e4:
                    20:7f:05:81:9a:d0:ac:d6:54:d9:2f:c3:ec:84:e6:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AE:5F:69:6A:E3:4F:A3:5D:E7:A5:43:0E:CF:EA:CE:28:06:F2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:c2:b1:32:a5:7c:e0:f1:51:eb:6b:dc:c6:e5:4c:74:28:
         96:21:0a:3e:bb:c4:b9:4b:ff:c3:34:ef:e5:55:77:4e:cf:56:
         28:fe:27:96:eb:82:b5:5d:93:24:e5:e0:87:f2:89:a4:b7:9e:
         d8:bc:c3:20:3c:fa:19:0e:7d:7c:9f:aa:1a:ab:02:74:bd:30:
         4a:69:b9:f4:17:3e:0e:7d:2a:e0:26:33:07:74:7a:ee:c4:cd:
         95:04:c3:1f:04:b5:f4:de:4a:e7:3d:a5:ce:4b:8f:27:66:ae:
         36:27:40:4d:d2:ee:1a:5d:99:39:8e:80:b4:6e:d6:66:fc:4c:
         a2:2d:fe:91:24:7b:34:45:5b:c2:7f:d0:9d:ac:c6:59:a9:a3:
         0a:89:26:49:f9:ee:cb:4a:70:a2:23:1e:74:51:42:ca:03:fc:
         bf:35:a0:0c:fd:68:7f:77:a9:1d:80:1c:00:03:be:e3:4e:c5:
         5d:5f:21:a4:b9:fb:8d:e2:ac:dc:f4:1f:5e:1f:eb:e2:dd:0e:
         68:b9:3c:c6:ce:e8:87:17:ca:ff:50:d9:a2:e4:10:67:b0:39:
         7b:06:49:d7:72:21:e7:29:71:79:76:f8:67:5e:df:94:68:f2:
         d1:d3:a5:7d:db:84:12:d3:fb:d7:eb:2c:af:a9:73:6d:82:4d:
         32:c6:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:17 2024 by rpki-client on console-fra.rpki-client.org