Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa
File:                     206860e2-e972-3b6c-a4c3-e144604e1ae9.roa (raw, json)
Hash identifier:          9+NpoFPQI5bO6nIy4mJFhZoBAigNmO07CB74RI3FID4=
Subject key identifier:   DB:14:C7:70:8B:6F:0E:F4:B9:65:C3:73:1B:F3:31:6D:42:5C:E6:F7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094EF1116C48A1BA8FEE380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     395973
IP address blocks:        104.134.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ef:11:16:c4:8a:1b:a8:fe:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=8b53bec9-d131-4999-97a2-fdf36ef4f405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:be:dc:fd:36:8b:a2:a9:01:cd:88:c1:da:
                    ac:b3:5e:a9:0a:96:09:b8:c0:78:0f:5b:f1:08:10:
                    c4:b7:d4:28:0d:a5:df:d8:1c:2b:67:5b:ce:1e:cc:
                    e1:34:d3:aa:ce:4b:47:b2:67:b8:82:3d:0e:83:c1:
                    38:ea:df:51:77:95:ad:a9:d5:b7:1d:3d:ad:72:ab:
                    a8:3e:45:48:68:7a:0a:95:2b:72:6c:b9:93:b4:2f:
                    9d:3c:70:a1:6e:60:4e:7b:bf:3c:1f:c7:f9:1f:2d:
                    39:63:95:b7:36:08:93:67:13:31:9b:36:27:51:dd:
                    99:91:61:d1:16:ae:6f:92:a9:38:8b:3e:87:33:69:
                    a8:de:20:98:f7:3c:34:da:4a:cf:e0:19:c5:d2:9b:
                    f5:cb:1e:a1:c1:7d:b4:e8:92:83:ed:2c:5a:14:07:
                    e1:64:83:1e:03:fb:d0:eb:21:fd:a0:a2:a2:ed:d2:
                    ae:82:c5:d1:40:60:81:8d:76:49:64:84:f4:a3:a4:
                    20:54:39:5d:e3:7f:16:61:eb:68:bf:a0:94:ec:d6:
                    70:e8:db:03:53:6c:ea:15:3b:56:ac:ed:ab:11:fc:
                    47:34:bf:4c:70:e9:79:a9:3b:93:2e:f1:25:54:c1:
                    9f:9b:2a:61:83:5b:2b:da:c3:54:b9:e5:7d:bd:59:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:14:C7:70:8B:6F:0E:F4:B9:65:C3:73:1B:F3:31:6D:42:5C:E6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3c:cc:8c:50:9c:8f:a0:83:f3:1d:a9:1d:88:5c:64:05:8d:
         ff:f8:f6:3d:6d:a8:83:db:41:7d:b1:9a:48:3f:8f:72:62:05:
         35:b4:de:10:97:ea:48:ec:31:76:d4:e1:7f:0e:d6:19:cb:00:
         fd:fb:f9:ec:e6:3d:dc:49:2a:fb:9c:98:c7:b5:20:57:a2:cd:
         2c:67:0d:bc:d2:bd:d3:bd:f4:9c:87:87:aa:5c:16:d8:e4:40:
         90:97:cc:9f:ce:66:e5:19:db:76:14:03:f6:17:33:53:6b:84:
         8f:4b:43:f6:e7:02:85:68:0e:15:ba:18:03:9b:fb:d1:d2:a7:
         bd:11:94:ee:45:0a:6f:cc:fd:9b:16:01:59:42:0c:99:4c:41:
         92:cd:19:68:61:53:7e:65:6c:c5:ee:e5:be:50:11:18:e8:fc:
         0a:ad:06:99:f4:9e:43:e9:5d:5a:3f:6f:2d:21:fd:10:ad:a9:
         cd:b3:8c:31:32:24:ff:f8:5d:ec:cc:0d:33:1e:36:1a:ff:9e:
         11:b1:b2:c5:f8:1d:c2:74:f6:dd:8a:ef:08:cf:73:d3:52:b7:
         42:9d:4d:fd:62:69:24:b3:46:81:ce:ed:b8:59:99:3e:ce:fd:
         a3:ea:07:24:f8:93:19:24:69:bd:8b:56:9c:82:77:c3:4e:3c:
         5d:81:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:42:11 2024 by rpki-client on console-fra.rpki-client.org